Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa
File:                     3139302e352e3136302e302f32302d3234203d3e203238303135.roa (raw, json)
Hash identifier:          rMXxBZR8ONO8LLykydhG89pG7OUP/pLEM9uhkD+NgCU=
Subject key identifier:   7C:6F:95:D6:1D:43:DC:B8:23:66:36:4B:C0:F8:A3:0C:27:A4:5D:25
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       2AC858A3E78A8E27528A2E8148F037F832E228E1
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:06 +0000
ROA not before:           Tue 04 Feb 2025 20:01:06 +0000
ROA not after:            Tue 03 Feb 2026 20:06:06 +0000
asID:                     28015
IP address blocks:        190.5.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c8:58:a3:e7:8a:8e:27:52:8a:2e:81:48:f0:37:f8:32:e2:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:06 2025 GMT
            Not After : Feb  3 20:06:06 2026 GMT
        Subject: CN=7C6F95D61D43DCB82366364BC0F8A30C27A45D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:12:e5:32:ac:d8:bc:ff:a8:74:a0:45:0d:
                    2a:3a:a5:cb:26:0d:ed:1b:d3:d9:7d:81:78:34:a5:
                    50:fa:06:16:21:6e:40:56:fb:6d:77:bb:4f:40:90:
                    33:1d:6d:f8:f9:5d:a6:9a:91:3d:3b:ad:d7:ed:96:
                    57:44:4f:52:2c:e8:51:e9:a0:42:2b:4f:a6:e7:f6:
                    8e:28:6a:c2:64:cd:8a:8c:79:b9:f8:a5:b7:8c:1d:
                    92:b2:e1:7c:8d:2f:80:b0:d8:d3:37:7e:bb:f4:c5:
                    84:f7:96:6e:ed:19:b7:6a:cb:c9:c6:ef:25:58:04:
                    cb:a1:c0:91:f1:8c:0b:3d:11:bd:f2:6c:01:d9:19:
                    1a:3b:cf:b8:f6:c2:c0:31:de:e7:f2:99:ab:f4:fa:
                    83:85:93:7b:4c:b3:2f:08:46:7e:ea:d4:63:65:e8:
                    bd:53:80:9d:11:93:fb:6e:60:fd:53:36:ce:9c:0b:
                    88:1d:a5:37:99:c2:5a:d6:3b:67:30:6d:76:73:37:
                    98:e2:2b:55:87:a5:bc:be:4e:d3:39:75:a2:86:8e:
                    88:a2:0f:2b:56:73:a1:19:04:81:cd:0b:7b:f6:f0:
                    7c:c3:12:27:a4:6d:3f:79:43:09:01:29:c8:08:a1:
                    d6:2e:44:de:ad:fe:a4:f5:12:04:a9:63:7d:30:80:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6F:95:D6:1D:43:DC:B8:23:66:36:4B:C0:F8:A3:0C:27:A4:5D:25
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3136302e302f32302d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:57:14:7b:93:53:5f:b4:96:88:2d:da:db:13:87:ff:0f:
         0d:0d:f7:12:df:ac:8e:51:d4:f9:de:ca:53:49:eb:f1:83:c8:
         56:db:e7:95:57:24:15:07:bf:b1:50:ea:a7:34:ec:6e:14:8b:
         c3:85:de:ae:28:69:08:03:af:e8:80:7e:5f:01:93:49:b3:05:
         8e:41:27:cf:e7:bc:17:53:fa:19:07:85:9d:f7:1c:75:4a:98:
         9f:65:6f:f9:ed:08:c2:67:b4:6b:6f:a4:83:fb:d8:d4:11:e8:
         94:c4:b4:ec:38:82:14:67:d5:05:d0:93:4e:52:0e:b4:f7:d2:
         fb:e8:1b:fb:0a:bf:fe:08:87:33:6f:c3:c0:7c:53:28:a3:2d:
         a5:ed:84:d4:10:92:90:ba:67:0b:30:ca:7f:9f:a2:7d:25:21:
         be:83:c6:7f:28:6e:59:ff:c9:65:11:15:ca:fc:de:c3:d0:75:
         bc:f0:7c:60:12:ec:a8:45:59:5d:fe:b9:d1:dc:28:80:fc:b6:
         13:f9:0c:ee:57:08:13:90:9e:b7:33:e2:f7:e2:f1:9f:2d:4d:
         8c:fb:bc:10:2d:14:c7:11:6a:15:17:d1:2f:e8:8c:f0:e3:72:
         b3:f3:ed:a8:f3:60:a5:55:02:f9:09:78:47:48:1b:3a:3d:bc:
         ce:ad:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:08:02 2025 by rpki-client