Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3134342e302f32302d3234203d3e203237363531.roa
File:                     3139302e39312e3134342e302f32302d3234203d3e203237363531.roa (raw, json)
Hash identifier:          uXzMTrHYMk/yfZ4c2ypLI51ITmvgpfQNtmPN4WGMwzg=
Subject key identifier:   0A:4C:62:75:2F:1B:18:DB:A0:4E:32:67:46:94:DC:6B:99:D5:8B:42
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       100427C513D95B5B2745619A487A2C0124E852D8
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3134342e302f32302d3234203d3e203237363531.roa
Signing time:             Fri 26 Apr 2024 19:45:00 +0000
ROA not before:           Fri 26 Apr 2024 19:40:00 +0000
ROA not after:            Fri 25 Apr 2025 19:45:00 +0000
asID:                     27651
IP address blocks:        190.91.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 15:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:04:27:c5:13:d9:5b:5b:27:45:61:9a:48:7a:2c:01:24:e8:52:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Apr 26 19:40:00 2024 GMT
            Not After : Apr 25 19:45:00 2025 GMT
        Subject: CN=0A4C62752F1B18DBA04E32674694DC6B99D58B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:6c:ae:9d:5f:50:ac:32:f4:a9:4a:18:b5:
                    fd:c8:f1:17:9f:29:2b:c6:12:38:ca:b3:64:73:0a:
                    e5:b7:80:1b:10:fc:31:d6:be:4f:57:e2:e7:33:f6:
                    fe:3d:8e:2f:21:6a:1f:15:b4:6c:5f:2e:ee:1f:6e:
                    b8:ef:c1:e6:07:dd:4d:e3:6f:36:b5:62:2d:a5:aa:
                    95:f9:ec:a8:df:a0:f3:ea:6a:c3:b8:40:27:76:0b:
                    3f:25:19:3c:19:45:96:13:c1:c8:69:fc:b0:11:8e:
                    66:41:24:e4:c7:59:d1:3a:98:a8:1d:64:2d:31:4f:
                    6e:ea:29:37:b3:6c:4f:6f:54:38:57:39:94:6a:67:
                    71:36:85:ce:b8:98:0e:f9:85:79:4c:03:e4:b2:4b:
                    47:0f:46:35:be:b5:5e:5e:90:cf:b9:35:61:97:c0:
                    c9:58:80:1d:34:ba:5a:f6:ae:9d:31:02:f4:f0:95:
                    31:19:fe:a2:4c:38:48:2a:f1:93:d7:88:81:a4:40:
                    73:44:c0:53:ac:cf:64:ef:02:16:24:af:04:db:76:
                    01:b8:dc:63:67:70:45:a6:7b:61:0e:4b:5f:91:a1:
                    1a:09:00:41:f8:c5:19:f2:fc:03:6b:8d:12:9d:ba:
                    4e:bf:ca:34:b2:67:a5:50:0e:3c:78:1c:18:2b:3f:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4C:62:75:2F:1B:18:DB:A0:4E:32:67:46:94:DC:6B:99:D5:8B:42
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3134342e302f32302d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:16:7b:b7:36:07:e7:92:80:24:90:6c:84:cc:9e:a8:05:
         1d:31:23:2a:98:b8:a4:e7:c8:6f:d1:e7:d9:23:ae:02:a0:d1:
         5a:e1:0c:a0:b7:3d:81:28:8e:03:25:94:59:78:f2:9f:e8:05:
         1d:8a:11:01:df:ff:70:a8:bf:f3:b1:cc:3c:48:43:95:a4:e8:
         d1:39:d9:66:ca:6f:19:1b:3a:d3:bd:b3:e9:65:8a:27:f9:8f:
         0a:c5:f6:de:ff:31:9c:76:79:65:57:bf:cc:5f:49:c0:0b:2d:
         56:42:23:1f:ad:a3:4f:e0:5d:6e:92:ff:0f:78:77:de:69:54:
         66:65:d4:f5:3e:a1:e5:47:44:a2:71:b0:ee:27:f4:40:0a:32:
         9d:81:09:8d:31:5f:a5:b3:37:b0:58:c2:99:d9:4c:fd:22:f3:
         04:70:06:9d:55:65:a1:eb:1d:82:11:7d:f9:65:c9:bc:a8:b9:
         ad:bc:18:5f:2b:45:d6:ed:c0:ce:39:80:77:14:7e:b4:00:4c:
         17:96:d9:77:34:39:35:8b:67:2d:eb:5f:b0:73:88:1b:dd:6e:
         0e:20:6e:3b:9f:bd:f4:10:00:c1:e5:c1:5e:4e:77:40:9b:c9:
         ad:07:b5:1c:72:58:68:2c:c3:9d:d3:e9:f4:51:6d:ef:e3:34:
         55:de:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:53:46 2024 by rpki-client on console-fra.rpki-client.org