Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3139322e302f32302d3231203d3e203237383839.roa
File:                     3139302e37362e3139322e302f32302d3231203d3e203237383839.roa (raw, json)
Hash identifier:          Hz2570spj6o0aNXL92fdPdzThf79G2gvnb5tsf6ioOs=
Subject key identifier:   CA:68:46:5D:5D:6D:3A:7D:A8:4D:74:63:84:0D:F1:7F:C4:B7:CE:0C
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       304151F4947FD54F3C175E819FA82F1369B1DE59
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3139322e302f32302d3231203d3e203237383839.roa
Signing time:             Tue 05 Mar 2024 18:15:01 +0000
ROA not before:           Tue 05 Mar 2024 18:10:01 +0000
ROA not after:            Tue 04 Mar 2025 18:15:01 +0000
asID:                     27889
IP address blocks:        190.76.192.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:41:51:f4:94:7f:d5:4f:3c:17:5e:81:9f:a8:2f:13:69:b1:de:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:01 2024 GMT
            Not After : Mar  4 18:15:01 2025 GMT
        Subject: CN=CA68465D5D6D3A7DA84D7463840DF17FC4B7CE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ae:96:18:fe:8b:56:08:e4:61:71:c3:1a:ec:
                    52:52:67:fb:a4:87:9c:df:71:cc:52:02:a2:8a:c2:
                    27:51:f4:b7:fd:f1:84:2f:2d:ee:a7:fa:f9:b4:78:
                    9a:af:61:1c:e3:c1:39:4e:d7:13:fb:70:a2:bf:c1:
                    96:f3:2d:17:ea:02:84:a2:12:73:f3:74:2a:5a:04:
                    38:78:8a:5d:02:c2:14:8f:f5:a1:89:87:c1:96:a5:
                    d6:c1:52:5f:09:7e:6e:74:04:87:08:d6:47:aa:83:
                    75:e6:a8:68:24:5a:c1:5a:2e:9e:13:d9:14:ec:57:
                    2d:48:7a:bd:14:3a:5c:ea:31:e8:37:59:0c:cf:36:
                    ee:a6:93:6a:96:ed:f4:12:e0:17:2c:f0:19:89:f6:
                    d1:58:9d:3f:c7:4f:38:0f:7a:1c:d9:d5:37:23:cd:
                    71:49:bb:51:5d:51:6b:71:1b:98:7d:c4:b8:5e:78:
                    9c:e8:d6:99:ab:7e:46:df:5f:d3:ae:a2:39:c6:75:
                    a5:fb:fa:8a:85:14:56:9c:0f:68:56:a1:f8:05:81:
                    25:38:34:ea:a7:ac:d6:f9:bd:0f:70:f3:70:e9:2d:
                    0a:76:59:7c:25:93:d7:83:06:d5:7b:de:21:e0:80:
                    ca:f7:73:40:8e:ce:27:ef:08:ec:18:c4:a1:9e:4f:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:68:46:5D:5D:6D:3A:7D:A8:4D:74:63:84:0D:F1:7F:C4:B7:CE:0C
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3139322e302f32302d3231203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:20:62:6e:6b:55:25:af:2e:46:0a:3c:fb:e3:11:37:37:
         ef:42:46:74:aa:af:8b:b0:9f:e4:ff:01:47:ee:0d:85:32:71:
         dd:42:81:95:5e:ef:ca:f9:16:bd:39:25:46:c3:4f:3e:dc:73:
         08:08:91:93:e6:e3:0f:f9:bc:e2:ff:b6:2e:b5:21:13:33:22:
         5b:c3:0d:9b:43:f2:c7:58:ee:18:e7:c5:c1:c7:62:e5:37:92:
         34:2f:4c:88:36:1e:a5:6b:a4:9b:42:a8:55:0c:38:95:80:91:
         b7:35:56:a7:ae:8f:06:3b:5b:e8:20:67:05:ce:f6:dc:e2:68:
         30:9f:7a:f1:5f:6f:49:3c:d1:d5:03:75:7f:1b:54:30:6e:1e:
         41:49:79:63:a4:b8:21:b1:16:62:58:90:f0:ac:90:1b:62:4f:
         17:40:33:b9:7c:db:ea:cb:c3:14:02:3f:43:3d:38:ad:f2:01:
         34:64:05:6d:29:b3:da:ff:a6:b6:ea:a0:0f:2c:e2:66:c1:a8:
         42:ea:12:64:bb:4a:04:70:1f:ba:2d:8c:ce:bb:be:90:33:89:
         ea:63:bf:d1:b6:b9:c9:51:b9:60:43:bc:cc:c5:eb:9d:b1:8f:
         0c:a4:bb:77:b6:a3:9d:91:27:23:20:40:86:fc:aa:32:35:f0:
         66:65:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org