Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa
File:                     3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa (raw, json)
Hash identifier:          FXCBrDlk7I2gy/Vyf1kQsY40iCFaC3QXVfqfH+F+EeY=
Subject key identifier:   07:34:81:6A:F6:9B:5E:A0:00:B0:A4:C1:A1:41:32:94:94:BD:B7:27
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       1546872BC5EEE7A90027F939B50D00BD496744C1
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa
Signing time:             Tue 05 Mar 2024 18:01:37 +0000
ROA not before:           Tue 05 Mar 2024 17:56:37 +0000
ROA not after:            Tue 04 Mar 2025 18:01:37 +0000
asID:                     52278
IP address blocks:        190.105.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:46:87:2b:c5:ee:e7:a9:00:27:f9:39:b5:0d:00:bd:49:67:44:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Mar  5 17:56:37 2024 GMT
            Not After : Mar  4 18:01:37 2025 GMT
        Subject: CN=0734816AF69B5EA000B0A4C1A141329494BDB727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:bb:58:10:18:5e:3c:25:ab:81:ae:05:cb:
                    ff:f9:70:b3:96:15:c2:47:29:d1:81:83:3d:a7:00:
                    36:e4:4a:3d:09:1d:c1:82:45:e7:d2:63:bb:50:6f:
                    ac:46:3b:6b:36:89:98:77:8a:86:e1:87:ef:0e:c0:
                    44:a1:0d:17:c6:26:35:95:3d:c5:3e:2e:62:1c:67:
                    2e:66:2e:7c:22:87:50:78:3c:cf:4e:ea:28:b8:77:
                    cf:95:86:69:92:67:7c:22:c5:16:34:56:ec:52:a4:
                    bc:c2:fb:fe:b5:a2:82:cb:0f:fc:e5:10:ac:9d:5b:
                    41:1e:9f:73:e3:fb:b8:ae:f7:67:5a:00:81:3f:5b:
                    3c:2c:23:25:96:db:fa:e3:01:69:4b:61:f8:69:bd:
                    5c:09:1d:c5:1a:7a:1f:bc:c0:79:c3:6a:4e:c7:d9:
                    5b:80:89:4a:c0:d0:8b:63:55:ec:63:6b:82:54:63:
                    0d:94:e8:2d:88:98:21:b1:ae:08:dd:00:9e:8f:b7:
                    6e:bb:09:08:41:47:55:1b:77:7e:95:73:d8:df:ba:
                    80:5e:21:54:01:4a:32:a5:77:c4:07:67:3f:e8:78:
                    c2:05:c6:7c:d2:85:8c:7e:07:81:6c:8a:f8:8c:1e:
                    44:ab:e7:5c:bf:b3:6e:99:ce:67:18:f6:d6:e8:cf:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:81:6A:F6:9B:5E:A0:00:B0:A4:C1:A1:41:32:94:94:BD:B7:27
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32302d3230203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:52:4e:82:1b:3f:3e:f1:1e:f4:d7:4a:cc:3d:a9:d7:b0:
         95:3f:8b:da:92:fa:dc:5f:d8:08:4b:92:b8:f4:2b:60:e5:79:
         92:2a:de:20:0a:36:fa:5a:a2:bc:d0:0b:a1:8c:b2:31:e1:56:
         7c:1c:45:f2:50:c0:0e:a3:95:3c:1d:4f:31:fa:bf:9b:ae:7d:
         77:24:a4:a5:45:ee:6e:4b:13:1b:27:7d:1d:56:9d:da:fb:1d:
         e4:9c:08:7e:09:ae:47:47:7c:be:68:93:3c:00:5e:cf:62:23:
         0a:11:29:13:87:0f:b8:34:e5:23:9a:bb:a4:ed:e5:36:94:41:
         ec:24:2b:3d:e0:b3:61:f5:da:db:32:80:12:63:cc:34:e1:78:
         a9:26:d9:35:c0:d5:3b:1c:4a:bf:c9:74:1c:ec:88:3a:69:80:
         4b:f5:1a:17:ab:5b:86:47:ad:8a:dd:90:36:9b:ae:f7:46:05:
         28:c4:78:ce:be:22:90:fb:b9:b4:e7:b7:80:c1:6c:98:3a:31:
         e0:76:b2:c7:a1:a7:d0:dd:a8:f7:3b:2e:ee:64:42:b6:2a:73:
         3e:7a:68:63:9f:35:13:36:11:97:d1:73:08:ac:f8:0f:88:c7:
         f6:62:98:e9:47:f5:57:3f:8e:71:09:f0:3b:38:0d:bd:72:59:
         72:ac:95:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org