Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230382e302e302f31362d3234203d3e2036353033.roa
File:                     3138392e3230382e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          2V2/gRtr3dJsdJneENpbs12Y4A++4956Xruf4SgWs1k=
Subject key identifier:   C6:9E:2E:41:0C:6F:8C:DE:88:3B:6D:88:1B:1A:B7:EF:49:09:BC:F4
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       533B316CB93AA0D6C42C24CEE4B231984215ECCF
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230382e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:55 +0000
ROA not before:           Tue 04 Feb 2025 18:13:55 +0000
ROA not after:            Tue 03 Feb 2026 18:18:55 +0000
asID:                     6503
IP address blocks:        189.208.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3b:31:6c:b9:3a:a0:d6:c4:2c:24:ce:e4:b2:31:98:42:15:ec:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:55 2025 GMT
            Not After : Feb  3 18:18:55 2026 GMT
        Subject: CN=C69E2E410C6F8CDE883B6D881B1AB7EF4909BCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:3b:42:7a:3d:43:7a:8a:88:3a:e4:ab:ab:
                    0e:c1:eb:bf:57:19:c7:1e:cd:10:93:9a:91:41:40:
                    80:3c:e6:29:2b:34:df:28:0f:c9:5e:2e:b4:8f:b1:
                    f4:a2:e5:32:1d:51:6d:fe:28:1c:a4:8e:68:0c:12:
                    46:fc:e7:00:e6:28:8e:b8:b7:49:3d:2d:0a:e3:5f:
                    3b:ce:f4:73:01:c4:dc:ea:d6:6b:cd:7c:31:3e:c4:
                    f6:ee:a2:93:e4:4b:42:00:ca:a8:54:09:b6:32:2e:
                    1b:e9:b5:e2:24:5e:86:f8:9e:b3:61:5e:dc:cb:06:
                    ea:ab:bc:1a:cc:b3:65:49:19:9f:67:62:3a:a9:ba:
                    d1:bf:c2:23:58:fd:e6:89:1f:1a:fb:47:ad:84:af:
                    82:48:9f:eb:7c:c7:0a:3f:a7:3b:b3:b6:44:96:a3:
                    e4:a6:65:1b:ad:c5:4a:a5:17:51:d5:8c:62:de:c4:
                    3a:20:94:a4:aa:91:ff:40:21:d8:75:e3:c9:01:11:
                    b6:30:3f:38:05:b7:7d:c9:96:5a:84:2c:8f:df:da:
                    e7:37:1f:59:1d:be:a5:e6:93:2e:f0:84:90:2a:03:
                    10:21:a3:89:f4:c5:ce:33:a7:af:51:93:d3:88:00:
                    33:ab:c7:f4:80:86:f8:d6:13:48:a8:34:28:bc:30:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:2E:41:0C:6F:8C:DE:88:3B:6D:88:1B:1A:B7:EF:49:09:BC:F4
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230382e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:73:c0:71:78:8f:1b:79:e5:16:eb:ed:aa:64:d7:2f:47:
         34:4c:11:09:a2:88:48:c4:fa:da:41:45:3f:88:d5:b7:78:29:
         be:1d:0e:e7:4d:d2:70:6a:df:d6:70:a7:2d:95:4e:fb:84:ac:
         27:89:de:af:c2:7a:68:23:4f:b1:78:ca:61:1f:f5:a0:26:c0:
         78:18:20:1c:0a:a5:ae:89:03:9d:75:8c:6c:7d:9c:b8:cd:39:
         74:7d:47:4b:2b:c9:b8:8f:43:b1:2d:e3:dc:df:3c:e1:f1:4a:
         2a:7b:a5:bf:21:62:ca:01:d0:a7:06:dc:65:60:ef:b8:1a:46:
         4d:5e:4a:7d:da:a2:0c:a8:cf:77:a5:4f:b0:e1:a1:26:db:cb:
         f8:8f:9b:b3:dc:48:ad:22:c7:85:51:cb:16:f1:d6:23:e0:3b:
         ae:c1:db:ba:73:07:06:8c:2f:f4:7c:7f:43:85:78:fc:4f:d1:
         99:df:37:b3:71:de:b4:6c:4e:21:9f:38:5d:b3:ca:63:42:8c:
         65:d9:d7:f3:14:80:51:d2:be:8b:c5:87:92:f3:f5:f5:34:0e:
         7e:a7:9c:f6:85:57:cc:5b:33:f7:e0:50:39:38:25:76:ba:cb:
         05:e4:52:97:d3:5e:10:2e:6f:6f:e2:24:70:d7:c4:01:64:e9:
         19:10:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:34 2025 by rpki-client