Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa
File:                     3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa (raw, json)
Hash identifier:          JAY2xy6OwlmJqI3VYiG9bddu0uaHPixWIhTyVpcU+Ag=
Subject key identifier:   E0:43:83:FF:24:EE:B2:DB:8D:3B:15:D2:8C:ED:00:8B:D7:58:10:25
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       7F8870A111F6480DAA7F21893A10A4FEFA79D779
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:08 +0000
ROA not before:           Tue 04 Feb 2025 20:01:08 +0000
ROA not after:            Tue 03 Feb 2026 20:06:08 +0000
asID:                     28015
IP address blocks:        190.124.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 19:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:88:70:a1:11:f6:48:0d:aa:7f:21:89:3a:10:a4:fe:fa:79:d7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:08 2025 GMT
            Not After : Feb  3 20:06:08 2026 GMT
        Subject: CN=E04383FF24EEB2DB8D3B15D28CED008BD7581025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:92:a6:d3:92:90:bf:4e:9f:0e:28:fc:50:f9:
                    ce:1e:2a:0d:fc:2c:e2:f2:94:53:84:ef:98:10:8f:
                    9f:10:a5:8a:c6:fc:23:9f:40:68:57:d8:d9:09:88:
                    73:b1:1b:2c:d3:29:92:a8:0b:18:d3:00:c7:0e:25:
                    94:9c:b6:d5:02:30:e1:70:25:f3:82:78:0c:77:ef:
                    40:ee:06:e2:5e:f7:4a:89:08:f5:fc:11:7e:87:7c:
                    4f:d5:e9:29:65:9b:0c:5b:2f:7a:63:5a:22:6b:ed:
                    c7:53:60:6b:ca:ac:e0:f1:6c:85:c3:59:db:53:04:
                    7d:6c:35:90:ca:b5:1e:67:f4:ca:f3:44:49:09:03:
                    bc:12:5d:2b:a4:f8:07:55:05:8c:75:7a:a6:5b:b7:
                    df:1a:2b:05:ac:8c:3a:5d:55:58:0b:5b:b6:8a:dc:
                    d8:2e:cc:95:8d:27:0e:bf:93:da:5e:35:9b:e6:82:
                    46:66:26:1f:9d:7b:5e:76:3d:60:29:e6:2f:4f:7e:
                    ab:20:86:5f:cf:31:f2:98:81:14:1a:7d:16:a4:9e:
                    52:3f:7d:ce:5a:a1:5c:d9:64:1a:29:7e:44:b3:70:
                    20:fc:a8:10:95:94:b5:fb:2c:bd:b8:8f:d3:d2:51:
                    f5:db:66:cb:4c:07:9f:af:f0:0c:2f:26:73:86:98:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:43:83:FF:24:EE:B2:DB:8D:3B:15:D2:8C:ED:00:8B:D7:58:10:25
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:46:9d:4b:fa:54:89:84:8c:23:9c:04:ee:7a:87:1b:b2:11:
         ae:05:dd:7a:17:1f:ce:8f:6c:32:81:0a:69:87:7a:a0:67:0c:
         2e:05:3b:39:a9:9d:c6:5e:4e:ed:5b:ec:ad:2d:3f:06:6d:ea:
         18:eb:0b:f7:42:22:14:c1:12:41:aa:fa:de:05:ca:ec:de:9a:
         e3:84:be:4f:b3:d0:3b:70:3b:55:17:41:d8:6c:c0:29:68:17:
         8c:d3:9c:0f:a8:df:ee:fa:8e:3f:69:ce:c8:75:bb:02:04:1b:
         95:99:b7:5b:66:74:aa:db:28:37:84:9d:c2:1c:d4:df:64:97:
         61:32:da:15:fc:4d:22:0e:dc:e1:ca:a2:1a:0c:c0:3f:8a:30:
         77:da:64:3c:86:83:44:f0:b4:62:6d:11:f9:cc:4e:c0:53:18:
         59:41:74:e0:9a:b5:1c:16:1a:17:85:1e:0f:a0:9f:97:e6:b2:
         8a:06:3d:5c:d4:ee:e3:20:cc:c3:07:77:e0:e7:dd:a9:71:ac:
         56:03:4c:f9:65:6b:82:93:8e:16:3f:a9:ce:bb:bd:6b:6a:15:
         c6:f4:7c:07:50:f0:f6:e1:2e:bd:58:d7:95:a5:1e:12:7d:c8:
         8f:73:bc:08:86:4d:5d:6f:a6:56:00:5c:04:47:70:c6:57:57:
         7a:f8:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:39:12 2025 by rpki-client