Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa
File:                     3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa (raw, json)
Hash identifier:          91PHGomwzAoOVg4hhOMLYLz3T7mHZry3CcHFV7oN0U4=
Subject key identifier:   A1:A6:84:7E:D7:04:4D:2A:36:7F:C0:B9:4F:73:F0:1E:1E:97:7F:08
Certificate issuer:       /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial:       0CCFE3D95A1634F3609DB0C059EB66993BCD776B
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:13:33 +0000
ROA not before:           Tue 05 Mar 2024 18:08:33 +0000
ROA not after:            Tue 04 Mar 2025 18:13:33 +0000
asID:                     60022
IP address blocks:        190.121.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cf:e3:d9:5a:16:34:f3:60:9d:b0:c0:59:eb:66:99:3b:cd:77:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
        Validity
            Not Before: Mar  5 18:08:33 2024 GMT
            Not After : Mar  4 18:13:33 2025 GMT
        Subject: CN=A1A6847ED7044D2A367FC0B94F73F01E1E977F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:3a:5c:e8:5d:f4:69:fb:3e:a2:6b:16:47:
                    e9:c6:d8:2f:f9:06:28:71:f8:88:bd:7f:5b:f7:42:
                    e6:37:64:8a:ac:29:5d:52:34:d6:a3:90:fa:ef:ea:
                    aa:29:f1:52:91:38:d2:39:e3:5f:15:eb:ff:80:c6:
                    24:ee:59:51:5a:8a:7b:58:12:18:f1:79:b6:c1:74:
                    32:74:89:af:6d:01:0e:8b:d3:12:20:5a:1d:3d:ec:
                    6a:c7:bd:be:72:52:83:64:c6:11:a1:ed:93:9c:62:
                    5a:ce:2a:b5:56:f4:cc:7d:38:68:98:87:7c:94:81:
                    0e:cd:ad:c7:24:12:e8:1a:45:db:ca:87:11:60:c6:
                    a3:71:72:2f:bc:8d:5c:af:16:24:48:c4:b7:a5:2b:
                    f4:bf:cd:a8:db:c0:2e:cd:66:c0:f6:8f:fb:00:6f:
                    11:d4:84:8d:cb:76:9b:f5:23:4a:1b:45:79:d1:3f:
                    c2:b6:80:3e:34:aa:b1:23:aa:30:f9:76:5d:13:61:
                    9f:fd:5a:6a:b6:58:7f:47:19:66:80:06:b0:5c:ca:
                    3e:ac:4b:12:f7:2d:b1:ad:92:5c:31:75:90:37:b2:
                    d0:e9:5e:86:9a:2e:4d:dd:65:6b:4b:13:b2:2e:26:
                    37:9c:3a:38:86:4d:e6:e5:3a:e3:47:ec:6c:a0:ca:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A6:84:7E:D7:04:4D:2A:36:7F:C0:B9:4F:73:F0:1E:1E:97:7F:08
            X509v3 Authority Key Identifier:
                keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:cb:be:6f:80:ee:4e:e5:77:81:9b:34:fd:3a:b3:e7:11:74:
         2e:ac:c1:5a:35:10:dd:98:44:85:cc:b0:f1:b5:c2:b9:4c:ee:
         f4:94:91:ea:43:88:7f:54:bd:9b:8c:b4:d8:46:2f:f7:25:df:
         13:5d:a1:de:9e:7a:aa:7a:5b:b2:38:e8:2a:fc:98:9e:7b:d5:
         77:c1:0c:9c:a9:19:9f:39:0d:e6:1f:4a:37:00:60:09:c3:0b:
         0a:fb:19:07:cc:11:cb:62:c1:80:63:b8:16:32:b1:da:06:1c:
         44:58:3a:a2:79:fe:d9:a8:cb:62:f6:eb:04:7b:a5:d9:25:76:
         a4:28:f9:a3:0f:a3:8b:5b:9c:71:bf:5d:ca:a7:01:a7:24:df:
         57:4e:40:48:c6:37:38:69:c3:1e:85:27:03:0d:4b:70:09:45:
         e7:96:35:de:b4:c7:a1:40:c7:80:6d:a2:94:55:8e:6c:c5:3a:
         a5:f3:5f:35:dc:c8:52:cd:94:cb:da:5e:f2:0d:9e:0f:c6:a4:
         88:12:89:93:3f:95:bb:f1:65:d1:d6:20:63:51:28:d2:ea:6a:
         ea:a4:82:39:08:e1:17:0a:e7:59:60:5f:11:73:fa:30:89:18:
         2a:ca:4e:87:d5:69:a1:a2:d7:f2:15:60:17:91:ad:db:39:09:
         7b:ac:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:18:51 2024 by rpki-client on console-fra.rpki-client.org