Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231322e302f32322d3234203d3e203238303135.roa
File:                     3139302e362e3231322e302f32322d3234203d3e203238303135.roa (raw, json)
Hash identifier:          ps2lygvQ9b5x8zRTVOQ6VDMTpfmsl0nW4Z2azx3ezxI=
Subject key identifier:   3A:B3:57:2C:40:50:76:DD:87:5C:3A:8A:3A:68:3B:0C:41:29:56:8E
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       4954E3250F452EC280B64F75D3F32032FAD393ED
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231322e302f32322d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:09 +0000
ROA not before:           Tue 04 Feb 2025 20:01:09 +0000
ROA not after:            Tue 03 Feb 2026 20:06:09 +0000
asID:                     28015
IP address blocks:        190.6.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 19:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:e3:25:0f:45:2e:c2:80:b6:4f:75:d3:f3:20:32:fa:d3:93:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:09 2025 GMT
            Not After : Feb  3 20:06:09 2026 GMT
        Subject: CN=3AB3572C405076DD875C3A8A3A683B0C4129568E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:d3:01:58:0c:f7:c4:61:f8:1a:1a:c2:30:
                    8d:50:86:c5:45:d7:77:a5:6a:44:7e:9a:23:58:f1:
                    b5:8e:19:90:c5:0b:1e:b4:08:97:6d:31:96:ad:33:
                    29:a8:64:8e:1f:61:ee:54:7c:15:60:ad:26:53:02:
                    72:f0:42:f3:e9:32:8e:fe:3d:67:09:52:ca:6e:a2:
                    a7:d5:f3:09:dd:83:5e:83:6c:3f:03:db:70:6b:4c:
                    0f:bb:c9:cb:31:4d:0a:3f:62:d3:a6:a2:66:4b:77:
                    d9:0c:26:c2:e5:84:c0:99:92:42:d8:b7:c2:e7:aa:
                    f5:9c:2b:c9:39:30:f9:ce:47:79:2f:6b:87:cc:82:
                    65:e1:5e:f1:fe:4d:f0:ae:4a:fa:73:8c:d8:1e:f9:
                    14:43:19:17:a7:73:ca:92:89:3f:16:33:36:ef:7b:
                    93:3e:f9:b9:59:93:2f:2d:4f:a2:b5:aa:3f:82:23:
                    c9:a8:b5:84:e5:b4:6e:2a:82:87:96:3e:01:53:9f:
                    dd:1e:44:5a:cd:68:99:44:eb:2e:52:cc:0d:93:d5:
                    be:83:99:e3:04:02:01:47:23:ad:15:19:d7:02:85:
                    18:59:85:32:d9:c9:3e:20:05:d8:bf:a1:90:e2:d1:
                    be:bc:96:15:f6:9c:1a:70:05:b6:b8:a9:8f:ad:09:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:57:2C:40:50:76:DD:87:5C:3A:8A:3A:68:3B:0C:41:29:56:8E
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231322e302f32322d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:99:79:05:f4:a5:23:93:a7:5f:cf:5d:de:14:28:de:df:
         c3:89:52:92:51:46:78:19:b8:8f:3c:fe:49:70:0a:8d:d2:42:
         db:78:78:12:8f:37:53:22:32:2f:61:31:2e:e7:62:41:57:f7:
         b0:46:51:dd:12:0c:d1:88:2e:07:3f:56:87:10:f0:ac:c6:68:
         ba:a5:46:1b:eb:06:79:c8:2d:a1:76:10:66:3c:49:99:51:d0:
         49:ae:cf:61:80:6d:d4:ab:cb:7d:56:07:42:01:b6:14:92:5f:
         f0:96:e4:6e:bd:ad:40:45:79:62:da:61:d5:70:6c:e9:81:2d:
         a1:fe:cb:e5:a9:81:ac:3b:71:7c:66:18:4d:72:c8:d0:09:20:
         ad:b4:f3:5c:6d:14:28:c4:79:55:c8:9d:58:d1:45:4e:de:3a:
         38:bb:0d:32:01:68:65:d2:e0:08:de:c4:4e:6c:96:cc:7f:07:
         69:35:31:83:6f:25:7c:19:ce:2a:0b:c9:0a:40:b3:1f:f5:3c:
         40:6a:39:ef:f0:d9:f3:64:3d:36:df:02:47:18:cb:27:8e:c9:
         31:57:67:fd:23:06:a7:48:48:e2:9b:4d:40:e4:b9:8d:27:ae:
         49:c8:2f:9e:a3:d8:dc:74:07:fc:84:bc:ae:5f:32:72:03:e4:
         57:bc:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:39:31 2025 by rpki-client