Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3138302e302f32322d3234203d3e203238303135.roa
File:                     3139302e352e3138302e302f32322d3234203d3e203238303135.roa (raw, json)
Hash identifier:          EfDiy9FjgeJplWXcFZsXG19JzGgyTBmOLBzfyl1J1pU=
Subject key identifier:   E1:54:6B:FD:B3:81:4E:4C:D0:9A:AB:15:E1:E6:D2:C1:6A:65:F6:D6
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       07BA8633A9D41B8DE8BC3002C32D151094121F2E
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3138302e302f32322d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:08 +0000
ROA not before:           Tue 04 Feb 2025 20:01:08 +0000
ROA not after:            Tue 03 Feb 2026 20:06:08 +0000
asID:                     28015
IP address blocks:        190.5.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 19:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ba:86:33:a9:d4:1b:8d:e8:bc:30:02:c3:2d:15:10:94:12:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:08 2025 GMT
            Not After : Feb  3 20:06:08 2026 GMT
        Subject: CN=E1546BFDB3814E4CD09AAB15E1E6D2C16A65F6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f1:ee:12:5e:bb:b4:4a:48:90:a4:c9:24:7b:
                    37:5e:99:7b:0b:94:0a:cb:ba:de:94:68:24:7a:1c:
                    37:6e:63:fa:03:50:d2:71:2b:21:b5:3a:5b:2a:4d:
                    54:94:ee:7e:27:5f:2d:6b:29:1a:68:34:8e:5c:ee:
                    1d:4c:83:ec:47:b3:3a:7d:8d:83:80:62:ad:40:c6:
                    cd:18:bb:7c:3c:7b:a6:9e:4b:bb:04:e7:7f:19:a5:
                    74:57:ac:2a:0b:c0:e4:7d:1b:6a:46:b8:c1:fa:2e:
                    c0:56:36:c8:a1:52:2a:f8:8a:8b:ac:fa:93:5c:f2:
                    9f:fd:4d:b9:79:41:01:e8:35:a4:7d:63:02:ff:68:
                    23:8f:c9:b2:87:49:19:52:3a:d7:80:9c:47:91:61:
                    4d:76:68:c2:cb:ce:36:30:5d:33:3b:66:58:7c:c3:
                    52:01:00:0f:b8:26:d1:c5:44:c7:85:9d:01:18:0e:
                    4e:73:11:a9:a8:8d:a4:27:7e:f3:bd:6f:ce:dd:a3:
                    fc:95:01:1c:a3:01:5e:78:df:59:b1:11:37:18:74:
                    33:22:86:bf:8f:29:8d:80:a8:e0:f9:d0:a2:0b:36:
                    19:68:df:5e:9c:d7:07:c5:55:86:ac:87:b4:38:71:
                    d7:dd:48:08:85:4b:11:db:d8:96:37:7b:dc:d6:9b:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:6B:FD:B3:81:4E:4C:D0:9A:AB:15:E1:E6:D2:C1:6A:65:F6:D6
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3138302e302f32322d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:23:04:e5:12:14:66:c1:ae:6e:e4:22:de:72:f7:99:76:e2:
         11:82:2e:e1:17:70:40:23:f7:53:ce:de:3f:23:57:7d:98:a3:
         8f:cb:d5:d3:e3:46:7e:c2:24:f5:58:02:ed:2e:9e:de:e2:e3:
         ec:d3:95:b6:d6:75:39:43:b6:0d:ca:73:49:26:2f:70:1a:7e:
         62:09:e2:8a:46:71:92:d9:7c:7c:bc:42:cf:d7:42:f6:79:5f:
         59:35:b0:9c:40:22:da:cb:aa:0a:9a:23:da:fe:68:54:38:06:
         ad:7a:ef:85:19:77:cc:06:d7:d2:58:a8:d7:9a:f7:26:72:2b:
         0f:b8:bb:cd:fd:cc:72:c2:ec:5c:bf:62:0f:3b:6c:97:70:b0:
         57:e3:18:f7:45:9e:63:74:06:7c:bb:bb:77:d1:b2:3d:32:f2:
         fb:69:e4:5b:41:3a:1a:4e:7c:56:cb:a7:f9:96:f1:42:3f:82:
         f5:f2:d1:00:1f:32:11:99:19:03:e0:b2:ab:cf:79:bc:5f:8f:
         00:39:06:0a:4a:cc:5f:f5:83:3d:46:bc:f8:66:0c:3a:17:a3:
         49:38:08:d7:08:3d:e1:4b:ca:76:07:67:1e:1f:bc:d8:8e:12:
         1c:2d:54:88:73:1d:5b:d6:87:71:c9:0f:aa:f7:24:76:00:d5:
         09:c4:eb:db
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUB7qGM6nUG43ovDACwy0VEJQSHy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDMTZBRDRGODJFNzJEOTI4N0E1RDRFQjk5NzY4QjBD
NDFDODA2MTAeFw0yNTAyMDQyMDAxMDhaFw0yNjAyMDMyMDA2MDhaMDMxMTAvBgNV
BAMTKEUxNTQ2QkZEQjM4MTRFNENEMDlBQUIxNUUxRTZEMkMxNkE2NUY2RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8e4SXru0SkiQpMkkezdemXsL
lArLut6UaCR6HDduY/oDUNJxKyG1OlsqTVSU7n4nXy1rKRpoNI5c7h1Mg+xHszp9
jYOAYq1Axs0Yu3w8e6aeS7sE538ZpXRXrCoLwOR9G2pGuMH6LsBWNsihUir4ious
+pNc8p/9Tbl5QQHoNaR9YwL/aCOPybKHSRlSOteAnEeRYU12aMLLzjYwXTM7Zlh8
w1IBAA+4JtHFRMeFnQEYDk5zEamojaQnfvO9b87do/yVARyjAV5431mxETcYdDMi
hr+PKY2AqOD50KILNhlo316c1wfFVYash7Q4cdfdSAiFSxHb2JY3e9zWm7V9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU4VRr/bOBTkzQmqsV4ebSwWpl9tYwHwYDVR0j
BBgwFoAUtsFq1Pguctkoel1OuZdosMQcgGEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0Q1MDBERkQ3QkIxQTZBMTMyNjQ0RDkzQ0ZERjUzMTc0
Qjg0MzVBNjQwRjhCQTc0MDJFNkU2RTEzRkIwNTM2LzAvQjZDMTZBRDRGODJFNzJE
OTI4N0E1RDRFQjk5NzY4QjBDNDFDODA2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkMxNkFENEY4MkU3MkQ5Mjg3
QTVENEVCOTk3NjhCMEM0MUM4MDYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNENTAwREZEN0JCMUE2QTEzMjY0NEQ5M0NGREY1MzE3NEI4NDM1QTY0
MEY4QkE3NDAyRTZFNkUxM0ZCMDUzNi8wLzMxMzkzMDJlMzUyZTMxMzgzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+BbQwDQYJ
KoZIhvcNAQELBQADggEBAFIjBOUSFGbBrm7kIt5y95l24hGCLuEXcEAj91PO3j8j
V32Yo4/L1dPjRn7CJPVYAu0unt7i4+zTlbbWdTlDtg3Kc0kmL3AafmIJ4opGcZLZ
fHy8Qs/XQvZ5X1k1sJxAItrLqgqaI9r+aFQ4Bq1674UZd8wG19JYqNea9yZyKw+4
u839zHLC7Fy/Yg87bJdwsFfjGPdFnmN0Bny7u3fRsj0y8vtp5FtBOhpOfFbLp/mW
8UI/gvXy0QAfMhGZGQPgsqvPebxfjwA5BgpKzF/1gz1GvPhmDDoXo0k4CNcIPeFL
ynYHZx4fvNiOEhwtVIhzHVvWh3HJD6r3JHYA1QnE69s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:39:26 2025 by rpki-client