Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203238313138.roa
File:                     3139302e362e3134342e302f32302d3234203d3e203238313138.roa (raw, json)
Hash identifier:          fVbTcityXyyBEbqCv2mfmv2KPcQ8r9CMpcG9rLSDSZQ=
Subject key identifier:   F4:59:36:63:66:0E:21:EC:B1:23:3A:6D:45:DE:B8:3C:43:91:EB:6B
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       2650071BA2B015660A6B8D16543B81D1A6E9441A
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:46:57 +0000
ROA not before:           Tue 04 Feb 2025 18:41:57 +0000
ROA not after:            Tue 03 Feb 2026 18:46:57 +0000
asID:                     28118
IP address blocks:        190.6.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:50:07:1b:a2:b0:15:66:0a:6b:8d:16:54:3b:81:d1:a6:e9:44:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:57 2025 GMT
            Not After : Feb  3 18:46:57 2026 GMT
        Subject: CN=F4593663660E21ECB1233A6D45DEB83C4391EB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:63:42:99:c7:53:19:af:92:4b:ea:66:b5:
                    dd:a5:9c:ca:16:d6:b8:1e:57:18:da:29:d4:2c:4e:
                    df:de:52:b3:f3:63:09:cf:f5:61:c5:fe:86:3e:50:
                    d3:0e:11:3e:11:40:06:bf:ea:d6:eb:8a:48:90:a1:
                    00:f7:0e:35:30:c8:c6:05:05:90:fd:99:d3:53:68:
                    00:2e:63:22:b6:69:27:c9:23:1c:08:93:0b:cc:c8:
                    6d:50:18:c7:99:b7:cc:36:cd:99:cb:0d:0b:ce:81:
                    c7:02:07:89:de:d7:0d:0e:07:8e:89:e3:b8:da:22:
                    3d:13:2b:6a:77:47:7b:04:af:a6:51:ea:1b:02:8b:
                    73:23:5d:64:14:72:a8:45:85:76:a0:59:b7:fc:26:
                    0a:43:07:17:9a:e1:19:3a:02:39:6b:43:77:f9:ec:
                    43:c4:86:7e:57:15:98:4f:36:e3:f5:bd:12:c3:6a:
                    ea:6d:ae:be:4d:62:ae:e3:7a:83:e9:91:41:85:06:
                    de:12:74:36:20:a0:ac:53:0d:e0:af:a9:44:39:29:
                    96:08:2c:de:5a:39:6f:da:ec:fd:c0:b1:46:bd:6e:
                    aa:65:4a:59:0d:70:c1:a2:35:40:10:88:b8:c9:3a:
                    a8:07:99:7f:b2:9c:bf:bd:df:d9:42:90:de:31:34:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:36:63:66:0E:21:EC:B1:23:3A:6D:45:DE:B8:3C:43:91:EB:6B
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:60:43:cb:54:3d:8c:ce:66:2f:d4:2f:c0:22:eb:16:ff:15:
         90:4d:b5:a7:89:4f:f1:02:76:f8:30:81:95:6c:69:b8:bd:d2:
         b9:8a:80:9b:b3:0c:58:0f:eb:c6:f3:2e:c9:18:c4:e5:d5:9a:
         8e:81:ef:9f:7f:cd:e9:5c:71:70:20:37:8e:a4:93:5b:03:04:
         ba:47:49:84:15:a1:2c:5a:ba:1e:1d:83:b1:72:dd:ca:b7:3c:
         ba:d5:91:e7:5c:21:c1:95:29:59:bc:d7:28:47:81:2f:a8:07:
         8d:b0:c6:e8:b4:7d:ee:d5:02:1c:e5:a6:dc:9e:c6:e2:9a:17:
         10:d9:e6:7d:5e:be:ad:78:5f:79:57:0c:f8:83:e6:68:62:bb:
         00:5b:8f:12:13:57:37:af:03:85:c4:63:af:6c:a0:39:59:05:
         97:72:e2:bf:26:10:6d:9a:af:b9:d4:5d:dc:16:e5:5a:af:45:
         bb:a9:7a:5a:59:4c:02:2b:ac:f5:57:8d:34:68:a8:89:09:0a:
         b0:5c:90:29:f5:f3:6f:36:2d:e2:66:19:d7:4d:29:44:b2:57:
         f1:1a:ae:2b:df:26:4f:23:57:51:3a:3a:9c:c5:de:33:62:d0:
         e4:29:fa:82:49:8a:e3:6f:a0:4d:da:fe:62:b5:ba:d7:37:97:
         0c:86:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:03 2025 by rpki-client