Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa
File:                     3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa (raw, json)
Hash identifier:          GqWUCl5OFrZuVaHALVSAf85DIi/51wlGKl98ZUAVj20=
Subject key identifier:   52:5E:A0:C2:11:3C:75:F1:2A:F2:13:7B:2A:D7:90:8F:79:39:9B:A0
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       1CEE5CD521D6C087F30563D78BCD5FF9799E0D01
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     27831
IP address blocks:        190.120.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ee:5c:d5:21:d6:c0:87:f3:05:63:d7:8b:cd:5f:f9:79:9e:0d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=525EA0C2113C75F12AF2137B2AD7908F79399BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:dd:87:02:60:a4:30:1f:ba:29:d2:46:ff:
                    d0:9a:8b:30:e7:f0:a0:1c:14:b6:ce:b0:1c:50:2a:
                    20:e3:33:0d:80:7f:4a:04:ea:8b:c9:ca:6a:d9:77:
                    9f:0a:20:f2:61:a4:b3:2b:6b:9a:ce:78:77:b8:4d:
                    33:04:86:5e:74:04:0f:e7:93:ca:57:3a:9a:83:b2:
                    99:52:8b:b1:7e:8b:68:70:9f:2a:e5:cf:84:fe:a8:
                    55:2d:6e:7a:0c:26:81:4d:60:16:d0:40:ea:4d:aa:
                    41:1b:14:13:67:be:3a:70:ce:78:9e:c5:59:5c:dc:
                    0f:30:bf:59:09:d0:6b:49:c6:a0:ac:74:f1:e5:b7:
                    66:59:b3:d4:e4:98:a7:35:00:91:b4:84:51:d2:94:
                    3a:a0:84:96:a5:38:81:e0:a3:cd:97:20:ca:4e:7f:
                    f6:a8:c2:ce:e3:0e:59:75:e4:bb:69:93:0b:ef:61:
                    01:5b:3e:90:0a:ad:ed:28:f2:4d:e4:a3:0b:07:7d:
                    ba:87:8d:c6:a6:03:b5:00:1b:61:07:76:b6:88:d3:
                    69:8c:65:6d:67:aa:cb:4d:79:12:3f:e5:cb:c4:3c:
                    f8:1d:45:aa:f3:35:87:9d:36:a9:55:c1:0f:b3:2d:
                    92:30:b7:f4:25:ae:75:91:7d:4c:3d:ec:01:23:dd:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5E:A0:C2:11:3C:75:F1:2A:F2:13:7B:2A:D7:90:8F:79:39:9B:A0
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3132302e3132382e302f32302d3230203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:0a:b1:94:a2:32:70:36:54:7d:4c:fc:6c:aa:fd:c2:69:
         52:f2:c7:ec:12:54:10:34:77:6c:7f:e2:9c:20:6b:dd:15:17:
         83:10:58:31:10:58:38:3a:83:e7:35:a9:be:68:29:23:be:2f:
         66:4c:8a:40:8c:c7:e3:2c:ff:39:3a:5e:e8:4b:73:aa:a2:e4:
         df:da:22:c3:f8:a7:33:44:58:83:87:dc:75:ba:a9:da:bf:00:
         3d:a6:7f:da:48:4c:f8:cb:a3:df:da:d8:9d:12:c6:f5:d0:e7:
         5a:14:76:9f:60:51:b3:31:12:b6:e9:8f:0e:bf:02:fc:90:b1:
         6c:e0:1b:a3:46:24:3f:c5:99:83:8e:bb:15:53:0c:46:9e:43:
         fe:56:18:0a:6f:98:64:ca:7c:f2:ce:91:24:21:a0:21:19:7f:
         d2:45:fa:60:9b:af:12:f9:b6:91:d0:1e:9b:0d:ac:28:54:ef:
         7e:9b:8a:5b:4e:8f:85:5f:a1:cf:dd:46:3c:82:80:77:22:9a:
         cd:83:89:42:a7:d3:f6:d0:32:bc:e9:5f:6f:70:28:97:64:04:
         89:86:fe:3d:2e:87:83:6b:cc:8b:85:9a:16:9f:17:1f:dd:77:
         94:2f:04:94:92:9a:fd:75:4b:2f:47:8b:71:ce:db:b1:72:10:
         71:ab:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org