Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e36342e302f31382d3234203d3e203238313138.roa
File:                     3139302e39342e36342e302f31382d3234203d3e203238313138.roa (raw, json)
Hash identifier:          efw37TF2nnkJLEBEpzGWY4GT48G4F8+bHp7vQTwVAXI=
Subject key identifier:   6A:30:94:5C:C8:24:13:37:BD:5A:97:55:12:3B:21:0A:D8:27:7D:D9
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       66E266CB4D8B8B5F4F5E9DD85570E5AB2016E57E
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e36342e302f31382d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:47:01 +0000
ROA not before:           Tue 04 Feb 2025 18:42:01 +0000
ROA not after:            Tue 03 Feb 2026 18:47:01 +0000
asID:                     28118
IP address blocks:        190.94.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e2:66:cb:4d:8b:8b:5f:4f:5e:9d:d8:55:70:e5:ab:20:16:e5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:01 2025 GMT
            Not After : Feb  3 18:47:01 2026 GMT
        Subject: CN=6A30945CC8241337BD5A9755123B210AD8277DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:c0:e4:60:5e:6e:d5:bd:23:18:0a:ca:46:
                    6e:17:2e:50:eb:56:47:5a:d3:1d:0d:2b:b8:48:55:
                    4f:be:01:c2:11:8e:a4:5d:19:d3:42:12:3a:4e:38:
                    5d:af:ce:9a:61:4e:d5:6e:8d:1d:26:32:e5:ba:fd:
                    2f:af:51:1c:45:85:28:b7:b0:32:d8:43:f0:a5:c3:
                    ae:f3:19:c6:d5:49:f5:7c:ae:e3:6e:17:21:70:0b:
                    58:3a:f3:df:1c:40:2b:e6:d1:73:ae:d8:f4:f4:1b:
                    6f:73:02:e8:80:d6:c1:8f:7d:9d:b2:5c:be:a0:12:
                    6b:5a:d9:1c:40:a2:00:2c:93:e3:70:71:bf:65:3c:
                    ce:f5:6e:58:f4:19:8e:3d:c5:a6:a0:d0:6d:bd:0a:
                    13:5e:54:b7:ca:69:74:d5:c1:11:2f:ac:d2:d1:47:
                    6d:7e:42:a0:d7:71:a6:95:dc:32:b2:81:94:21:58:
                    09:94:70:6d:5e:ce:0f:c8:97:14:64:9b:d3:03:7c:
                    0c:f0:29:33:59:b7:1a:e5:9e:ae:6b:1c:f6:98:e4:
                    f5:c9:c4:16:d1:7b:98:f3:27:c5:81:51:73:54:a4:
                    30:e5:3a:21:c6:68:5e:8c:9b:b3:ea:a1:8a:e4:39:
                    5c:0e:71:b4:5a:a9:59:30:d1:8a:76:10:b5:43:44:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:30:94:5C:C8:24:13:37:BD:5A:97:55:12:3B:21:0A:D8:27:7D:D9
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e36342e302f31382d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:9b:61:97:4a:96:12:74:c4:f6:06:41:a5:b6:6e:5b:78:
         32:61:66:a2:ec:32:77:1f:99:f6:b7:f9:e7:6f:23:6d:02:b3:
         84:ac:23:b9:72:fa:e4:39:06:ba:8f:83:58:4c:c4:6f:82:bc:
         b7:5c:dc:76:41:e9:96:18:a2:6d:ac:de:cd:34:fb:c5:6d:da:
         e7:db:d9:09:e7:70:f8:ec:59:d0:d3:93:31:c2:84:ec:3a:c2:
         34:b3:80:5f:2a:2e:9d:d9:3a:bf:fa:2d:9f:e5:3c:d8:70:92:
         24:8c:d4:4c:b5:cf:1f:23:9b:86:ce:0f:15:dc:1f:3a:21:c0:
         10:85:8e:6c:c9:b2:72:5b:cf:25:d3:8e:41:26:9d:64:8a:04:
         c0:45:67:3e:02:ea:57:68:1a:2c:6e:90:83:a1:88:82:2b:e5:
         f5:6e:57:2c:74:f8:05:f8:eb:70:06:b7:bb:b9:2e:9f:8f:c5:
         5d:73:2d:f6:28:57:bf:5b:84:5c:13:c8:4f:f3:05:91:de:00:
         92:e3:a2:5b:3f:e3:a7:5a:5c:66:b7:09:22:06:27:f7:34:42:
         f6:38:ef:7a:cc:ca:10:ed:12:75:9f:c2:91:93:d3:c0:95:2c:
         f3:1f:58:0a:ee:cf:a2:29:c0:8c:5f:05:15:0a:10:60:a8:76:
         f8:d9:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:19 2025 by rpki-client