Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32312d3234203d3e203532333932.roa
File:                     3139302e39392e3132302e302f32312d3234203d3e203532333932.roa (raw, json)
Hash identifier:          QtoCgJxJmRnyirm9etyWCb3R+6gCHvoCh3bXyswVWSA=
Subject key identifier:   63:B9:6F:FE:49:B1:60:7F:E5:50:4C:24:A5:4E:B9:98:8B:BA:56:DC
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       6DE37F611F81C052CC1E63438C683E29CC3781D9
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32312d3234203d3e203532333932.roa
Signing time:             Tue 05 Mar 2024 17:52:13 +0000
ROA not before:           Tue 05 Mar 2024 17:47:13 +0000
ROA not after:            Tue 04 Mar 2025 17:52:13 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e3:7f:61:1f:81:c0:52:cc:1e:63:43:8c:68:3e:29:cc:37:81:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Mar  5 17:47:13 2024 GMT
            Not After : Mar  4 17:52:13 2025 GMT
        Subject: CN=63B96FFE49B1607FE5504C24A54EB9988BBA56DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:ff:b2:48:2e:93:6b:4d:2e:61:c3:50:2b:
                    23:7f:89:66:c7:32:97:87:09:7f:45:d1:1e:54:fd:
                    fa:6f:53:3f:0b:bf:20:03:1b:66:cb:f5:41:d4:ff:
                    eb:cd:2b:78:85:9a:e4:50:00:9e:f1:32:80:39:19:
                    43:1a:d2:58:8f:3e:ee:1f:3d:40:c2:20:85:a8:93:
                    b7:02:f5:aa:61:d0:63:fc:a1:5c:50:62:6f:1e:42:
                    ca:89:dd:3f:59:30:31:e8:65:15:98:2f:37:d2:fe:
                    e6:24:fe:ef:72:0c:1e:be:57:db:3f:9d:04:a4:15:
                    81:ed:b7:d0:76:ce:d2:7a:05:bd:17:07:52:4e:fe:
                    eb:ea:ac:63:ff:01:d0:a3:c6:7f:7d:7d:3c:3f:d8:
                    fd:fe:47:29:2c:c1:61:31:0e:38:a7:be:b5:2d:d2:
                    38:d2:71:f1:30:f3:97:09:ee:05:37:2b:8d:77:3d:
                    de:38:88:40:d3:c7:13:ff:4d:75:77:09:34:63:94:
                    b4:18:84:46:a6:6f:74:99:a2:67:6b:d0:c5:84:a2:
                    49:69:48:0a:db:9f:45:7e:70:c9:0a:ed:bd:8e:25:
                    ff:97:57:de:1d:8f:ac:c2:c2:2d:fb:68:27:3a:bf:
                    28:85:40:9b:5c:21:b3:65:95:ea:37:95:d0:3b:1b:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:6F:FE:49:B1:60:7F:E5:50:4C:24:A5:4E:B9:98:8B:BA:56:DC
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32312d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:5e:47:82:d2:6d:23:65:f2:99:60:75:7a:29:eb:b2:f5:30:
         2a:63:15:4f:2e:3b:17:f9:c1:8e:3e:4c:ad:d8:b7:52:9c:32:
         66:a4:ef:08:e0:cb:81:f8:9f:0d:c5:af:5f:2d:d0:cd:ea:c5:
         b6:ee:2e:25:59:34:3b:42:9e:4c:c4:3a:bb:33:0c:09:02:aa:
         f9:18:da:4a:c5:0f:23:83:b0:1d:36:7b:c0:47:d7:85:ac:a5:
         56:f1:58:c3:0e:e9:ac:0d:61:04:a2:17:ca:58:2e:37:81:f7:
         ff:fb:ad:d0:b9:65:02:8b:57:d0:24:f5:04:7a:76:81:c7:be:
         8f:77:e9:ba:b7:34:9c:fe:6e:3f:09:b2:a5:73:3a:32:b4:15:
         c8:9f:4b:a0:01:f9:78:84:6f:7a:4a:a8:a7:8d:c2:bb:2b:73:
         53:e5:73:88:3e:e5:45:07:08:13:d0:e2:e3:86:af:98:32:18:
         1e:ec:a8:b0:be:b3:72:6e:de:db:a6:e5:02:eb:e8:b6:5d:17:
         45:d0:13:c3:77:00:3e:17:da:54:40:03:99:3e:90:93:26:70:
         d4:53:d6:15:72:80:9d:50:db:ff:e6:51:06:e1:3c:1c:34:a6:
         35:a7:2e:bc:f3:ac:77:19:3b:66:cc:8d:9c:a3:94:fc:9d:2e:
         9c:56:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:22 2024 by rpki-client on console-ams.rpki-client.org