Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3139302e362e39362e302f32302d3234203d3e203237373932.roa
File:                     3139302e362e39362e302f32302d3234203d3e203237373932.roa (raw, json)
Hash identifier:          PVP6+Aif2LoGjckv2En5VjHWt+kJjk9EEFLgY48YCS8=
Subject key identifier:   88:B3:2D:B8:62:D7:42:44:94:E8:DB:E2:81:9C:BF:E4:15:C6:7E:10
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       5C64C55D405A5E39AE7E277E679209F93D636FB2
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3139302e362e39362e302f32302d3234203d3e203237373932.roa
Signing time:             Tue 04 Feb 2025 18:19:49 +0000
ROA not before:           Tue 04 Feb 2025 18:14:49 +0000
ROA not after:            Tue 03 Feb 2026 18:19:49 +0000
asID:                     27792
IP address blocks:        190.6.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:64:c5:5d:40:5a:5e:39:ae:7e:27:7e:67:92:09:f9:3d:63:6f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Feb  4 18:14:49 2025 GMT
            Not After : Feb  3 18:19:49 2026 GMT
        Subject: CN=88B32DB862D7424494E8DBE2819CBFE415C67E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:c8:ee:cd:54:a4:ab:55:44:d0:3f:55:00:
                    44:5f:30:df:30:da:5a:3c:70:96:51:2e:20:5e:a6:
                    23:41:36:c7:b4:f0:c4:96:c6:2a:f1:37:21:c6:95:
                    9c:41:ea:95:73:3e:61:c8:89:01:5f:e2:bb:74:1f:
                    c4:8a:85:73:f6:ab:e2:50:21:8f:0f:ab:76:e5:a8:
                    71:1f:4d:c3:22:dc:71:f0:33:11:cf:2a:09:d2:9a:
                    12:a9:95:59:e3:7a:0d:aa:a5:2c:19:45:04:17:84:
                    86:2b:b2:c3:2c:5c:76:f6:3c:23:94:7d:d1:15:84:
                    68:7c:48:3e:41:24:4a:9c:b2:d1:a1:8d:e5:0a:61:
                    7f:fe:41:7f:33:28:47:d6:eb:d0:4b:08:3c:c8:7a:
                    2d:79:af:e7:5d:2f:ea:0b:ac:84:1d:68:65:0b:45:
                    bf:9c:f8:6e:f6:81:61:a6:ac:ea:c3:06:01:9b:8e:
                    86:ff:c1:1c:ca:ad:6d:77:a7:4f:57:de:58:2c:f0:
                    b4:34:90:45:85:ca:81:03:bd:9f:9a:c2:b1:5c:ce:
                    bd:b9:26:e5:1e:b4:d7:90:66:8a:d7:b8:0f:d3:70:
                    f2:8a:a4:d0:55:01:41:6a:1a:fc:10:89:25:65:6f:
                    47:09:f7:80:71:e7:ba:98:4b:50:c6:d8:75:aa:25:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B3:2D:B8:62:D7:42:44:94:E8:DB:E2:81:9C:BF:E4:15:C6:7E:10
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3139302e362e39362e302f32302d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:33:d0:2d:c6:12:28:1a:65:01:a7:79:5c:8b:cc:1e:a9:7f:
         9d:79:e9:42:8d:8e:fd:fb:56:31:f4:1d:3f:e2:e6:03:e7:2b:
         7e:01:62:12:4d:10:bc:83:b1:f2:d8:3a:d5:b7:f5:36:78:34:
         9f:cf:a0:83:e5:40:3a:73:89:e9:b3:51:e0:88:e9:6a:d4:02:
         9e:49:bf:86:fc:60:e5:0e:86:5b:1a:13:d6:8b:a4:53:72:ac:
         15:a0:4d:f7:55:b6:54:be:7e:45:1d:a6:95:5b:76:35:f6:8a:
         f5:02:d7:e9:6a:79:04:1e:e7:e7:0a:0c:d8:73:48:20:f0:51:
         94:fa:4e:e8:73:ed:f0:f3:e3:3f:fa:cb:9d:5d:bd:aa:32:04:
         1e:9d:a2:6f:27:19:a0:12:17:82:c9:66:e7:66:4d:92:73:b5:
         54:ca:85:01:f7:94:32:e4:b1:63:2a:f3:f6:b8:67:ca:8e:4c:
         a9:da:06:c5:c1:c6:85:66:8a:94:b5:cf:b3:42:fa:89:9b:22:
         95:be:91:49:42:e0:45:ed:81:bf:91:fc:a5:f8:fe:e0:ee:d2:
         71:53:58:08:be:4d:c5:7e:83:8d:72:97:a8:b6:cb:38:e6:5e:
         48:28:c2:b6:7d:ef:2e:d5:10:76:46:34:d1:47:58:c5:d5:95:
         e3:a9:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:31 2025 by rpki-client