Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f32302d3230203d3e203237373235.roa
File:                     3139302e362e36342e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          o3V0dsqge2Qk0SBauqa8O/ENVRDwO5MvtJyC7t9TfFk=
Subject key identifier:   5B:08:7A:2D:E7:4C:DC:EA:B7:88:1D:BF:12:3B:62:7B:B5:A9:17:B4
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       28B35849248599BF59D983F7005C4A0CD19285ED
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:45:59 +0000
ROA not before:           Tue 04 Feb 2025 18:40:59 +0000
ROA not after:            Tue 03 Feb 2026 18:45:59 +0000
asID:                     27725
IP address blocks:        190.6.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:58:49:24:85:99:bf:59:d9:83:f7:00:5c:4a:0c:d1:92:85:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Feb  4 18:40:59 2025 GMT
            Not After : Feb  3 18:45:59 2026 GMT
        Subject: CN=5B087A2DE74CDCEAB7881DBF123B627BB5A917B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:3c:22:dd:f5:14:b4:02:4c:94:91:d0:41:
                    c2:88:23:ab:ce:bc:63:21:07:8b:a0:b1:bd:6d:a3:
                    16:b0:57:a0:a3:4c:3a:55:8c:ed:ed:3d:3c:83:c8:
                    91:02:46:51:3d:b0:31:d2:e5:d6:8e:d8:31:97:3f:
                    b3:f0:f3:d6:8c:19:74:82:b5:46:b7:c8:c2:85:e2:
                    bb:97:2e:4e:8d:1d:67:96:26:00:64:dd:be:bb:b1:
                    3c:92:c0:1f:0d:44:8a:b6:81:63:e2:10:d8:01:5f:
                    8b:30:ed:a5:85:8b:e7:25:1e:fe:49:3d:1e:72:18:
                    d7:c2:b8:1a:6c:ce:79:fc:85:42:c2:1e:72:c2:47:
                    b7:30:da:e5:b1:8d:9a:0a:46:e7:e2:ca:75:b3:c2:
                    cd:94:bb:73:e1:54:b9:f7:88:3b:2e:09:9f:f6:53:
                    79:06:da:3f:9c:d8:c9:e1:af:4e:a5:d6:42:fa:8f:
                    ce:e6:b0:83:af:f2:cd:1a:7e:a1:30:5f:a1:c2:ba:
                    3c:b7:80:f5:50:1d:e8:a7:40:4c:92:84:95:25:3c:
                    52:47:eb:d6:50:c3:84:9c:15:5b:62:42:2c:f5:35:
                    51:5f:27:76:64:8f:88:22:df:0c:9b:7a:c2:59:b3:
                    f5:8f:d8:7b:59:be:9b:4e:84:86:bd:1d:52:7b:c5:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:08:7A:2D:E7:4C:DC:EA:B7:88:1D:BF:12:3B:62:7B:B5:A9:17:B4
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:f3:76:5f:f8:8b:57:5a:95:f2:22:ac:3d:21:5a:7c:a5:
         2e:e3:12:63:12:35:b9:25:77:c0:d0:54:28:61:b4:c9:76:0b:
         3c:db:6e:58:64:2e:aa:21:b2:9d:49:4d:df:84:f1:26:c7:08:
         4b:d9:81:4f:56:c4:2f:64:6d:54:9d:ac:89:a8:dc:63:7c:3f:
         0c:1c:52:a4:64:9e:07:64:54:6e:83:20:6b:51:64:44:94:06:
         73:42:b6:49:d7:02:54:5a:7a:df:da:29:13:a4:2c:07:d2:d0:
         c9:20:ef:f3:de:13:47:20:91:dc:52:fe:6f:f9:e3:b4:b5:ef:
         07:48:f6:84:3c:87:1b:61:68:5c:cb:b4:6e:95:a1:6d:37:65:
         49:94:cf:8b:c9:6a:51:58:89:6f:18:53:b2:06:4b:3d:a0:53:
         d1:bd:33:6e:dc:50:69:03:3d:c1:e2:c2:ee:d1:cc:a6:c0:f1:
         db:58:d6:b2:02:69:e0:7e:ea:91:d9:69:a6:a9:60:d1:c2:49:
         14:31:cc:a1:1b:4f:0f:b5:b2:78:df:3c:a7:8e:94:38:3b:e2:
         44:ec:f8:3e:c3:35:83:82:f0:ea:5e:6e:88:d9:67:e3:19:91:
         bd:56:2e:6f:5a:83:b9:a2:b8:a7:d6:46:2a:04:4c:ab:a5:2b:
         6f:eb:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:58 2025 by rpki-client