Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa
File:                     3139302e3132322e33322e302f32302d3233203d3e203237393630.roa (raw, json)
Hash identifier:          C0LpUy3/tK/KOnywW5GCed/GvlW4u9ykZZFTu97eklA=
Subject key identifier:   9B:D7:1E:8F:9B:B2:7C:5B:27:5E:1D:F6:2D:8E:91:1B:54:E0:9C:C2
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       59EC9F44BD2CA9C2F8279714D3B041B9933B0D32
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa
Signing time:             Tue 05 Mar 2024 18:07:46 +0000
ROA not before:           Tue 05 Mar 2024 18:02:46 +0000
ROA not after:            Tue 04 Mar 2025 18:07:46 +0000
asID:                     27960
IP address blocks:        190.122.32.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ec:9f:44:bd:2c:a9:c2:f8:27:97:14:d3:b0:41:b9:93:3b:0d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Mar  5 18:02:46 2024 GMT
            Not After : Mar  4 18:07:46 2025 GMT
        Subject: CN=9BD71E8F9BB27C5B275E1DF62D8E911B54E09CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:4d:12:d3:23:48:9f:29:c6:27:e2:b3:e1:
                    b9:e8:49:a7:a3:fe:15:f2:0d:9f:dd:ce:15:d2:37:
                    63:c7:12:0f:62:26:35:06:5a:eb:2e:d9:4d:e3:19:
                    40:8e:aa:78:2e:82:c3:cc:78:3d:ff:f8:9f:d5:2d:
                    22:a8:d4:f9:ae:ce:30:64:73:67:83:75:52:a2:87:
                    bb:e4:ba:0b:ac:62:27:7b:3e:c0:e0:5e:81:a2:f7:
                    6f:ca:30:79:7b:b5:d7:2b:59:e3:4b:05:a3:de:2d:
                    96:46:cb:7c:12:32:07:69:05:7a:f6:80:1c:ca:21:
                    f1:bb:12:8d:6f:98:c4:a4:5b:22:bd:f1:4a:56:9c:
                    2f:df:1f:46:ac:d2:15:5e:b9:dc:c7:c9:ec:9d:1b:
                    73:b0:a5:12:d5:29:94:96:72:45:61:0b:a3:b8:5e:
                    de:1c:a8:c5:8c:dc:a0:4f:ad:29:15:7e:33:29:1d:
                    ea:c3:41:aa:ea:a0:87:6b:ac:db:87:c8:79:33:b9:
                    ef:31:0c:c8:20:f4:24:52:f9:63:05:c5:0d:12:1f:
                    66:0c:d3:61:b9:97:a9:29:4f:8a:7d:f3:7a:fc:be:
                    bd:0d:9a:42:c5:60:d1:66:ce:75:81:d7:26:a7:cb:
                    19:e7:a0:bc:1d:59:76:6d:79:2b:36:e9:d3:08:2a:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:1E:8F:9B:B2:7C:5B:27:5E:1D:F6:2D:8E:91:1B:54:E0:9C:C2
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:0f:d4:b4:f9:f2:fe:dc:ff:7f:47:9f:b3:e9:13:fa:77:
         9b:50:89:47:be:e9:08:eb:bb:7d:a1:f4:29:9d:87:4b:25:ca:
         47:39:35:d9:9f:e9:b7:d9:fc:7a:0b:56:d3:35:c5:f5:aa:89:
         d7:95:b8:52:79:2b:d2:8d:a0:ae:1f:ca:19:78:ba:e5:e4:13:
         df:51:22:e8:fe:ff:5a:19:fb:a4:ce:3c:7e:50:6f:41:14:fa:
         b1:31:88:00:dc:c5:7e:87:0a:e7:f0:fc:31:26:de:aa:d8:45:
         7a:83:33:35:b8:0f:82:a9:0b:15:6d:43:3f:27:4a:82:37:f5:
         72:82:ea:c6:0e:cc:4b:84:34:95:58:56:d8:eb:7d:03:4d:70:
         1e:50:e0:7b:f8:3e:64:b4:cf:ea:2a:8c:4d:3c:d8:38:0c:73:
         0f:fc:18:59:c8:ea:a8:04:30:24:ad:f2:ee:42:f5:8b:7b:86:
         a9:93:d3:2a:9b:96:6c:d2:e9:c2:73:b2:2d:12:e1:b5:e1:25:
         c9:5b:f2:a0:ca:ed:06:96:9d:a9:81:5f:32:39:61:9e:95:43:
         ca:5a:36:32:28:ec:f8:b1:13:b6:67:cc:da:b3:0b:ff:b1:b2:
         56:86:2b:fc:39:06:c5:ba:53:c5:e1:55:09:48:b1:c8:01:11:
         fd:fb:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org