Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3139302e362e3234302e302f32302d3234203d3e203237393535.roa
File:                     3139302e362e3234302e302f32302d3234203d3e203237393535.roa (raw, json)
Hash identifier:          FWSB//aCRaDut7SAlszzCIBW44qmr3v0xJwZFkQx55A=
Subject key identifier:   B1:0D:6E:51:3A:F3:C7:FF:5E:1F:EF:60:F3:C9:2F:10:11:3D:10:89
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       3EE42C96C7C85311F1785FACBB295D3CD2445EEF
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3139302e362e3234302e302f32302d3234203d3e203237393535.roa
Signing time:             Tue 04 Feb 2025 18:44:06 +0000
ROA not before:           Tue 04 Feb 2025 18:39:06 +0000
ROA not after:            Tue 03 Feb 2026 18:44:06 +0000
asID:                     27955
IP address blocks:        190.6.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:2c:96:c7:c8:53:11:f1:78:5f:ac:bb:29:5d:3c:d2:44:5e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Feb  4 18:39:06 2025 GMT
            Not After : Feb  3 18:44:06 2026 GMT
        Subject: CN=B10D6E513AF3C7FF5E1FEF60F3C92F10113D1089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:84:d7:a7:5f:d6:ed:73:bb:9b:88:be:06:
                    86:b9:c7:ce:25:47:04:c7:3a:ec:a9:a4:e7:ec:5b:
                    47:4d:c2:4b:82:0a:c7:b3:ed:8c:3e:4c:12:fe:10:
                    9c:db:63:04:cb:98:5b:3d:01:29:cc:ba:dd:e5:ee:
                    0a:8d:ca:25:8e:36:66:d0:ab:6f:cc:09:61:41:97:
                    39:6b:fb:ba:31:a2:be:84:56:17:05:77:7a:07:53:
                    4a:0f:c9:08:9a:bd:17:90:85:11:cd:61:45:b9:a9:
                    bb:47:4b:ae:7f:96:b9:8f:a9:34:e7:ac:e6:0c:c5:
                    fd:8d:6d:4c:ee:a0:fd:d6:11:6d:5b:b5:09:a4:8c:
                    5e:c3:bc:b6:5c:05:a3:9f:1d:f5:e2:04:ae:98:d8:
                    34:5c:4e:18:a7:0d:0f:a4:da:02:fc:75:e1:37:4a:
                    28:97:d5:fa:c6:49:0f:c9:c1:f2:84:88:43:1c:bf:
                    c0:4e:a5:ff:ce:ed:af:63:a5:f9:c0:b1:dc:a2:26:
                    0f:c8:2d:66:84:ae:31:6f:99:b5:3c:98:c4:a3:26:
                    2a:02:33:3f:67:c4:a5:59:5d:00:c6:9f:f9:8f:ef:
                    13:b3:12:04:e2:65:7c:2d:92:74:b8:fe:30:46:92:
                    0c:b9:69:9b:23:f6:cf:d8:51:2b:c7:e5:6a:2f:e1:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0D:6E:51:3A:F3:C7:FF:5E:1F:EF:60:F3:C9:2F:10:11:3D:10:89
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3139302e362e3234302e302f32302d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:63:96:48:f7:a2:a7:9f:1e:e3:dc:ee:72:bc:95:b1:8e:27:
         0a:41:d4:56:d2:16:5e:c8:61:8c:0f:a6:ff:fa:1e:23:42:2d:
         18:10:58:bb:00:69:05:5a:fa:11:43:59:81:a9:e1:46:78:3f:
         e2:b6:98:cb:2e:79:3e:c1:29:1a:f9:3a:15:d4:4d:d2:ab:7a:
         88:c2:80:a9:4c:4c:a5:1a:8b:9d:b2:e0:e9:43:9d:ee:4a:88:
         25:bc:8f:e1:3d:0a:4f:d1:25:39:92:9d:e5:a4:08:f0:8b:9d:
         8e:ab:0d:2d:05:2a:c5:e7:ef:f9:e9:54:91:f1:d6:5e:fb:6e:
         b3:3f:fd:b7:df:e7:80:96:a2:91:a8:49:3f:41:dd:6b:6a:58:
         46:36:11:22:92:19:e0:b7:83:3f:c7:d3:8d:49:00:0a:5f:fc:
         50:11:79:19:61:4a:29:b6:f6:24:9f:e5:36:f2:2d:2b:3c:4e:
         5c:83:f4:84:4c:b1:0f:e4:f3:f2:33:0d:79:45:41:d1:1d:c8:
         c5:ba:85:8a:ad:9e:4e:ef:e9:79:90:92:16:04:4a:ee:6d:31:
         e6:de:f5:73:48:1a:a6:d5:80:3e:c7:1a:09:f6:d0:22:91:21:
         c2:da:8b:36:a1:d3:73:c3:b6:55:31:66:d8:43:ba:d8:f9:27:
         33:6e:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:20:37 2025 by rpki-client