Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f31382d3234203d3e203235363230.roa
File:                     3139302e3137312e3139322e302f31382d3234203d3e203235363230.roa (raw, json)
Hash identifier:          3CKZNFm5ViQ+39AwZd/3av502fl3ncfHAeJMl2FJX7c=
Subject key identifier:   C7:06:E1:69:C6:E5:77:E2:62:9B:C3:9E:22:DF:8E:ED:9E:CB:C2:AD
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       5606AE77F33436F916C6E79ED177807EBD9A91F5
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f31382d3234203d3e203235363230.roa
Signing time:             Tue 05 Mar 2024 18:16:26 +0000
ROA not before:           Tue 05 Mar 2024 18:11:26 +0000
ROA not after:            Tue 04 Mar 2025 18:16:26 +0000
asID:                     25620
IP address blocks:        190.171.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:06:ae:77:f3:34:36:f9:16:c6:e7:9e:d1:77:80:7e:bd:9a:91:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Mar  5 18:11:26 2024 GMT
            Not After : Mar  4 18:16:26 2025 GMT
        Subject: CN=C706E169C6E577E2629BC39E22DF8EED9ECBC2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:b0:6a:65:12:73:35:fa:23:94:e2:85:43:
                    7e:34:e7:05:75:d6:4b:b3:0f:b6:b4:cb:4e:43:3f:
                    ff:23:ff:df:5e:bd:e2:03:46:9d:23:a8:f1:9c:35:
                    bc:75:4c:c5:7e:08:9b:8b:f3:d8:0c:4b:ec:fd:45:
                    10:c5:6c:1d:4a:ee:4c:1d:da:5d:b2:6d:91:6a:f1:
                    d1:8c:ce:ac:1c:08:a5:87:81:c5:c9:90:fa:31:12:
                    93:48:75:39:a8:4a:c8:5a:f7:59:c9:a9:51:e1:e2:
                    11:28:1e:34:2f:0c:da:7b:79:85:33:26:cd:68:91:
                    8f:c1:f0:43:ae:4a:b7:d8:69:08:9d:82:06:1e:5e:
                    99:49:50:74:c8:40:a6:c1:41:6d:cd:89:e3:a7:df:
                    3c:ab:ec:26:9e:98:5f:56:34:a6:68:0e:e2:a6:b3:
                    77:6e:0c:1e:5c:74:4a:3e:35:33:5e:48:30:ba:f2:
                    ae:9b:dc:78:aa:5c:79:b6:de:fe:05:a6:9d:4f:66:
                    26:e8:9a:be:98:77:f8:fd:29:b3:50:e2:48:5c:81:
                    2b:af:23:69:64:e9:f7:9f:af:08:d5:30:3a:4c:37:
                    bf:0c:fc:0d:2d:33:12:e4:63:73:cb:72:a1:d8:9b:
                    62:72:99:39:e2:3b:bf:76:13:91:e9:cb:5c:c7:38:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:E1:69:C6:E5:77:E2:62:9B:C3:9E:22:DF:8E:ED:9E:CB:C2:AD
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f31382d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:d6:64:a7:14:ef:f2:6e:79:cf:6b:19:07:a1:c1:95:7c:
         ac:81:3b:08:bc:f9:8b:8c:ea:6e:40:9a:85:ee:71:a6:9e:2c:
         e9:cc:de:2b:1c:53:53:87:6a:b4:68:71:dd:dc:a7:8d:08:85:
         c8:b4:b1:6e:d4:e8:47:18:55:d7:63:64:39:71:6e:f4:d8:c1:
         3a:a6:36:2e:83:42:1c:3e:2b:64:b8:b0:e6:52:6e:8c:b7:ba:
         eb:b2:8a:d2:4d:bb:de:f0:bc:24:1f:d7:c6:1f:fe:ca:b5:7e:
         4c:11:38:65:0e:82:3f:62:d3:4b:71:dc:1e:c9:ac:11:81:73:
         eb:f3:41:ff:1b:f7:9e:0a:de:ac:0f:50:34:bf:dc:f1:07:e7:
         9d:28:89:4b:7e:5c:fe:15:32:5c:07:c5:ae:87:c9:cb:13:b8:
         7a:50:05:ca:f1:b9:c0:7b:8c:df:47:21:34:dc:89:11:a7:8b:
         bb:a7:bb:58:cc:6c:91:a6:9a:f9:7b:37:3c:be:0d:c5:f0:a4:
         35:32:36:6c:a7:ad:81:bb:a9:40:d0:4e:96:6a:9e:33:b7:b5:
         df:8e:27:af:1c:62:5d:c7:f9:91:10:92:69:89:32:b9:86:41:
         ca:dc:f1:47:66:6b:ec:9f:ac:23:51:30:5a:0e:ff:22:2c:3d:
         c1:f4:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org