Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa
File:                     3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa (raw, json)
Hash identifier:          b4vN9E8y8ys7I2R/r8xCdVKUHMtDlg02clOOd+PBCE8=
Subject key identifier:   CB:91:11:29:FB:50:DC:9B:B2:3C:58:D9:42:B0:EE:B0:6D:8F:FB:C3
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       73643BAB1BF51859ABF12C8A3B1FB9D22E22CF01
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa
Signing time:             Tue 05 Mar 2024 18:06:24 +0000
ROA not before:           Tue 05 Mar 2024 18:01:24 +0000
ROA not after:            Tue 04 Mar 2025 18:06:24 +0000
asID:                     271968
IP address blocks:        190.110.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:64:3b:ab:1b:f5:18:59:ab:f1:2c:8a:3b:1f:b9:d2:2e:22:cf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Mar  5 18:01:24 2024 GMT
            Not After : Mar  4 18:06:24 2025 GMT
        Subject: CN=CB911129FB50DC9BB23C58D942B0EEB06D8FFBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:20:8d:f6:de:62:c0:f2:90:64:c9:23:82:
                    67:47:c8:40:01:34:63:75:b0:fd:e5:5c:b7:51:ac:
                    23:ea:35:36:23:29:5f:72:ee:a2:66:d6:bc:7e:fa:
                    9c:af:95:94:f2:5a:7b:28:f6:dd:50:bb:0c:06:9d:
                    74:d0:fc:64:13:25:ab:0e:7b:a3:ca:63:ee:0e:cb:
                    0c:4e:32:54:a7:7c:d6:d2:03:7e:25:5f:b5:b1:b3:
                    90:ac:a3:f9:73:45:2f:2d:2f:85:58:7c:14:3c:a1:
                    34:d4:20:59:53:0d:38:f1:39:4c:5f:38:b4:31:09:
                    54:39:94:b8:65:93:43:7d:77:49:94:5f:07:dc:2f:
                    47:a5:ee:8e:52:c6:2f:f8:35:40:63:ae:6e:2c:4b:
                    88:34:06:93:de:20:b0:e0:52:74:ac:26:47:3a:f0:
                    62:ae:11:67:1c:27:f2:5f:9c:d9:7a:39:1f:48:f6:
                    9f:70:26:10:bb:99:32:44:c1:1e:4c:4b:a2:da:24:
                    bf:94:81:45:35:dd:ab:6d:b5:98:0b:28:1d:70:45:
                    b3:f0:0f:f7:d7:dd:d7:a1:0a:b5:58:7b:73:1a:48:
                    0c:0b:64:b6:17:f4:f1:58:b4:90:b2:f9:d6:b4:5d:
                    2b:3b:a3:00:73:bd:37:12:c4:68:fe:84:88:cc:b4:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:11:29:FB:50:DC:9B:B2:3C:58:D9:42:B0:EE:B0:6D:8F:FB:C3
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33362e302f32322d3234203d3e20323731393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:28:ae:6f:26:81:d7:a3:ee:25:3d:76:d1:30:25:aa:84:1f:
         8a:84:f3:3e:58:86:08:54:64:62:e6:87:ff:61:f3:5b:0c:e2:
         54:5c:e5:67:b0:33:6e:e7:a7:6e:d2:19:ff:47:ae:18:12:60:
         1e:d4:62:5b:bc:22:de:5a:7b:be:00:66:27:dc:ad:c4:12:a6:
         bb:b9:2d:93:b4:9d:f0:75:42:c9:ab:f7:4a:b9:c4:83:48:12:
         8b:c9:d0:89:af:e9:10:d4:a7:e5:2e:94:e7:e5:e7:76:6b:61:
         e8:c6:b1:69:5d:ea:6c:c8:fc:89:18:b1:fd:49:8e:2b:03:54:
         82:f3:09:3f:dc:e6:f1:cd:c8:78:3f:5a:ce:59:6c:97:2e:e7:
         60:b6:ad:a0:ba:7f:04:6f:04:72:4f:50:e8:0b:30:a7:b1:05:
         17:7c:42:41:cd:62:19:e5:01:a8:c7:57:c5:31:e3:fa:d1:93:
         83:2c:42:4d:7c:00:75:09:7d:d9:02:ae:f6:9d:ee:40:59:85:
         c0:9e:98:5b:09:55:37:ad:0e:df:73:86:29:19:d1:7a:5f:4a:
         0a:5a:b0:de:1a:ae:c1:f2:4b:7d:5b:8e:b7:8e:6a:25:70:88:
         4a:44:5f:63:cc:82:40:b1:12:30:22:4e:92:22:a4:dc:82:d1:
         29:08:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org