Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3139302e3130352e3137362e302f32302d3234203d3e203532333038.roa
File:                     3139302e3130352e3137362e302f32302d3234203d3e203532333038.roa (raw, json)
Hash identifier:          KzWKH/dXdAXbH5oc9K9tPfj2ak9DI6BHbNhiiO4CQ5k=
Subject key identifier:   27:55:6D:77:A7:FE:AA:CB:BA:1A:A0:11:30:C1:70:5C:39:58:65:ED
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       757280CA94B3CFBF4969BD39F0F523A2B03277D1
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3139302e3130352e3137362e302f32302d3234203d3e203532333038.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     52308
IP address blocks:        190.105.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:72:80:ca:94:b3:cf:bf:49:69:bd:39:f0:f5:23:a2:b0:32:77:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject: CN=27556D77A7FEAACBBA1AA01130C1705C395865ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:67:e8:3e:45:f4:cb:0b:2f:93:03:7a:d7:
                    22:ee:fe:79:1e:08:cd:7c:9a:51:fa:57:9f:6b:62:
                    29:58:73:87:6d:76:2a:82:4e:27:a5:73:84:33:d4:
                    5a:e3:73:de:98:ac:a8:6c:81:47:2e:4c:9f:16:02:
                    3c:d9:c3:22:68:07:d0:44:6e:9a:bf:cc:61:ec:c2:
                    1b:bf:0b:65:d4:96:0b:be:91:ee:94:40:7c:fe:78:
                    e1:a8:d4:d0:7a:1a:8f:d3:e8:ab:92:9b:88:18:8a:
                    36:17:af:1a:7a:50:24:36:d9:7e:b4:f6:5d:28:a1:
                    be:d6:97:7f:6e:d0:c2:e5:96:8d:06:a8:d8:15:5e:
                    59:20:1e:b2:dd:39:23:48:6a:8c:b6:ca:41:1b:13:
                    c1:14:77:23:c1:ea:c8:45:cb:98:8a:00:79:1b:42:
                    bb:d7:a5:32:ac:d8:e3:52:26:fd:0c:55:d3:e0:45:
                    d1:2a:f8:cf:f3:96:59:6c:4a:36:ed:08:88:77:74:
                    13:11:87:2d:76:20:a3:fc:ea:a8:16:b6:1b:fc:00:
                    81:7e:6c:73:01:4d:97:4f:81:0b:2c:86:f2:ed:95:
                    a6:47:3e:54:83:0d:bd:85:86:75:60:9c:c1:9d:49:
                    d4:c1:c5:1c:90:dd:21:24:90:1f:1e:44:4c:3d:50:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:55:6D:77:A7:FE:AA:CB:BA:1A:A0:11:30:C1:70:5C:39:58:65:ED
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3139302e3130352e3137362e302f32302d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:a9:da:c4:df:e1:dd:46:ae:ec:96:c2:07:96:69:8a:55:
         e2:2e:19:29:a9:07:e4:a4:f8:9f:39:7c:94:3a:db:26:3c:81:
         09:ed:a5:b5:f0:e1:bc:fb:e0:75:28:63:c8:46:29:01:33:29:
         fd:7a:cb:5e:b1:9b:e7:6e:84:4f:14:c0:d8:c0:13:dd:e1:51:
         cc:03:8b:5b:c1:44:e8:43:7d:4c:6c:86:48:44:69:d5:a2:de:
         ff:27:0e:d2:76:c6:44:23:ba:91:72:79:e8:60:ee:2d:26:00:
         dc:08:29:01:1b:52:2d:8e:aa:01:fa:d8:28:ac:21:e7:61:49:
         55:19:f5:b2:64:81:f6:22:98:ba:44:bc:37:69:1b:9e:7a:9f:
         e5:bb:e3:3f:22:9f:62:48:18:82:d7:29:e0:b7:93:59:b1:4c:
         69:3a:55:e4:8a:08:3f:b2:cc:6a:d7:20:e0:57:f8:96:85:33:
         2b:d8:7f:32:96:34:b3:ba:88:e0:57:e0:21:37:b1:bb:e5:de:
         0e:48:64:29:0f:40:14:f9:8c:16:fe:ff:3e:37:71:63:f0:21:
         8b:5a:bb:0d:45:68:2b:34:a5:b1:2a:76:81:89:c4:b2:c2:a5:
         f4:c4:a6:35:1a:a5:01:02:0d:a8:b2:7d:a7:4f:ce:8c:8b:2b:
         55:a9:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 20:28:38 2024 by rpki-client on console-fra.rpki-client.org