Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33382e302f32332d3234203d3e203237373733.roa
File:                     3139302e39392e33382e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          3js1jxc4+LsxeQAmeb0nm//+QBhd+ArJXhTgqObpj1E=
Subject key identifier:   1B:C9:2F:C8:AA:89:74:EA:DE:BC:F0:FA:37:D0:90:95:63:85:65:E1
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       49C4695F85F26E8AFF05CBED9E85884015D2D5F9
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33382e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:37 +0000
ROA not before:           Tue 05 Mar 2024 18:05:37 +0000
ROA not after:            Tue 04 Mar 2025 18:10:37 +0000
asID:                     27773
IP address blocks:        190.99.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:69:5f:85:f2:6e:8a:ff:05:cb:ed:9e:85:88:40:15:d2:d5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:37 2024 GMT
            Not After : Mar  4 18:10:37 2025 GMT
        Subject: CN=1BC92FC8AA8974EADEBCF0FA37D09095638565E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:88:48:40:38:a7:7d:38:b5:78:d4:b8:dc:
                    29:a8:b2:9c:52:57:19:f8:2d:88:c5:33:e0:12:47:
                    72:ec:f4:67:8d:87:39:1c:7d:46:a2:6b:0e:57:e9:
                    ad:c0:4e:18:77:ea:e0:1c:4f:f3:33:67:b9:44:c0:
                    fa:18:d6:4f:ce:82:49:9b:b8:8e:90:8c:0f:7a:81:
                    9b:ba:6b:cc:54:19:44:ef:73:f7:4e:c9:cb:05:6b:
                    b5:c4:19:01:12:5e:d7:23:91:3f:8d:9f:38:f3:13:
                    03:76:62:b1:b0:ef:b9:81:ef:db:a6:38:51:d8:3b:
                    70:53:00:20:85:7a:ab:5c:a1:57:f1:25:79:24:6e:
                    26:6e:a9:ce:5f:ce:4e:3f:5f:e2:44:c6:7e:a0:75:
                    9b:4c:49:bb:19:c4:c0:d5:01:e1:dc:4f:03:64:69:
                    64:0f:a9:33:e3:c3:fe:64:32:23:39:b8:a0:f4:34:
                    40:b3:ca:5b:ec:17:a9:d7:5e:05:db:d5:bc:18:d0:
                    1c:05:22:9c:bf:ce:52:5b:90:dc:7b:90:a6:93:84:
                    1e:36:d5:db:48:23:14:c7:2c:a8:55:0c:77:f7:6a:
                    2c:d5:1c:af:af:31:c5:c9:1e:c7:40:98:0b:2d:41:
                    5d:91:f8:3e:0d:93:7b:c9:49:cc:a3:9d:c2:73:22:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C9:2F:C8:AA:89:74:EA:DE:BC:F0:FA:37:D0:90:95:63:85:65:E1
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33382e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:f2:3e:35:9b:e8:55:0c:16:88:a1:4c:6f:20:e4:32:08:
         41:4b:6d:be:c0:4d:bc:2b:54:18:1b:09:03:ec:53:df:0f:cc:
         ac:3b:68:7a:3d:43:79:55:2e:6a:a9:ff:43:12:ba:37:fe:dd:
         0b:02:21:c8:ac:23:e0:c6:8a:74:18:6a:de:1d:9a:4b:0c:e8:
         e5:31:23:21:95:13:be:32:3b:aa:2a:49:0a:ca:fa:cc:a8:af:
         d2:4d:8e:eb:9a:fb:86:51:48:da:1a:99:91:47:84:2e:cf:2e:
         0f:c2:9c:c5:c8:87:be:86:5e:cd:ea:79:b9:18:a2:d2:b4:55:
         15:f8:13:97:58:4f:96:4d:86:f7:c5:f9:57:3c:75:cf:3c:5f:
         59:1d:66:2b:aa:45:4c:77:3e:c6:29:e8:51:d2:a9:2e:ae:0e:
         94:3d:1b:23:3a:62:c0:61:77:af:5b:a3:e6:19:d8:4e:0b:8e:
         f2:dd:bf:91:08:16:a1:3a:5e:3e:6f:d0:71:22:34:7a:35:cf:
         1c:e2:0a:4a:7b:e3:db:a1:17:63:69:9c:c2:97:bf:e8:7e:b5:
         3c:59:3a:d1:7a:88:80:49:02:b8:b0:44:d9:61:4b:ec:24:cf:
         a3:91:db:fe:9c:5e:08:7f:46:6b:d1:77:33:22:27:d8:af:62:
         8d:ca:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org