Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa
File:                     3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa (raw, json)
Hash identifier:          lAKS0bqzF6cmXlMImOM5bCULF7Q1cmO0+LkpIjOaVqQ=
Subject key identifier:   06:34:1A:52:F6:53:6F:30:B8:63:50:7B:2F:33:77:3F:44:43:01:01
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       134B1CA96208D478A13F08DDE49C3E0AADE82D8C
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa
Signing time:             Tue 05 Mar 2024 18:00:48 +0000
ROA not before:           Tue 05 Mar 2024 17:55:48 +0000
ROA not after:            Tue 04 Mar 2025 18:00:48 +0000
asID:                     273120
IP address blocks:        190.217.20.96/28 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:1c:a9:62:08:d4:78:a1:3f:08:dd:e4:9c:3e:0a:ad:e8:2d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:48 2024 GMT
            Not After : Mar  4 18:00:48 2025 GMT
        Subject: CN=06341A52F6536F30B863507B2F33773F44430101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:11:2a:1b:11:0e:01:cc:50:62:44:f1:8f:
                    f7:ac:b4:5c:ca:6f:57:d1:7c:b0:ed:85:27:7e:14:
                    f9:a0:41:f3:8a:59:fc:bd:2c:ae:de:a3:01:b4:26:
                    f4:c0:24:74:9c:7a:32:81:47:43:57:e5:b7:8c:e3:
                    3e:43:87:7e:05:5d:56:74:a3:62:7a:39:0b:38:97:
                    fa:e9:81:1b:71:9f:f4:b4:73:ba:29:6a:1e:ff:03:
                    1c:7b:74:f8:6c:20:29:b3:71:14:c0:98:28:44:c7:
                    9d:b3:74:fe:42:f4:bd:7e:01:9f:d4:ac:38:1b:c7:
                    4d:98:65:06:b0:fd:1c:cc:56:79:16:eb:fe:3b:04:
                    93:88:98:af:a7:44:a9:8a:81:42:9a:64:55:55:02:
                    ea:88:9d:ca:2f:ef:2d:76:fb:9b:fa:cb:b0:e3:f2:
                    cd:df:f1:ff:68:aa:b1:04:d5:c3:a1:3e:04:22:90:
                    8e:93:89:db:43:f2:49:9a:f4:9f:2f:17:cf:90:ba:
                    44:53:91:b4:b5:35:54:57:bf:ed:9c:60:2a:01:fd:
                    9d:91:5b:14:64:89:28:ae:0e:d1:4d:13:31:01:99:
                    a5:ce:2b:93:4e:10:e8:34:74:31:94:ba:7d:ae:7d:
                    16:ba:49:d2:3c:9e:d4:7e:a4:b8:13:64:ae:43:ce:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:34:1A:52:F6:53:6F:30:B8:63:50:7B:2F:33:77:3F:44:43:01:01
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.20.96/28

    Signature Algorithm: sha256WithRSAEncryption
         97:f6:a9:d6:0f:10:b2:d3:57:3f:50:1e:76:71:5d:19:13:56:
         e7:92:b3:dd:f9:3c:c5:bf:6e:58:c6:75:3c:55:aa:ca:1c:67:
         7f:65:9b:ef:4f:59:88:d2:88:da:72:8e:09:bd:b3:96:11:04:
         0e:2d:65:ad:e3:6e:0a:52:7e:3b:16:73:13:8b:82:29:25:db:
         97:e9:73:62:32:54:a7:b1:ce:d1:e8:4c:67:86:e9:87:f7:94:
         61:1a:9f:b8:f3:5b:e1:b6:61:f4:8e:42:07:0c:60:01:78:e1:
         e9:37:e7:75:94:56:69:16:3c:50:9b:37:f3:65:b6:bf:f5:09:
         bf:40:72:a6:4c:d5:78:3a:fa:1b:96:f9:89:1a:58:04:13:e4:
         fe:af:eb:0a:f9:ed:26:49:88:59:50:fa:86:29:ae:93:61:3d:
         91:d7:02:a1:e2:21:c5:81:98:0d:16:b7:4a:3f:1d:91:d9:1c:
         6d:58:08:85:63:b2:31:f5:d1:48:19:67:25:a7:92:a2:6a:11:
         80:23:0d:b1:c2:cd:18:9a:5a:85:c5:9d:80:d7:a7:b1:76:ad:
         0c:c7:2a:eb:7b:10:89:d1:f4:97:a2:6a:00:6d:99:7e:13:a0:
         9c:d0:99:89:75:34:e3:da:19:d9:5a:0a:3f:4c:d5:ec:2a:d4:
         c1:3a:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org