Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532323431.roa
File:                     3139302e39392e39362e302f32302d3234203d3e203532323431.roa (raw, json)
Hash identifier:          7gnhaK0VYdZTjLi8jLuyc8nh6w902WMfDtT9gLsasEM=
Subject key identifier:   77:F8:F8:F0:F0:74:09:97:F8:36:19:96:07:E3:65:83:0B:97:5C:BD
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       76DBCAEF719D766154A87F4FDD89D7AEC14A5643
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532323431.roa
Signing time:             Tue 05 Mar 2024 18:18:41 +0000
ROA not before:           Tue 05 Mar 2024 18:13:41 +0000
ROA not after:            Tue 04 Mar 2025 18:18:41 +0000
asID:                     52241
IP address blocks:        190.99.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:db:ca:ef:71:9d:76:61:54:a8:7f:4f:dd:89:d7:ae:c1:4a:56:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Mar  5 18:13:41 2024 GMT
            Not After : Mar  4 18:18:41 2025 GMT
        Subject: CN=77F8F8F0F0740997F836199607E365830B975CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:f4:82:93:3d:28:e8:f6:92:53:70:87:c5:
                    78:09:b1:29:ad:4c:9f:e3:ee:0c:80:c2:7f:26:cd:
                    5b:d8:8e:e5:ef:64:71:99:b7:42:40:94:9d:f0:c7:
                    38:bc:50:39:59:78:16:a2:59:e0:6c:fa:49:ec:f4:
                    c5:b4:0c:30:26:bb:19:b1:2f:60:f9:e0:77:c2:ee:
                    3d:a0:a1:6e:f8:b8:61:bd:59:d5:8c:93:ca:4d:cb:
                    08:93:f5:ee:d9:1c:8b:82:2d:65:ec:dc:9c:4a:78:
                    4b:16:b1:1c:ca:62:46:7c:e1:39:9d:c2:34:46:a9:
                    c7:60:b4:c8:95:05:28:ce:65:77:c4:3b:ca:36:cd:
                    7a:5c:f1:30:a0:68:a2:77:bf:45:8b:1b:9f:9b:09:
                    c6:1f:5e:3c:23:ce:3f:bd:d4:0b:a9:7b:03:a5:38:
                    eb:09:2d:e8:15:49:1c:cc:c0:5b:cb:c1:7f:3e:76:
                    4c:8f:8c:32:79:f3:35:19:c3:d9:98:bf:cf:45:2b:
                    99:52:2a:cd:ed:ee:6d:3a:b8:1a:64:19:bd:d1:5b:
                    d8:00:73:a7:f8:52:bf:f1:b5:9d:df:75:33:8d:a9:
                    eb:89:ff:a6:d7:f4:5e:f3:2e:96:2a:be:9b:31:e7:
                    30:73:c8:f2:8a:ba:41:da:0e:52:18:63:7e:99:73:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:F8:F0:F0:74:09:97:F8:36:19:96:07:E3:65:83:0B:97:5C:BD
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:20:dc:66:6c:e0:ca:ff:57:81:cc:7a:4c:3c:b1:11:40:a2:
         80:e7:d0:22:7c:4f:66:2d:86:87:7f:74:02:3f:66:d3:4d:c8:
         c4:b0:7a:6d:8e:30:8e:ef:b9:18:14:6b:91:32:33:a2:e6:40:
         a4:bf:4c:9e:2f:df:39:11:29:88:ff:95:fc:81:2e:89:ef:63:
         08:7d:98:0c:94:91:ca:fd:a5:01:e6:7f:e4:7b:b8:69:c7:cf:
         ef:74:23:db:fd:d5:60:a4:01:3b:b6:69:19:cf:a1:25:93:38:
         6a:77:c3:f9:cf:91:11:b9:99:2f:b1:d3:b2:8f:8d:97:08:eb:
         6f:bb:54:c8:bc:8e:d2:0a:90:45:45:3d:8b:65:32:52:6c:e2:
         1a:cf:cb:42:c5:6c:57:eb:cd:31:7d:47:21:73:a5:2e:08:28:
         54:fc:9d:75:da:11:20:2f:f6:a6:ba:7d:aa:d4:23:00:1c:c3:
         35:44:76:7f:2a:91:08:28:27:16:26:12:11:70:70:8f:01:29:
         79:ba:dc:c0:48:62:73:da:e4:b5:ef:db:e2:6e:e7:c7:cd:a6:
         72:db:90:24:70:00:41:1c:0d:b4:fc:21:49:d1:c6:e4:88:e7:
         7b:a2:53:5b:b6:1c:83:98:d3:e3:81:a5:ca:f7:82:43:48:05:
         fd:82:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:55:16 2024 by rpki-client on console-ams.rpki-client.org