Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231322e302f32322d3234203d3e203238303135.roa
File:                     3139302e362e3231322e302f32322d3234203d3e203238303135.roa (raw, json)
Hash identifier:          fuIjPzWJLqhURfO7gi4WKbX/pdJ4QfybW5aa9yB0SNo=
Subject key identifier:   75:17:AE:65:5A:47:29:50:CD:97:F4:A3:84:D8:6D:2C:43:C7:FB:67
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       2905DC830D3ADE0A42A65356BC05CCC7DF2E441E
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231322e302f32322d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:46 +0000
ROA not before:           Tue 05 Mar 2024 18:06:46 +0000
ROA not after:            Tue 04 Mar 2025 18:11:46 +0000
asID:                     28015
IP address blocks:        190.6.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:05:dc:83:0d:3a:de:0a:42:a6:53:56:bc:05:cc:c7:df:2e:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:46 2024 GMT
            Not After : Mar  4 18:11:46 2025 GMT
        Subject: CN=7517AE655A472950CD97F4A384D86D2C43C7FB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:c4:3d:d8:93:7e:b8:c7:50:90:34:09:bd:
                    d7:7d:05:7a:7d:19:22:b6:0a:9b:84:45:74:3d:b7:
                    98:af:7c:88:2b:d6:5a:83:de:0d:ba:22:de:cf:00:
                    7f:51:42:5f:d1:f2:e7:b7:e3:7d:b0:ce:5b:69:ce:
                    85:2f:0c:ba:46:24:1b:83:7d:dc:a5:e6:58:9e:1b:
                    8a:9b:f9:09:6f:a5:73:eb:bd:f5:00:74:50:1d:9f:
                    e3:33:e1:21:a9:25:9a:84:94:c9:b4:e4:62:56:d7:
                    10:0d:fd:3b:75:b2:35:07:5a:65:95:ad:7d:2b:ea:
                    75:82:8d:b4:8a:d4:c1:64:97:eb:9c:73:64:5f:70:
                    5a:fa:84:cd:0c:ba:24:50:0a:04:e0:38:1e:04:8d:
                    04:75:f4:73:74:65:31:e0:a5:2a:d0:86:3c:76:4b:
                    18:d3:b3:a9:85:92:6f:83:79:48:58:a6:c5:79:2b:
                    87:1d:97:19:e9:ba:52:a8:a6:a3:78:64:6e:70:72:
                    91:7b:22:6a:15:74:d5:de:f5:b4:d5:6b:31:3c:41:
                    20:9e:dc:8c:17:31:a1:0e:db:c4:4f:fd:f1:9a:b0:
                    6e:0f:ea:91:0e:55:47:20:8d:c2:be:3c:bb:dd:de:
                    41:c2:dd:1d:74:e3:a1:98:91:04:ec:ae:09:29:20:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:AE:65:5A:47:29:50:CD:97:F4:A3:84:D8:6D:2C:43:C7:FB:67
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231322e302f32322d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:09:be:67:3b:f9:cb:7f:5d:1c:42:bb:64:34:97:a8:71:d2:
         06:19:6e:e1:0e:89:e3:cc:9f:cb:5f:8c:77:76:e9:82:23:5d:
         bd:0f:7a:9f:37:e0:f7:d5:37:d1:0d:8b:1a:4f:ba:2f:2e:e5:
         6d:50:e7:68:c5:8b:37:f2:9b:1b:82:c9:7a:85:36:d3:e2:d7:
         44:5f:85:ea:13:c4:4a:5e:1d:be:c6:a9:90:73:e2:8b:76:3f:
         29:0b:fb:d3:5a:32:53:92:eb:ba:c1:29:f5:36:a9:ba:fd:88:
         8e:33:72:3c:0e:a7:5b:00:b0:ed:7a:17:37:6d:89:d7:09:ed:
         b6:41:32:4a:4e:67:44:99:eb:fc:35:ea:d0:37:14:ea:2a:99:
         7a:aa:2f:ab:1d:7c:24:32:bc:38:e7:89:d5:1e:fb:31:85:df:
         10:54:5a:98:0a:bd:a4:fa:66:fc:b3:78:39:9f:6a:ac:1c:b2:
         ee:c7:4a:7d:f6:b3:1a:6f:e0:fb:a8:cd:0c:39:05:25:0a:57:
         a9:60:a8:df:de:99:01:06:54:df:35:9c:72:6b:11:28:94:86:
         36:e9:e8:9e:d4:f2:1e:b8:29:bd:10:77:57:70:48:77:51:d3:
         9e:04:f4:eb:0e:79:ac:d4:f7:80:a8:c5:aa:c6:cb:10:63:27:
         d0:c9:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org