Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e362e3139322e302f32302d3234203d3e203237383834.roa
File:                     3139302e362e3139322e302f32302d3234203d3e203237383834.roa (raw, json)
Hash identifier:          U8VK/UpaSqDGb3O9PjXzNS9y0rNS5nCBi5uQTSwUI8c=
Subject key identifier:   E6:90:BD:E1:EF:7C:39:24:6B:73:81:7D:AA:64:2B:23:BD:B2:C1:88
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       2BB7078BD7678061AEBD0F07F370987EFCF46417
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e362e3139322e302f32302d3234203d3e203237383834.roa
Signing time:             Tue 04 Feb 2025 20:01:24 +0000
ROA not before:           Tue 04 Feb 2025 19:56:24 +0000
ROA not after:            Tue 03 Feb 2026 20:01:24 +0000
asID:                     27884
IP address blocks:        190.6.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b7:07:8b:d7:67:80:61:ae:bd:0f:07:f3:70:98:7e:fc:f4:64:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Feb  4 19:56:24 2025 GMT
            Not After : Feb  3 20:01:24 2026 GMT
        Subject: CN=E690BDE1EF7C39246B73817DAA642B23BDB2C188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:5c:f3:30:ab:40:e9:6b:54:64:19:73:c7:
                    de:e5:e5:c1:57:34:7c:5f:b5:72:9c:73:8a:04:b3:
                    16:6b:84:a2:47:24:04:37:bb:b4:ab:ee:e0:68:40:
                    b0:87:6e:5f:2e:a7:20:21:3a:eb:1f:98:a6:5d:50:
                    21:a4:a9:b2:d0:f1:7c:4b:2f:8d:6b:07:43:83:12:
                    f7:33:91:d8:fa:42:04:3a:e6:46:8c:05:31:de:90:
                    47:e1:8b:00:73:b2:15:2c:54:db:56:93:90:ba:72:
                    3d:e1:c1:ca:0c:3d:d7:ac:a0:69:b1:a2:33:6b:63:
                    88:b7:3b:22:53:96:ec:9a:c2:35:1e:00:c0:8e:6e:
                    65:f3:f5:33:a8:fb:54:bc:50:3c:3d:2f:87:54:4b:
                    45:fa:0e:c6:b6:5d:a9:58:37:38:6a:a4:19:46:9c:
                    da:9f:b1:38:0c:20:f9:21:8a:89:1a:15:65:73:bd:
                    ae:8b:cb:e2:3a:40:a8:7a:3f:1a:9f:fb:7b:f6:36:
                    86:50:e7:88:6c:ea:2f:5a:eb:87:32:d0:86:b9:35:
                    a8:2c:85:bb:c9:95:4b:96:ee:71:a9:7d:21:bb:3b:
                    7a:f5:5c:eb:cd:ff:00:10:ee:2c:6b:86:3d:e4:28:
                    83:d8:b3:3a:f3:61:f9:a4:74:85:b3:01:df:d9:75:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:BD:E1:EF:7C:39:24:6B:73:81:7D:AA:64:2B:23:BD:B2:C1:88
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e362e3139322e302f32302d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:95:e2:0b:2e:50:b3:d5:5d:9d:d9:32:d9:6d:bb:e6:6d:
         3c:3e:e0:81:21:43:fc:fa:ea:c0:59:ff:2d:2c:61:da:e4:56:
         a8:82:9a:24:4e:13:15:5c:da:43:59:34:01:67:81:b2:50:3a:
         ca:fd:16:78:93:4b:37:5c:5d:5c:11:0d:c3:69:df:66:91:e7:
         9d:79:72:b4:50:8c:d7:e2:ce:fb:44:25:2c:e5:db:ba:99:0d:
         0f:05:25:42:f0:56:85:33:a6:ef:ae:bd:dc:19:46:52:9d:e7:
         a3:41:c2:d5:fc:f4:5f:a2:56:67:17:11:2f:57:31:20:91:07:
         d7:75:cf:b8:34:8f:77:10:5e:2c:f8:5f:57:43:79:de:0b:31:
         ae:c1:8a:13:8f:c1:67:79:13:fc:3a:a2:27:95:91:01:73:fc:
         3e:64:97:f4:31:dc:30:ae:61:6d:fd:f7:f2:30:4f:84:cb:17:
         10:92:87:e4:0c:f4:5f:00:66:1e:cb:16:41:63:6f:9b:6e:48:
         f3:a4:51:80:e6:e9:bd:c0:40:c1:f7:f2:81:66:f8:ec:6b:4d:
         8d:b9:b0:84:ca:e7:b7:56:51:76:6c:40:57:6f:95:9a:f7:47:
         ca:88:cf:4a:d9:5b:86:3f:7b:18:37:4e:5e:4a:60:c7:bb:6f:
         d3:22:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:01 2025 by rpki-client