Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa
File:                     3139302e362e3132382e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier:          J15o2WwdohXAsx0V8JYBwKqAOgy4oE3xUoAi3QEsoy4=
Subject key identifier:   2E:C9:E9:73:67:AC:41:AA:78:4E:5A:4C:56:7E:10:E7:E9:46:27:C8
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       093DF67A6C4B15456AC8FBEC7C6CFA4DE9583235
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:46:56 +0000
ROA not before:           Tue 04 Feb 2025 18:41:56 +0000
ROA not after:            Tue 03 Feb 2026 18:46:56 +0000
asID:                     12066
IP address blocks:        190.6.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:f6:7a:6c:4b:15:45:6a:c8:fb:ec:7c:6c:fa:4d:e9:58:32:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:56 2025 GMT
            Not After : Feb  3 18:46:56 2026 GMT
        Subject: CN=2EC9E97367AC41AA784E5A4C567E10E7E94627C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:bd:62:69:0e:95:fc:3d:c5:b3:c9:0c:bd:
                    89:91:3c:82:05:10:b4:e6:de:41:bd:e4:11:2d:21:
                    52:36:ab:a2:cf:da:f4:7e:81:75:fa:f9:6d:70:7c:
                    d2:da:47:a4:be:22:e3:b6:a8:35:da:ee:34:ad:4e:
                    83:ef:95:6c:55:20:dd:67:21:dd:35:3c:e4:77:55:
                    ab:18:d1:14:b8:b0:6f:c8:40:f7:6e:3d:44:c8:b8:
                    a5:01:81:a6:8e:04:6f:98:d6:ad:21:23:1a:db:9d:
                    9f:7f:64:fb:ce:ff:ee:7f:b7:d1:de:a7:e5:f7:c7:
                    57:22:f3:70:1b:ac:9b:1f:cd:b7:c9:ac:10:fd:bc:
                    57:a8:86:d9:4e:7f:f6:d9:fc:d3:5c:bb:bb:f6:06:
                    2d:08:6c:e5:d4:9a:c6:6b:3d:a8:89:74:f7:07:c8:
                    89:f3:93:e2:0e:7f:48:7d:1d:68:7d:25:77:2f:a6:
                    88:98:93:f5:bf:94:1c:2c:01:dc:71:d4:9a:6e:15:
                    f5:f0:0d:74:e0:31:2e:96:54:0b:fa:10:0b:49:fc:
                    e3:ca:f8:97:fc:77:d4:dc:b6:30:2e:1b:5b:e8:28:
                    66:3b:93:78:02:0a:9c:de:80:36:25:06:5e:ca:79:
                    91:49:19:9e:56:ac:a5:30:f0:dc:88:fe:33:90:79:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:E9:73:67:AC:41:AA:78:4E:5A:4C:56:7E:10:E7:E9:46:27:C8
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:42:e9:57:44:42:be:20:dc:20:d1:3b:aa:3e:f6:f5:f5:00:
         05:40:7b:78:19:96:5b:cc:e6:36:12:6a:81:47:a7:57:eb:4a:
         9e:02:1e:02:82:c2:67:ed:8b:f4:74:75:6c:f0:96:f5:b8:97:
         42:43:26:1e:cd:fd:62:ae:e9:b0:ca:19:f7:71:5d:fa:86:8d:
         cb:a7:69:fe:41:f0:8a:ac:88:7c:1f:a1:b4:97:94:6a:b1:6e:
         ef:39:16:35:f1:85:0d:35:c0:70:8f:f5:b6:43:26:cc:ff:8f:
         ac:fb:f9:49:36:4d:48:e0:30:9a:af:68:e0:f1:a1:9d:1a:f7:
         96:07:8e:23:3b:a1:c1:84:82:13:d7:57:6d:b1:82:9d:58:20:
         90:8e:c1:93:8d:9a:f1:92:4c:4e:56:26:10:60:a2:24:3e:44:
         dc:bf:a1:df:8b:21:14:d2:a0:68:c1:33:ce:34:f2:5f:47:ad:
         6f:1f:ec:ec:ee:d0:92:7e:08:5e:03:51:19:80:fd:11:fc:6b:
         e2:9b:cb:2a:ca:69:41:70:0b:be:10:83:73:a9:27:d3:d0:95:
         41:56:98:72:d2:e4:9a:69:a8:a8:e1:02:0c:96:d0:53:e5:9d:
         30:da:45:ec:66:fb:8d:59:06:05:08:a6:1d:a0:90:95:2d:ee:
         07:e9:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client