Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa
File:                     3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa (raw, json)
Hash identifier:          pRHYyeRBDgIExBXjwUE4g1rx+cwlDLANhIMXQQbkX+U=
Subject key identifier:   3F:F1:7B:C1:D7:75:CF:B1:79:18:59:38:D2:CC:7B:4C:BD:AB:ED:65
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       75F3D19584EB92F07C18FD28B870F691952C2886
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa
Signing time:             Tue 05 Mar 2024 18:00:41 +0000
ROA not before:           Tue 05 Mar 2024 17:55:41 +0000
ROA not after:            Tue 04 Mar 2025 18:00:41 +0000
asID:                     32590
IP address blocks:        190.216.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f3:d1:95:84:eb:92:f0:7c:18:fd:28:b8:70:f6:91:95:2c:28:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:41 2024 GMT
            Not After : Mar  4 18:00:41 2025 GMT
        Subject: CN=3FF17BC1D775CFB179185938D2CC7B4CBDABED65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:bb:b6:fd:b1:66:04:07:09:49:b7:4e:55:
                    f8:1c:c4:d0:a7:45:9a:80:f5:aa:57:9c:9c:aa:3d:
                    3e:89:7d:87:06:d2:b0:ee:d6:1f:81:3f:51:13:0f:
                    40:06:41:15:e5:61:08:cb:d0:cb:e7:81:76:68:ec:
                    be:f6:2a:cb:e3:2f:d8:a3:5d:01:9e:ad:95:86:0f:
                    33:a8:0e:f9:ad:72:7c:e0:9e:a9:dd:0a:f2:e5:5b:
                    0e:f0:8e:e1:5e:9d:e2:83:7a:78:7e:0d:8e:79:ba:
                    82:5d:49:a4:1a:65:2b:5f:ce:f7:e6:88:86:67:7b:
                    fb:c3:5b:8e:de:b7:04:d5:f8:c3:fd:3e:5e:40:72:
                    ce:44:e0:32:e3:27:63:80:dd:33:bd:3f:84:92:77:
                    b7:02:80:dd:64:05:68:61:72:f5:41:89:ab:e3:b0:
                    bf:66:9c:87:90:58:f8:c7:bc:0b:95:30:d8:4c:16:
                    24:1c:56:c8:6a:01:d8:1a:b0:0a:18:1a:a0:f8:35:
                    55:36:49:7d:a9:c3:0d:f1:05:3e:56:3d:75:b4:b1:
                    3e:8e:fa:21:b4:68:7b:b1:a7:ae:94:6c:a1:28:11:
                    06:dd:4d:01:6d:07:55:d8:2b:2a:de:ff:29:86:6f:
                    f7:a3:f3:c1:58:4d:1d:3f:a9:22:c4:c5:cb:1d:ae:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F1:7B:C1:D7:75:CF:B1:79:18:59:38:D2:CC:7B:4C:BD:AB:ED:65
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:50:55:09:90:fc:cf:25:f6:4f:a5:7c:3c:99:05:a1:e5:13:
         ba:60:54:48:74:3c:48:9c:6e:95:13:c1:10:1f:97:81:54:84:
         53:9a:db:7b:21:33:a2:55:cc:75:76:06:01:f0:37:1d:fb:20:
         a5:7d:c5:59:f4:1d:e1:4d:41:de:09:d0:a3:b2:d5:09:f8:67:
         15:ff:df:1c:c7:38:43:2c:3d:f6:35:f0:55:d6:0b:39:e7:21:
         6d:1d:49:ea:f4:f5:6a:0a:a0:63:e2:dd:82:0e:83:43:a8:1d:
         42:5f:9d:57:96:fb:83:59:7a:19:45:92:b7:b3:8b:ba:1f:8d:
         83:0d:91:26:94:5e:2e:f8:cf:ec:b7:76:44:d4:25:78:57:b7:
         89:6d:a9:d8:8c:af:74:60:65:11:96:a5:15:6a:3d:fc:9e:53:
         5f:b1:a0:03:44:90:e9:59:a2:67:e4:59:77:f2:9b:2c:72:4d:
         25:ac:11:e9:aa:4d:e2:8a:67:ce:49:1e:94:35:2f:f8:38:cf:
         2f:33:dd:7f:90:da:42:97:20:c4:a8:44:23:93:0a:36:cd:33:
         f8:8e:73:ef:3b:dc:fb:39:1d:92:d1:a2:07:ff:ba:25:de:54:
         f8:0d:c0:3d:d4:8b:5c:88:cb:c1:69:c0:96:06:e1:8f:ef:9f:
         ca:de:83:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:10 2024 by rpki-client on console-ams.rpki-client.org