Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203132303636.roa
File:                     3139302e362e3134342e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier:          Ponjbruw86Jnxjkhgo6wRlqi7Eq6hd2nRp5Xt2V0ICM=
Subject key identifier:   34:F5:AE:32:BE:4F:4B:FC:EC:F4:13:40:49:D0:08:CE:2C:A2:0C:41
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       5745E283EF61956DBB4AD5EE1AEB876C66E3112B
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:47:01 +0000
ROA not before:           Tue 04 Feb 2025 18:42:01 +0000
ROA not after:            Tue 03 Feb 2026 18:47:01 +0000
asID:                     12066
IP address blocks:        190.6.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:45:e2:83:ef:61:95:6d:bb:4a:d5:ee:1a:eb:87:6c:66:e3:11:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:01 2025 GMT
            Not After : Feb  3 18:47:01 2026 GMT
        Subject: CN=34F5AE32BE4F4BFCECF4134049D008CE2CA20C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:5d:c4:4b:11:15:73:4b:bd:dd:05:c9:05:
                    d5:fd:1b:1a:fd:97:77:7a:44:42:9f:a7:40:f0:19:
                    d0:6b:8a:84:ec:8e:e0:90:75:f0:10:f8:60:85:61:
                    f2:91:e6:85:8c:db:0e:dc:3f:67:ae:a4:bc:c8:8c:
                    ec:bd:0c:b0:9c:3b:91:3a:fa:79:45:53:6a:0f:e0:
                    c1:9b:dc:52:02:d3:e9:94:c4:6e:e9:b9:b9:bb:99:
                    dd:87:51:0e:91:61:b8:ad:fa:4d:8f:d7:d4:5d:72:
                    db:3d:01:16:6f:ae:cf:29:f6:85:26:1b:21:f5:ad:
                    03:a3:9b:b1:0a:47:a9:6a:c8:1a:c6:8e:90:6c:04:
                    aa:09:48:ec:d6:ec:4e:3d:50:2f:27:ef:9d:fe:ae:
                    d8:68:52:b4:09:ab:0c:f9:b6:bd:24:4d:9d:88:57:
                    6b:0c:50:9f:3f:ec:05:2c:98:b0:78:39:6d:c9:0f:
                    a3:78:5e:6f:2d:ed:c6:50:97:9e:4e:8c:21:6a:ff:
                    cb:a6:19:d5:9c:61:01:17:c8:58:80:5e:74:10:14:
                    22:b4:54:c5:8d:a5:50:62:cc:43:61:d2:9f:53:45:
                    27:93:f7:76:1e:3b:ee:7e:70:44:89:74:84:7a:20:
                    a4:81:50:48:9d:63:d6:df:0a:6b:94:21:03:51:d9:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:AE:32:BE:4F:4B:FC:EC:F4:13:40:49:D0:08:CE:2C:A2:0C:41
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:df:89:07:c4:9c:b2:35:68:6c:77:63:9e:03:8c:8d:fd:67:
         86:a5:bd:04:29:06:c4:c7:59:fb:2d:f1:2d:b1:ca:de:9e:9c:
         70:00:c5:aa:0d:c9:d6:df:f0:ca:0d:f3:bd:07:57:77:40:9b:
         7c:da:48:cc:df:51:de:4e:73:88:ee:78:89:91:81:fe:e4:4b:
         1b:5e:ee:db:01:49:ca:f9:77:d6:76:c2:05:0a:72:08:fe:e4:
         2e:4d:91:f0:a3:5f:31:6b:e9:b1:07:66:30:6f:e3:3d:2c:15:
         96:5f:3d:d2:94:b0:59:96:d9:e2:d6:4c:ea:17:50:a9:7f:b3:
         dc:b7:64:3f:2d:33:c3:5b:c6:87:16:6b:03:74:60:8a:c8:ee:
         4e:dd:64:f7:6d:ac:36:8b:b0:1c:b9:d6:f0:eb:4f:b7:fd:96:
         cf:63:a8:ad:75:37:94:69:2d:16:68:d4:de:20:e0:6c:16:8f:
         49:77:91:97:2b:93:67:07:76:89:00:bc:20:b2:1e:71:54:b6:
         de:f4:6b:25:34:79:3f:5f:79:ae:df:d0:11:95:06:89:9f:93:
         3b:2b:5a:11:c5:9c:a5:01:eb:34:22:56:e9:6d:1a:f9:a3:1d:
         87:57:8a:c9:83:e0:28:1d:0b:f3:84:4c:4d:c1:9a:dc:dd:a1:
         15:6e:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:42 2025 by rpki-client