Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          ymlo8dfZkoheCcycnQcMF/hm2JSSseNxcwAfy13KeF0=
Subject key identifier:   49:12:09:E9:E1:18:DB:2E:75:D0:AF:62:AA:8F:D4:0E:C1:08:1B:28
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       759D061BF420AFE13ADB482999DBD2E2894DE066
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:32 +0000
ROA not before:           Tue 05 Mar 2024 18:05:32 +0000
ROA not after:            Tue 04 Mar 2025 18:10:32 +0000
asID:                     27773
IP address blocks:        190.150.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9d:06:1b:f4:20:af:e1:3a:db:48:29:99:db:d2:e2:89:4d:e0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:32 2024 GMT
            Not After : Mar  4 18:10:32 2025 GMT
        Subject: CN=491209E9E118DB2E75D0AF62AA8FD40EC1081B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:18:84:b0:df:af:c3:a0:9a:aa:d9:df:7b:
                    96:a4:2b:4e:f7:99:0d:35:81:6e:e8:fa:cf:8d:e1:
                    73:32:07:7d:06:6a:3f:31:01:0d:f0:96:a7:0d:9a:
                    6e:72:d2:ee:6a:20:48:8a:39:10:5d:34:e9:91:7d:
                    94:e6:fb:db:62:7e:9a:4a:8a:94:ef:e8:fa:0d:9d:
                    02:3e:d9:0e:d6:f0:6a:69:95:f4:e4:3d:c0:bb:cf:
                    c5:46:74:a7:69:ed:3c:4c:05:f9:7a:71:fd:c3:01:
                    17:3b:b7:3f:14:ee:26:1e:e3:8e:f1:88:cd:20:7f:
                    23:11:78:24:e1:61:e5:f4:f7:78:f5:c8:37:81:82:
                    a0:a8:d8:41:d1:04:aa:b3:e1:8f:ba:02:17:8e:63:
                    c6:36:7b:03:72:03:5f:ee:d8:48:84:2c:c4:0a:42:
                    cb:0c:9b:73:6a:09:d5:a3:e4:a3:4b:b4:5b:0e:f9:
                    6d:58:60:fe:71:c7:a7:ff:e4:8c:bc:63:b6:45:08:
                    9e:67:c7:78:19:26:78:fc:fb:a3:a2:03:50:c7:46:
                    ec:74:78:19:65:07:f7:25:2d:33:ca:28:f3:f9:71:
                    12:3c:3c:4e:fe:b5:45:3b:3f:0b:0c:bd:0b:15:b4:
                    93:ab:83:6b:82:ec:0b:6b:e7:f5:3c:18:10:6a:51:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:09:E9:E1:18:DB:2E:75:D0:AF:62:AA:8F:D4:0E:C1:08:1B:28
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:ca:a3:0c:54:96:ef:1f:e8:0a:70:1c:12:98:ac:05:ae:
         f6:28:d3:d5:83:e1:31:0a:41:d6:26:01:13:51:6a:50:1b:bd:
         24:24:ca:e7:dd:bd:15:95:af:6b:33:6d:f2:00:a7:a1:65:7a:
         b7:4c:e6:b2:c9:99:7d:e3:0f:11:4c:4d:70:65:68:a8:cc:c7:
         70:c9:be:ec:3f:44:bc:2e:ef:47:2c:f7:09:e2:ea:bd:86:9c:
         54:79:7e:dc:d0:a8:0a:38:c0:61:d7:08:72:38:b1:e2:5e:17:
         4a:46:fb:45:8b:8a:e3:cc:8a:fb:06:50:40:63:43:71:6d:37:
         5d:db:74:58:fe:ad:85:8c:a7:98:52:6e:e6:c4:bc:1f:57:df:
         d0:83:75:e6:a8:99:8b:44:41:d1:c4:5f:6b:34:17:c7:bb:11:
         13:b8:e5:4d:a9:52:c6:62:05:01:5c:ea:95:9e:5d:d4:b7:5d:
         66:f6:7f:a1:5e:1d:0b:02:21:a2:3f:0d:14:9c:fb:a7:e2:b1:
         69:9d:37:bd:21:e1:9d:10:f6:f6:7b:3e:27:0a:7a:38:35:98:
         01:dc:f8:17:e5:15:73:f2:e8:8a:c4:81:7d:4b:1e:2e:d9:a3:
         94:7a:53:fd:ac:aa:4a:d4:60:0a:05:09:91:4b:09:68:44:8f:
         ca:54:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org