Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa
File:                     3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa (raw, json)
Hash identifier:          APMG4O6+9lgXXS0VFqEOfGtFFP7yKec/zJPfWCaNTXs=
Subject key identifier:   AB:6E:27:B2:0D:D8:22:BB:95:93:39:68:CC:E1:74:FE:17:4E:F6:1C
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       61C70A8394670E21A78DA9926FA28EB788A86A9D
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa
Signing time:             Tue 05 Mar 2024 18:01:00 +0000
ROA not before:           Tue 05 Mar 2024 17:56:00 +0000
ROA not after:            Tue 04 Mar 2025 18:01:00 +0000
asID:                     27989
IP address blocks:        190.216.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c7:0a:83:94:67:0e:21:a7:8d:a9:92:6f:a2:8e:b7:88:a8:6a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:56:00 2024 GMT
            Not After : Mar  4 18:01:00 2025 GMT
        Subject: CN=AB6E27B20DD822BB95933968CCE174FE174EF61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:a2:ab:87:c1:b4:27:97:ce:00:37:fa:d8:
                    9c:3a:1a:ba:e9:da:b1:1f:64:d5:2d:ae:99:ae:31:
                    6d:ea:5c:47:3f:ba:3b:ef:09:77:86:b0:d0:f3:dd:
                    f8:15:52:1f:33:5a:63:8a:40:75:a2:d5:e7:2c:23:
                    d0:fd:78:75:be:d5:e9:60:25:2b:d4:1c:63:f6:f7:
                    85:18:f2:07:b4:de:6d:bd:3b:2b:41:c2:76:70:89:
                    ec:69:f8:d4:e7:bf:2d:9f:5b:3b:5c:dd:a6:d8:45:
                    13:2c:d3:97:03:37:ee:7f:aa:ba:cd:e1:1f:d9:0f:
                    40:71:83:1d:51:a3:f2:3e:ed:7b:6e:8f:1b:44:29:
                    75:25:0b:e0:ad:7d:a8:58:3b:00:09:41:6f:d7:d8:
                    2c:9e:a2:a6:da:2d:ec:6e:b6:0a:d8:ea:d4:28:98:
                    51:e0:22:6c:da:c3:33:6d:1a:60:3e:c3:e8:2a:fc:
                    8e:ca:13:22:d5:c8:81:a1:73:30:65:58:63:cd:20:
                    0e:50:bf:7d:db:6d:01:a3:24:75:60:9f:70:d6:4d:
                    87:9f:04:41:36:69:eb:ba:37:e2:a4:2c:c9:27:d4:
                    ab:3a:cc:15:10:ec:23:47:86:ba:f5:4a:af:77:e5:
                    4e:58:78:4b:c5:33:9c:c6:10:84:2e:56:ac:5e:30:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:27:B2:0D:D8:22:BB:95:93:39:68:CC:E1:74:FE:17:4E:F6:1C
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:21:ff:9d:20:c8:d6:1b:1d:1b:07:49:60:f9:00:05:76:43:
         64:40:5a:79:f4:f9:7a:8a:20:69:67:b2:2b:63:4b:49:b9:d7:
         fa:cf:21:36:b5:78:81:9e:0c:b3:e5:e9:44:47:e5:dd:9f:97:
         18:77:b4:6a:db:d2:73:68:de:4d:5c:b6:5d:50:1e:64:b7:d7:
         89:51:58:1b:2f:e7:23:75:f3:f9:8b:12:e0:59:a9:0e:81:7b:
         e3:b7:f5:34:c4:ed:46:3a:59:c7:c9:2e:b6:8b:65:15:44:1f:
         51:a9:4b:db:63:e7:f4:e0:3e:7a:7e:17:a3:00:13:1c:85:48:
         24:76:b5:f8:c9:ac:7c:86:7a:c7:3a:93:95:22:23:bd:86:59:
         9f:8f:fc:4e:a6:40:f2:3e:a1:2a:39:e6:73:5b:47:1a:50:a1:
         e9:04:66:42:63:b0:a3:4b:1a:2e:af:26:09:b0:00:17:77:1b:
         d6:63:dc:1c:8e:a9:50:33:c1:b2:ce:a6:0e:3a:c3:26:36:6e:
         39:b2:03:27:38:44:28:34:20:af:d1:5a:36:78:84:d8:1b:ba:
         ae:2a:e9:e0:13:2d:56:db:cb:e0:94:19:cd:ec:31:2b:b2:2d:
         e8:41:de:92:d7:b4:77:fb:09:09:50:61:74:2b:1e:f8:d2:d4:
         3e:98:40:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:10 2024 by rpki-client on console-ams.rpki-client.org