Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3136302e302f32322d3232203d3e203237363531.roa
File:                     3139302e39312e3136302e302f32322d3232203d3e203237363531.roa (raw, json)
Hash identifier:          Y2R0SoBJoeyDM0bELOrR34iYt0p2UB3OBHvqt4+wIec=
Subject key identifier:   3B:90:09:64:04:A8:9A:2F:45:0E:2D:52:20:7B:BD:B1:4C:D9:21:7F
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       2DA4E1047CAA21A4D2412C685F8028F84B3A41D5
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3136302e302f32322d3232203d3e203237363531.roa
Signing time:             Thu 27 Jun 2024 20:55:00 +0000
ROA not before:           Thu 27 Jun 2024 20:50:00 +0000
ROA not after:            Thu 26 Jun 2025 20:55:00 +0000
asID:                     27651
IP address blocks:        190.91.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a4:e1:04:7c:aa:21:a4:d2:41:2c:68:5f:80:28:f8:4b:3a:41:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Jun 27 20:50:00 2024 GMT
            Not After : Jun 26 20:55:00 2025 GMT
        Subject: CN=3B90096404A89A2F450E2D52207BBDB14CD9217F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:38:39:51:d3:71:2e:a9:01:e2:f7:46:08:
                    54:86:45:fb:df:c8:29:74:0e:f2:90:94:59:00:11:
                    1f:b0:f0:29:e0:ab:d4:9e:34:b4:26:61:3e:8c:b2:
                    77:6e:64:38:d9:2c:2a:79:eb:1f:6d:d3:7e:8c:fb:
                    f8:d8:ba:f5:d8:cf:99:81:21:6a:c3:46:74:9f:43:
                    57:33:22:23:78:03:4f:96:d0:82:cc:ac:48:3b:6d:
                    c4:6b:52:60:20:fc:ca:e8:ff:73:cb:ed:c9:5b:09:
                    c2:a8:8b:71:19:96:01:ca:9d:00:87:95:3f:60:1d:
                    94:1c:9e:f6:e8:70:6a:8b:38:65:47:d4:15:db:56:
                    d9:d3:97:db:a6:a9:56:71:a5:fb:99:2a:bd:63:9b:
                    e8:e3:76:04:9e:45:bc:41:31:de:cc:ee:45:dd:ab:
                    76:51:7a:f3:58:f2:3a:5e:1d:43:2d:70:32:65:c8:
                    2e:04:48:c6:3b:0c:be:8b:87:a8:ba:90:38:8b:0b:
                    7d:1b:4e:45:7a:d5:6a:90:13:ce:3f:5e:23:a8:dd:
                    1b:ab:d2:4d:c5:44:aa:b2:81:6a:93:4f:7f:1b:5e:
                    12:7c:d7:0a:f5:ef:63:c5:1e:b3:5e:a7:8d:29:01:
                    b5:35:d3:1f:fb:69:43:31:e7:82:72:2b:9e:b3:23:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:90:09:64:04:A8:9A:2F:45:0E:2D:52:20:7B:BD:B1:4C:D9:21:7F
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3136302e302f32322d3232203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:2a:9a:40:8d:c0:28:8d:68:b9:7e:ef:ca:75:19:74:47:fe:
         aa:d6:e5:f0:45:1e:99:fc:8c:25:34:45:bd:ae:63:c3:77:35:
         c1:89:6a:31:ec:09:7b:a1:27:a5:e9:d4:f7:80:f0:c0:e4:52:
         4c:21:21:31:b6:a7:85:d2:47:1a:21:12:15:55:f3:bd:2d:d8:
         de:ab:ce:c0:b1:b6:9a:63:16:7a:e9:a0:79:79:50:ae:96:7b:
         45:81:5c:6a:cc:8f:10:af:07:fe:b6:e3:6a:d0:54:f2:f5:3a:
         33:23:e5:2d:59:64:3a:33:06:1b:19:d8:51:57:fe:1b:e2:71:
         91:9d:79:da:90:bd:83:8a:a6:71:2a:59:65:33:2e:37:38:59:
         4e:a1:25:8b:70:73:63:31:73:7a:e8:b2:fd:47:f2:9c:32:32:
         01:62:31:cc:d6:79:fe:92:dc:e8:63:99:21:93:b8:d6:a6:23:
         ef:43:a1:94:39:12:1e:3d:ed:55:c8:d6:3d:b3:5a:28:9f:78:
         53:9a:5f:63:a5:bc:3d:eb:c0:d3:83:b6:49:b7:4b:89:19:ea:
         20:02:d8:a1:3e:4b:50:90:45:0c:b7:e8:6a:b1:a5:92:2d:16:
         51:45:74:7e:fb:c4:d9:cf:2d:63:94:51:0d:c3:75:3d:41:bb:
         31:36:7a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 09:26:51 2024 by rpki-client on console-ams.rpki-client.org