Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e392e33322e302f32302d3230203d3e2038313030.roa
File:                     3139302e392e33322e302f32302d3230203d3e2038313030.roa (raw, json)
Hash identifier:          mfB3s/lfkEmMb0jTU4713OxOs61bnfx673FOSifgo4Y=
Subject key identifier:   AB:2D:B4:D5:01:22:CC:93:27:F9:9B:1B:DA:B2:18:C6:63:D8:23:30
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       724CE6672652579FB86D6DACA3580E859AB6D5FC
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e392e33322e302f32302d3230203d3e2038313030.roa
Signing time:             Tue 05 Mar 2024 18:13:13 +0000
ROA not before:           Tue 05 Mar 2024 18:08:13 +0000
ROA not after:            Tue 04 Mar 2025 18:13:13 +0000
asID:                     8100
IP address blocks:        190.9.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4c:e6:67:26:52:57:9f:b8:6d:6d:ac:a3:58:0e:85:9a:b6:d5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Mar  5 18:08:13 2024 GMT
            Not After : Mar  4 18:13:13 2025 GMT
        Subject: CN=AB2DB4D50122CC9327F99B1BDAB218C663D82330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:b9:da:c4:94:7b:eb:46:5f:ec:1a:cf:a8:
                    51:be:db:07:5f:44:61:6b:03:89:97:ca:92:c9:95:
                    ee:6e:f5:c8:c4:73:d0:c5:eb:19:3b:f4:5a:c9:80:
                    93:82:63:46:3a:09:91:40:da:e5:7e:5f:c1:92:fe:
                    bb:0b:68:03:49:40:d6:90:b4:a1:2b:6e:49:16:b5:
                    1d:0f:17:98:8c:43:04:eb:c3:ce:5c:70:6b:fc:90:
                    89:ee:b3:b7:c0:80:86:a8:c7:4c:45:4a:7a:f5:f6:
                    04:d7:5b:ab:5a:27:5d:8a:fc:bf:11:a3:32:e2:d4:
                    58:8f:6b:73:64:2f:b9:3b:aa:f8:f8:ed:76:c1:df:
                    66:27:27:3c:11:5f:a3:02:90:5e:92:4d:5a:3d:96:
                    f8:6c:f1:fc:30:fa:d3:21:5c:11:51:1c:99:54:c9:
                    b3:9f:ac:da:77:88:57:00:45:58:82:03:ce:4b:9a:
                    1e:de:45:08:03:9a:ec:db:bc:9a:5b:ea:98:08:f7:
                    40:8d:0a:21:57:de:9d:0d:10:87:25:64:db:ab:a4:
                    62:a9:95:a3:77:e1:9c:7b:51:00:af:49:6e:a1:58:
                    5c:d7:f0:cb:bb:5e:df:d0:43:c4:f6:3d:b4:fb:4a:
                    ec:ff:3c:95:be:c4:bf:0a:b4:8c:c1:19:2f:af:4c:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2D:B4:D5:01:22:CC:93:27:F9:9B:1B:DA:B2:18:C6:63:D8:23:30
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e392e33322e302f32302d3230203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:2f:00:84:df:79:a3:b7:0c:a1:4e:2f:3c:e5:8a:5f:a1:
         3c:08:61:66:77:16:f2:aa:a1:f5:26:83:e4:ef:82:9b:22:7e:
         bd:88:3c:36:98:aa:4b:9e:61:85:0d:f2:57:d7:f3:42:8f:cf:
         01:5f:1d:32:68:75:5f:47:77:eb:03:97:cf:92:4d:0d:ff:41:
         74:e0:0c:73:f6:20:d2:5e:92:05:31:f2:a2:aa:df:b5:05:12:
         98:40:6d:7e:ff:25:cc:0b:23:34:c9:9b:02:e9:b8:7b:0a:59:
         4f:42:0e:00:03:ba:8a:88:d7:e1:b8:5c:6d:6c:05:02:a2:e2:
         2e:87:a3:76:55:bf:56:98:af:bc:05:e7:61:46:f7:f3:91:42:
         2a:32:58:7c:a2:89:5b:e3:1b:69:9a:30:42:7f:c0:5d:58:74:
         5a:73:59:f2:41:ed:09:97:08:40:47:4e:3e:14:63:93:c0:d1:
         44:c1:da:7e:e2:9c:9e:49:3e:e0:37:cd:2d:ba:c8:9e:5f:7b:
         dd:75:d5:4e:a9:da:f4:97:29:8d:b0:a5:36:ff:b8:73:19:5e:
         77:56:7a:42:e1:18:9d:97:50:0e:f8:7a:71:ed:14:a7:43:8c:
         9a:4c:5f:84:ef:fd:64:6a:96:c7:d4:e9:83:bc:63:8e:8f:ab:
         58:87:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:45 2024 by rpki-client on console-fra.rpki-client.org