Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/3139302e3130372e302e302f32302d3230203d3e203237373235.roa
File:                     3139302e3130372e302e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          BgutUa77Opu5ePp8v6J7/PBgJTS4IVQrGnTqEB/4p/c=
Subject key identifier:   85:54:FF:FA:A0:01:5E:95:14:C0:57:AB:AD:E9:FB:48:D1:DC:2C:55
Certificate issuer:       /CN=608403E4E091D1384C3276F193B3EB9DAFFAFFE2
Certificate serial:       105E199394BB95B6F80CA7FD5D786860D485A216
Authority key identifier: 60:84:03:E4:E0:91:D1:38:4C:32:76:F1:93:B3:EB:9D:AF:FA:FF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/3139302e3130372e302e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 17:50:38 +0000
ROA not before:           Tue 05 Mar 2024 17:45:38 +0000
ROA not after:            Tue 04 Mar 2025 17:50:38 +0000
asID:                     27725
IP address blocks:        190.107.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:19:93:94:bb:95:b6:f8:0c:a7:fd:5d:78:68:60:d4:85:a2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608403E4E091D1384C3276F193B3EB9DAFFAFFE2
        Validity
            Not Before: Mar  5 17:45:38 2024 GMT
            Not After : Mar  4 17:50:38 2025 GMT
        Subject: CN=8554FFFAA0015E9514C057ABADE9FB48D1DC2C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:18:3c:3f:58:41:c9:c6:bc:8c:90:06:7c:
                    d4:dc:64:f6:5a:55:8d:71:1e:72:a4:dd:6b:e9:a4:
                    32:d6:19:c4:3a:7d:a0:08:be:b4:85:9f:1a:f0:65:
                    c9:bd:a7:d2:9b:90:be:ac:3d:14:e6:f8:56:da:de:
                    bd:04:8e:9a:7d:3a:71:24:4d:21:2b:cf:ea:47:44:
                    e6:2c:90:70:94:2e:01:23:a7:b4:f3:ae:8f:0d:05:
                    b8:4f:ba:7c:48:6f:c5:97:d3:3b:02:59:c9:46:b5:
                    99:ea:16:a8:4b:62:63:fc:e4:d8:2b:7d:c2:4e:72:
                    0d:04:c2:94:65:71:a5:61:03:ac:50:ab:3d:7f:73:
                    6c:a1:07:bf:a8:e5:88:a6:97:a6:69:39:8a:f8:f0:
                    7a:56:d9:20:c1:59:92:20:67:df:50:0c:95:32:24:
                    b7:3b:7c:98:f4:e2:ce:b8:dc:61:10:d9:96:72:4a:
                    a0:fd:57:21:22:ac:be:f5:04:fc:50:e3:40:b5:08:
                    8f:ba:a8:0e:a3:88:8b:d6:bd:36:e6:7d:fc:5e:c1:
                    7d:91:2b:4b:9e:4e:f3:e6:bb:bb:fb:03:2f:d4:c8:
                    fc:b7:e6:4c:83:1a:aa:b2:d3:3a:10:25:05:d6:8e:
                    80:73:40:d9:27:56:5b:fe:62:56:cc:54:d2:33:9a:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:54:FF:FA:A0:01:5E:95:14:C0:57:AB:AD:E9:FB:48:D1:DC:2C:55
            X509v3 Authority Key Identifier:
                keyid:60:84:03:E4:E0:91:D1:38:4C:32:76:F1:93:B3:EB:9D:AF:FA:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/608403E4E091D1384C3276F193B3EB9DAFFAFFE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36D4A4270109B5650686AFECB945AAA3FB35B76E3CC14D67529B365EFDA004BD/0/3139302e3130372e302e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:21:9a:49:ca:17:7b:d7:a8:17:0a:63:73:ad:0b:fe:54:
         56:c6:8e:15:f2:e1:30:c1:1e:02:8f:68:d8:71:64:84:19:fe:
         dc:0d:87:50:e9:33:f1:66:fa:38:f0:e4:6a:69:5b:a1:12:d8:
         7a:60:8d:84:56:ce:fc:8f:70:ce:f5:b6:00:22:a8:f5:b8:8f:
         ba:10:f9:ce:d3:0b:a0:b2:6c:92:85:5a:a4:77:6d:f2:ba:5b:
         e3:dd:4b:ac:63:46:26:1a:4c:43:44:a2:45:fc:6b:7a:7a:a4:
         fa:a8:fc:81:6b:eb:90:75:f0:fc:2e:c6:4a:35:10:ef:69:f7:
         79:3a:c1:3a:4e:6c:e7:ed:17:9a:78:f2:eb:f5:ba:ce:6a:30:
         cf:63:a1:8a:fb:de:5d:94:ca:23:98:48:f0:89:db:ee:1c:43:
         1e:b2:ed:22:07:3e:7c:43:5c:2e:db:e5:45:6c:20:ed:12:13:
         6b:c1:d0:12:b0:eb:02:d6:eb:43:1d:82:73:87:c3:cc:29:df:
         f3:89:bd:96:c6:7e:be:da:c5:65:83:ca:a3:66:05:80:e2:e5:
         a2:9f:db:2a:ab:12:5c:7d:4a:50:a1:0b:6f:2e:6d:d7:44:12:
         82:1f:73:81:75:38:e3:24:74:3d:69:4a:74:66:72:da:ca:87:
         b2:71:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org