Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e36342e302f32302d3234203d3e203134373534.roa
File:                     3139302e3134382e36342e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          0m17IsXCJL5koXz5sBkwb5H7Me7tB4hXdOpvgVkhL78=
Subject key identifier:   CF:F8:84:51:A0:30:C4:38:D1:65:0F:25:6B:FB:9B:7C:C3:7D:A2:08
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       6772644D36634D4546F9345E9F57CA27F0FB82D3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e36342e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:27 +0000
ROA not before:           Tue 05 Mar 2024 17:37:27 +0000
ROA not after:            Tue 04 Mar 2025 17:42:27 +0000
asID:                     14754
IP address blocks:        190.148.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:72:64:4d:36:63:4d:45:46:f9:34:5e:9f:57:ca:27:f0:fb:82:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:27 2024 GMT
            Not After : Mar  4 17:42:27 2025 GMT
        Subject: CN=CFF88451A030C438D1650F256BFB9B7CC37DA208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:46:fd:a5:48:cf:71:c2:78:ee:6e:cf:0b:
                    d8:e2:16:18:b2:56:4e:84:e2:d7:14:8a:82:c8:e2:
                    12:f5:a7:ae:05:2c:57:83:2b:ae:7d:0e:fd:39:15:
                    fe:ec:b6:7d:6d:dd:13:00:46:4c:6b:b4:92:ad:23:
                    0b:d8:73:9b:83:ea:5c:dd:80:1e:60:41:b3:00:fb:
                    9b:af:9f:17:77:28:72:36:72:e5:e8:9d:83:a8:2e:
                    f4:68:5a:26:01:19:04:8a:b6:c6:51:4b:f7:d4:99:
                    bf:ea:b8:aa:32:62:c7:22:b6:3c:74:0c:92:45:80:
                    08:3f:a3:bb:51:07:17:1e:e1:2a:75:20:fa:9d:19:
                    f5:fc:ed:6f:fe:82:f4:a1:04:ac:0a:d1:62:9a:db:
                    5b:42:bc:b8:33:2f:e5:60:7d:08:48:22:7c:55:73:
                    3f:67:33:f1:3a:97:f7:9b:cf:eb:29:cc:d0:d8:fd:
                    ab:df:ec:66:22:ec:cc:e7:d4:9b:3b:2f:40:e1:de:
                    5b:9d:0e:1f:fa:ae:d7:b2:33:a9:c1:7e:45:09:f1:
                    90:cd:f1:86:9c:63:a8:7e:fc:db:f8:e9:88:d9:9c:
                    a7:90:52:4b:1c:35:9f:0c:39:14:d1:37:78:32:95:
                    8a:29:95:f1:dc:8a:c9:6e:28:b4:74:76:a5:0b:d5:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:84:51:A0:30:C4:38:D1:65:0F:25:6B:FB:9B:7C:C3:7D:A2:08
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e36342e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:0c:26:9b:e7:b0:31:0f:be:30:ee:16:50:88:95:f2:63:
         b2:1a:22:9a:5e:fe:7c:3d:a6:a8:31:44:a7:4c:38:74:eb:a5:
         d2:ca:b3:5e:dc:44:5b:9c:29:5f:02:6e:f1:c4:e6:6d:10:f2:
         6b:31:ad:b2:e2:2f:c9:ea:53:da:39:1a:a3:e8:9b:7a:7b:1c:
         c6:65:04:a1:ad:24:40:d4:db:ae:90:7d:01:59:c8:31:1b:d5:
         10:e1:8d:b6:28:25:20:c5:96:81:82:5e:8f:1d:0e:33:f9:12:
         aa:69:32:0e:0b:c5:4c:6a:cb:40:83:02:23:b3:c9:6b:0f:7a:
         5b:96:f6:5d:21:85:6e:07:b3:7c:83:a4:82:31:5f:2d:b8:a9:
         c7:c4:b5:82:a8:69:a3:75:64:06:5a:5e:f5:a1:0a:d7:04:3d:
         c1:bd:66:2e:6e:cd:93:1b:9b:58:b9:59:e8:cc:f1:04:b5:51:
         4b:07:e0:ae:f0:c8:39:57:2b:8b:36:8d:21:c0:b5:e6:fb:72:
         62:70:84:c3:ab:35:55:1b:74:cb:8e:8d:4f:87:49:53:4b:80:
         37:0b:d6:34:95:8f:95:1a:3a:b0:9b:8c:d8:a3:93:fc:f0:19:
         35:ba:50:57:f0:6b:5a:9d:5b:71:ce:30:d7:16:cb:c0:ec:91:
         8a:05:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org