Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203132303636.roa
File:                     3139302e39342e302e302f31392d3234203d3e203132303636.roa (raw, json)
Hash identifier:          754QFik4szO9kvgfBbNTl8upripo6iWaaJd2JoVOumI=
Subject key identifier:   C1:8A:5A:98:AC:56:C2:12:DD:EB:A0:D1:C0:A3:15:AE:E3:6B:98:C9
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       210E2853924251277DCE6AA68F5E0458E598DEA5
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:47:00 +0000
ROA not before:           Tue 04 Feb 2025 18:42:00 +0000
ROA not after:            Tue 03 Feb 2026 18:47:00 +0000
asID:                     12066
IP address blocks:        190.94.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0e:28:53:92:42:51:27:7d:ce:6a:a6:8f:5e:04:58:e5:98:de:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:00 2025 GMT
            Not After : Feb  3 18:47:00 2026 GMT
        Subject: CN=C18A5A98AC56C212DDEBA0D1C0A315AEE36B98C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:32:e4:32:97:c4:2e:57:fa:59:9d:1f:9b:
                    41:1a:68:4d:5a:15:92:a7:62:da:00:34:9b:d0:17:
                    b7:ce:78:1e:7a:9f:ea:64:cf:b5:1a:ed:ad:2b:a1:
                    99:cd:b9:4e:f9:f2:62:35:ca:35:f9:fe:35:8d:0c:
                    fa:3f:55:44:88:51:c1:0b:7c:33:04:53:20:b6:00:
                    28:68:d5:68:9f:52:05:be:9a:a8:fe:dd:77:65:24:
                    67:2c:f4:98:00:3a:54:e1:44:5d:e1:d8:fe:3a:cd:
                    14:eb:17:e1:46:bc:da:55:61:77:24:f3:fc:d9:3d:
                    85:51:6a:af:11:21:d1:4e:c1:9b:ba:bc:30:75:0a:
                    9a:cb:e2:3e:3e:f7:94:37:26:65:eb:1e:21:36:a7:
                    ee:00:08:cc:42:86:e6:9a:91:f8:87:2a:83:bc:16:
                    a8:28:d6:28:48:6d:23:13:1d:18:76:65:1e:74:c7:
                    60:d9:d7:9f:e4:69:62:30:e5:2a:68:26:f3:8a:80:
                    e3:ae:2d:66:a7:ae:fe:39:94:72:65:6d:62:08:04:
                    71:29:ea:74:5a:bf:24:18:0d:79:45:aa:18:ef:a0:
                    2c:09:de:e6:0b:e3:0b:0c:e2:43:32:26:7b:8b:dd:
                    ee:b0:7d:31:f6:86:0f:6c:ae:70:be:c6:c0:3d:77:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:5A:98:AC:56:C2:12:DD:EB:A0:D1:C0:A3:15:AE:E3:6B:98:C9
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:23:05:c7:5b:8e:a0:a6:7f:80:63:df:33:35:90:1f:6a:
         4f:55:0d:0f:77:1f:f6:8d:65:2d:de:ba:24:4b:1f:11:ec:d2:
         c3:68:2a:21:4e:3b:2b:c6:9e:b0:0e:b6:36:f0:e2:aa:dc:26:
         6f:3e:e6:bd:24:8a:ab:d6:ff:b2:69:d8:f1:15:34:44:e9:1e:
         9e:e6:8e:50:08:a3:4f:09:2e:e7:53:60:0b:68:54:18:2c:1f:
         6a:fe:86:c2:2b:d3:db:41:89:b0:2b:ac:29:7a:68:f2:74:a9:
         06:3b:84:fe:02:b9:bf:d3:8f:1d:9f:e0:3d:6e:02:70:64:99:
         07:8c:c5:ab:be:69:6e:1b:dc:fa:b6:65:fb:df:27:8f:a9:67:
         82:bd:24:e6:60:70:a1:8a:99:14:bc:a7:49:63:24:f5:9e:d9:
         c3:39:69:91:61:29:94:7e:46:5b:81:ea:03:a4:0f:54:ab:8e:
         c8:89:5c:65:0e:1e:73:68:73:e9:d9:b9:91:3f:a5:a6:af:22:
         7c:c1:40:b5:e8:b6:df:6a:50:ca:be:82:aa:28:85:33:8c:23:
         ee:c8:05:fd:46:7b:cf:dd:40:b3:19:06:fb:c2:c4:02:26:5f:
         a5:d1:0b:0b:32:dd:e1:dc:6b:c9:84:1e:5c:7c:b3:e3:fb:7a:
         ec:5b:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:04 2025 by rpki-client