Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e362e3232342e302f32302d3234203d3e203237363635.roa
File:                     3139302e362e3232342e302f32302d3234203d3e203237363635.roa (raw, json)
Hash identifier:          8q1KjtU9f+fInOKNc4l2YWAVciX//A0Qyskwb+lX5ZA=
Subject key identifier:   1A:7A:9A:75:B1:06:8E:98:5A:C2:C1:50:0A:14:99:70:C7:8D:2E:B1
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       27B3815DDD64FA7DDB1A3861E2394D3D61FDA02A
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e362e3232342e302f32302d3234203d3e203237363635.roa
Signing time:             Tue 04 Feb 2025 18:36:50 +0000
ROA not before:           Tue 04 Feb 2025 18:31:50 +0000
ROA not after:            Tue 03 Feb 2026 18:36:50 +0000
asID:                     27665
IP address blocks:        190.6.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b3:81:5d:dd:64:fa:7d:db:1a:38:61:e2:39:4d:3d:61:fd:a0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Feb  4 18:31:50 2025 GMT
            Not After : Feb  3 18:36:50 2026 GMT
        Subject: CN=1A7A9A75B1068E985AC2C1500A149970C78D2EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:4f:71:b9:97:0f:3e:2f:d9:c6:6b:74:80:
                    5f:3d:fa:08:bc:1f:e8:51:c9:61:55:77:a6:4e:00:
                    d9:5b:f1:58:4d:da:41:ea:7f:cb:8c:bf:f2:50:7f:
                    3f:61:9b:85:4f:03:ee:d3:16:e9:c0:6b:8e:7a:b5:
                    c2:40:6f:a6:26:b3:cd:f9:72:1c:95:3f:ba:f4:71:
                    5b:d4:ab:90:ad:3e:ae:09:e7:e8:cb:7e:56:05:1b:
                    34:50:26:06:cb:b4:d3:8d:d2:7c:77:4e:e7:2f:24:
                    6b:da:43:ab:87:8c:63:36:b1:d4:6a:45:46:bd:a5:
                    b1:d0:cf:1c:45:cf:6a:92:3f:a2:86:6a:ae:96:5e:
                    b2:a2:b2:bb:e2:1d:73:12:85:45:9a:f5:83:c9:d0:
                    3a:c3:0b:9a:2f:c2:47:72:79:10:6f:2a:14:99:45:
                    bf:d6:bc:c0:5f:f4:dc:e6:37:7c:8f:84:22:9e:ae:
                    aa:cb:cf:fc:8a:ae:1c:ba:e6:19:c8:50:ae:71:9d:
                    7d:1c:35:c9:a0:bc:2f:61:7c:43:66:bb:9b:64:1d:
                    fe:e7:e2:71:c3:1b:f8:e5:16:8b:10:86:2b:27:02:
                    16:89:f6:c3:f2:f7:ed:61:2a:d0:e1:d9:cf:88:0d:
                    c7:40:97:6e:94:f6:76:00:67:13:dc:0f:a6:1e:5a:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:9A:75:B1:06:8E:98:5A:C2:C1:50:0A:14:99:70:C7:8D:2E:B1
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e362e3232342e302f32302d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:46:48:e3:91:c5:c9:15:ad:eb:34:d3:50:90:fd:24:f8:
         77:31:f1:4c:1c:ea:d2:da:ea:4e:94:08:41:68:8e:d6:8e:e6:
         6f:c7:46:3d:40:fd:e5:d7:e9:c5:cc:14:75:06:be:b9:4e:23:
         a1:4d:0c:e0:23:17:6f:76:aa:3f:20:ed:93:74:af:fd:79:f6:
         55:87:01:33:79:df:bb:32:41:d6:30:89:ec:2b:c5:03:98:71:
         bf:f9:31:8a:88:51:c7:3c:c7:2a:bb:b7:b3:2d:5d:94:94:0d:
         c6:84:20:3b:00:37:19:fe:38:9b:61:bd:1e:09:f8:b2:10:13:
         06:42:1b:e8:77:a4:0f:3c:33:7c:21:0f:12:dd:7a:31:4a:bd:
         ad:e3:f3:57:54:75:ee:cf:dc:02:96:3c:b0:8d:4c:b8:e4:21:
         32:fa:53:64:1f:4f:c7:25:82:dd:0e:28:3e:e5:df:6e:21:82:
         a5:4c:0f:f7:bb:34:59:f8:ee:69:29:4e:ee:22:c8:66:02:c6:
         d8:12:1f:f1:d9:42:e3:7c:be:96:ee:30:ba:b1:c0:12:57:44:
         fb:de:ec:b8:5b:68:bb:67:f2:88:59:ba:42:61:91:b5:89:f1:
         77:fe:5e:20:98:44:ef:49:e4:7d:56:2f:f7:43:6e:13:71:01:
         c9:35:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:16 2025 by rpki-client