Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa
File:                     3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa (raw, json)
Hash identifier:          3Vhloazgk/Ih6ByeY01malVE8ODvyr+qd51N/JXyyRA=
Subject key identifier:   3F:66:EF:B2:66:1C:96:AC:B0:D4:63:DB:38:67:5A:A5:31:D0:0E:5F
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       6D4B90541C8BEAB44D8081A15A5AE098F767C694
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     40676
IP address blocks:        190.110.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4b:90:54:1c:8b:ea:b4:4d:80:81:a1:5a:5a:e0:98:f7:67:c6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=3F66EFB2661C96ACB0D463DB38675AA531D00E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:34:99:fa:cb:75:1f:8a:01:63:b9:e4:be:
                    b7:63:c1:b7:fa:8e:e0:7e:2d:b3:40:89:2c:60:fc:
                    5a:36:2d:36:8b:01:c1:b6:72:6a:73:c2:6b:30:18:
                    3b:5d:7d:ec:cd:0b:2e:c9:91:f7:f7:b4:cd:a9:7a:
                    ea:39:e1:29:c5:a2:3f:47:cc:d2:cc:df:b6:76:1a:
                    09:3c:a1:25:48:46:d7:91:d1:84:ca:f0:8b:25:01:
                    3c:58:69:7d:67:ca:7d:c7:eb:8c:7a:1b:db:c9:04:
                    50:e0:71:5a:77:91:8d:77:b0:92:b8:90:fd:f3:a3:
                    ef:8e:f4:70:4b:75:50:4e:8c:bf:bc:70:24:4c:74:
                    e3:14:c4:e7:45:16:fb:42:05:86:8c:27:39:73:c7:
                    88:a5:08:6e:e5:c8:1e:80:d8:56:7d:73:b8:9a:2c:
                    ba:fa:c5:a0:7b:81:e0:c6:2d:9e:10:f5:82:d1:1c:
                    04:af:b0:a5:b5:98:4f:df:4a:d5:9b:25:cb:2a:f7:
                    73:b4:19:70:b1:b3:7a:d7:12:25:80:a2:5c:45:3b:
                    19:65:c1:4b:2c:9e:59:61:fb:80:dc:0c:26:3a:51:
                    15:d8:96:f9:df:c7:c1:56:60:22:db:ff:aa:d8:8a:
                    d1:35:92:74:0b:b5:6f:c9:53:d0:74:b6:69:78:5a:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:66:EF:B2:66:1C:96:AC:B0:D4:63:DB:38:67:5A:A5:31:D0:0E:5F
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:80:fd:aa:3d:3a:32:98:33:54:c1:09:23:49:52:01:6e:df:
         13:27:1f:1a:64:89:46:a9:30:48:b6:0c:fc:dc:bd:87:00:b8:
         0a:b0:c5:3a:1c:57:52:4e:56:b0:0a:c1:ce:3c:1b:32:c1:58:
         e6:e6:6a:15:54:28:2f:34:19:0e:ff:5f:2a:ab:b1:ad:0e:8d:
         83:a0:fc:81:88:18:66:24:93:a0:51:57:62:44:48:c8:02:4a:
         7c:32:bf:95:b2:01:12:3b:55:a5:a6:65:73:a4:5e:47:8d:f2:
         38:81:de:b0:1d:5c:ae:81:bf:af:0b:cd:b6:4b:61:8f:4d:00:
         a3:85:bb:38:c5:0c:72:f5:11:a5:91:82:6d:93:e5:0f:5e:11:
         8a:d2:ff:e7:fd:27:21:4d:a2:ce:f4:52:46:38:2b:03:2f:85:
         16:b8:41:9d:60:0f:17:df:ec:a3:ff:e9:26:d7:fc:ce:de:f3:
         74:d1:dc:73:f3:a6:eb:c5:14:50:f8:61:cc:ac:99:09:36:1e:
         c3:3e:f6:e7:5b:e2:03:ea:92:fc:b3:22:26:27:44:43:b4:cd:
         cc:c2:55:6d:dc:16:42:b7:ef:32:ea:08:1e:dd:09:74:8c:60:
         3f:5a:a0:6f:2e:98:0c:ae:11:73:eb:78:c1:dd:07:cf:6d:30:
         30:57:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 05:30:15 2024 by rpki-client on console-ams.rpki-client.org