Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa
File:                     3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa (raw, json)
Hash identifier:          z8TZOmdhX91IbrRKbkIokO0gORp6LWC2SMd0WX+Sads=
Subject key identifier:   D9:C0:60:72:DB:51:AF:F9:63:E3:78:E5:74:DC:BF:D4:CD:34:DA:C8
Certificate issuer:       /CN=F821DED2CE38BADE79C41BB152602F035BB78B6C
Certificate serial:       0597557DF2F49ECED61A87CE17E6DCD45C417668
Authority key identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 17:51:47 +0000
ROA not before:           Tue 05 Mar 2024 17:46:47 +0000
ROA not after:            Tue 04 Mar 2025 17:51:47 +0000
asID:                     20207
IP address blocks:        190.105.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:97:55:7d:f2:f4:9e:ce:d6:1a:87:ce:17:e6:dc:d4:5c:41:76:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F821DED2CE38BADE79C41BB152602F035BB78B6C
        Validity
            Not Before: Mar  5 17:46:47 2024 GMT
            Not After : Mar  4 17:51:47 2025 GMT
        Subject: CN=D9C06072DB51AFF963E378E574DCBFD4CD34DAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:33:be:ae:78:61:17:b6:4f:49:b9:c6:d2:
                    b7:6e:4b:34:44:31:8e:ce:80:94:30:f7:be:bb:99:
                    69:19:38:59:56:d7:4f:5c:d4:61:1c:3b:4d:e6:e1:
                    4d:92:1d:e9:51:bf:96:18:94:54:2e:9c:28:ed:44:
                    a2:39:a4:0b:53:25:b3:ca:f2:af:6d:29:33:9d:61:
                    0d:62:da:74:ce:d8:ac:a5:5c:5c:59:fb:f4:7e:42:
                    56:0c:b6:25:71:7d:04:8f:16:f2:2b:1b:cb:cf:7a:
                    9d:32:62:7a:ca:8b:32:96:c2:15:63:61:58:c6:78:
                    ec:84:f6:21:ba:8a:c1:44:5c:ff:2b:2d:8d:df:47:
                    ef:df:19:06:5d:17:7d:a5:fc:1b:4b:c2:66:2d:1a:
                    00:53:25:56:10:ad:16:87:e7:02:14:34:ec:84:59:
                    25:ea:79:db:1a:1c:6f:a2:e8:aa:19:da:cd:ea:70:
                    57:97:13:62:33:bc:1a:81:99:d1:d9:6d:48:b2:46:
                    17:c4:d4:82:ee:b8:bb:da:ce:d4:f2:1a:28:c2:b0:
                    49:1c:02:7d:1a:9e:1c:37:de:35:ca:c6:99:98:65:
                    18:71:05:5e:7b:1a:40:36:28:1b:aa:7a:a7:2e:ff:
                    90:8c:c8:a2:35:c7:e2:9b:55:a9:e1:8a:3c:e4:77:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:60:72:DB:51:AF:F9:63:E3:78:E5:74:DC:BF:D4:CD:34:DA:C8
            X509v3 Authority Key Identifier:
                keyid:F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:77:7f:84:eb:5c:93:fd:06:30:a9:78:8a:c2:16:af:92:
         6a:1a:5b:f4:16:6e:ea:da:67:dd:42:9a:f9:39:2a:1a:8d:c2:
         05:d0:26:92:e1:32:0d:51:d1:d2:71:25:c4:c7:73:86:f5:72:
         8a:f0:c3:49:33:42:c7:b3:49:ae:62:bc:d8:1d:5d:e1:d6:5e:
         9a:7b:3f:df:f5:ac:39:24:1b:37:99:b7:f1:7d:69:17:2e:66:
         6f:f7:07:84:18:c3:da:a8:9e:06:6d:e1:0a:db:94:91:57:47:
         45:27:2b:d0:bb:a3:3d:b4:7c:c9:6a:ed:3e:c3:e9:6d:0b:fb:
         db:ad:ab:35:1d:82:ec:08:72:a0:b7:93:92:d6:a8:80:52:92:
         45:90:f6:f5:d9:90:be:d1:70:95:71:c6:86:69:d0:92:68:b3:
         45:50:af:52:a0:28:23:65:6d:a1:41:c5:a9:f4:6b:37:3b:19:
         71:a3:74:31:73:29:78:9e:e1:2d:ea:da:f0:a1:5a:49:6c:c0:
         c0:81:cd:0b:d7:17:fb:0c:57:11:79:56:64:74:78:f7:ba:96:
         e5:57:19:d0:07:ff:10:79:2e:e3:8f:4f:d1:d0:61:ec:4c:d1:
         b3:fe:28:a1:cd:b0:50:33:10:ba:99:e1:5b:a6:d5:7c:f1:e8:
         6c:73:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org