Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34382e302f32302d3234203d3e203237373733.roa
File:                     3139302e39392e34382e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier:          fzZ+Y6Zu4kNeoy2tgE2autzmudWOv8M1mJlYqJQkXdE=
Subject key identifier:   3F:4B:97:8B:9E:D3:CE:1D:CE:6D:F7:77:48:95:67:E3:07:13:06:49
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       040DFB814694883D243F18E3E2BBEBCC68C1748C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34382e302f32302d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:32 +0000
ROA not before:           Tue 05 Mar 2024 18:05:32 +0000
ROA not after:            Tue 04 Mar 2025 18:10:32 +0000
asID:                     27773
IP address blocks:        190.99.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0d:fb:81:46:94:88:3d:24:3f:18:e3:e2:bb:eb:cc:68:c1:74:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:32 2024 GMT
            Not After : Mar  4 18:10:32 2025 GMT
        Subject: CN=3F4B978B9ED3CE1DCE6DF777489567E307130649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1f:1c:31:f7:dc:a5:11:5b:50:49:c5:2f:ec:
                    9e:63:01:24:09:a6:da:a2:73:9f:5f:14:09:35:b9:
                    73:85:b9:5d:cd:8b:af:00:f5:32:93:c4:79:8d:50:
                    09:f6:f7:ba:9d:a0:58:3b:1e:74:db:9b:70:e5:8b:
                    dd:32:b5:58:4c:47:c2:20:b6:b7:c0:40:0a:23:4a:
                    7e:67:c6:54:de:17:61:36:f2:0d:90:ec:ae:60:09:
                    a5:19:55:d9:9c:56:ad:ba:84:8a:6c:05:19:a0:3f:
                    5e:1c:51:2e:86:78:b7:59:d8:47:fc:b1:41:93:25:
                    e7:dd:db:4e:e5:e4:a9:77:0b:54:c6:2a:d0:ee:1e:
                    24:ae:c0:b7:13:7f:ee:39:26:88:a9:39:42:f1:a5:
                    d0:79:d9:9b:94:e0:31:b3:95:4b:1c:5d:a6:19:78:
                    8f:15:5c:84:73:9b:1f:0b:ac:ab:c1:68:c8:34:c8:
                    1b:10:e6:7c:c5:a9:3f:a0:da:7f:26:eb:a5:7f:00:
                    be:eb:bc:61:f1:45:1f:5b:b8:01:be:b6:d4:de:48:
                    e2:db:8a:b3:b7:ad:1e:65:7f:4d:ab:d7:43:3a:59:
                    d8:42:05:af:c2:d8:2c:1d:79:a4:e6:7a:b2:5c:38:
                    bd:19:d6:c8:df:42:41:08:eb:9b:b5:0e:06:93:40:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4B:97:8B:9E:D3:CE:1D:CE:6D:F7:77:48:95:67:E3:07:13:06:49
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34382e302f32302d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:12:3e:44:ed:dd:1e:d2:e7:b2:74:2f:f5:4e:7f:f6:dc:70:
         85:0a:3d:3e:53:2b:df:54:75:bc:9c:c2:66:10:38:e8:f2:6d:
         a9:e1:8d:57:48:1c:1b:67:ad:9b:ea:b5:37:ff:d2:39:3a:da:
         05:76:4b:50:a0:c0:42:28:ec:3b:37:66:1c:0f:43:ca:36:12:
         db:bf:68:5d:45:34:57:c5:93:4f:51:f6:c3:73:3d:88:3b:7b:
         fd:47:c8:7a:29:fa:17:41:0c:ef:51:26:16:f6:76:93:2d:37:
         2d:07:1b:00:92:67:c5:1a:bd:a5:c4:c3:fb:dd:d7:92:ac:12:
         76:3d:aa:24:20:29:11:08:94:79:ba:f4:94:bb:ce:a6:7d:1e:
         c8:93:50:d5:96:ef:90:f5:5e:da:a3:d7:9b:76:1b:21:b8:64:
         3f:ae:53:c0:d1:6a:41:a3:32:1e:9d:c3:ad:7a:22:fc:12:cf:
         8d:44:9d:36:9a:21:6f:dd:f8:20:3d:c3:4a:5f:4e:85:8a:7d:
         cf:c8:9f:b0:fd:6f:c6:4f:ce:77:f6:dc:f9:0b:88:9c:62:80:
         46:da:6a:76:99:07:1c:4b:b3:51:8b:fa:81:80:4d:b5:83:bc:
         f7:d4:97:e3:da:98:cd:1c:65:0b:89:29:3e:1a:4b:73:d4:d5:
         8b:c2:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org