Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
File:                     3139302e31322e3132302e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          zZK5yDyvQNdO2YyiPn3ziolsn7OGElTTrOVUsjXr7GE=
Subject key identifier:   58:E6:A2:FE:DB:54:77:F0:0D:4B:BA:8A:F6:A9:82:46:EB:97:E7:A3
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       3F779D784F7C1627EAFB10A64B1DAA92C9EEF03E
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:16 +0000
ROA not before:           Tue 05 Mar 2024 17:50:16 +0000
ROA not after:            Tue 04 Mar 2025 17:55:16 +0000
asID:                     11014
IP address blocks:        190.12.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:77:9d:78:4f:7c:16:27:ea:fb:10:a6:4b:1d:aa:92:c9:ee:f0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:16 2024 GMT
            Not After : Mar  4 17:55:16 2025 GMT
        Subject: CN=58E6A2FEDB5477F00D4BBA8AF6A98246EB97E7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:9b:a8:7e:1b:0f:f7:05:cb:c9:f8:51:1b:
                    38:a4:a4:ee:0b:4a:a0:2a:c0:d6:ae:38:05:d6:61:
                    30:a3:f9:43:08:52:bf:00:d1:a2:23:28:2c:18:5d:
                    9a:96:b0:16:c2:39:0a:92:89:ad:8c:07:a2:fb:66:
                    8c:fa:f0:7b:0f:24:29:94:75:0c:ec:27:d3:ef:0c:
                    2b:82:b1:76:25:23:b2:2c:70:3a:08:e7:ef:10:af:
                    7d:cb:97:68:32:5b:25:1c:d5:18:19:9c:73:20:6b:
                    eb:6e:48:00:44:50:c9:50:ff:14:d7:05:9a:f3:6b:
                    12:73:87:16:45:cd:83:21:69:1b:db:d9:25:9e:86:
                    21:49:d7:78:f0:64:b0:7b:9c:58:4c:8e:f9:e7:30:
                    31:dc:79:d3:bc:03:78:88:6f:18:be:62:da:e9:89:
                    f7:5f:1b:c8:c4:41:52:8d:b3:8c:ce:f2:e1:23:26:
                    79:91:51:f0:4e:78:4a:fc:08:29:b8:e9:b1:c3:9f:
                    73:63:a8:32:2b:74:a1:1b:17:2d:a9:a0:df:5a:ad:
                    ed:22:b2:ea:27:72:7a:02:61:b2:7d:1b:1a:fe:b3:
                    04:56:97:31:bd:0e:8f:30:75:28:60:5b:bd:05:3c:
                    b9:87:6d:7c:ca:ee:5c:81:13:bc:7c:0e:13:a9:87:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:A2:FE:DB:54:77:F0:0D:4B:BA:8A:F6:A9:82:46:EB:97:E7:A3
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:29:20:07:5d:e9:75:1c:64:51:b1:a8:b3:7d:9f:0c:64:
         cd:4a:b2:10:48:e1:2e:f3:46:b7:22:73:04:c3:70:67:3b:72:
         7e:75:b3:a8:f1:3f:ee:be:68:54:d6:85:27:45:ba:ce:f7:3d:
         df:bb:7c:ff:a2:bc:e8:8c:8c:6f:19:53:c4:49:98:8a:c3:5c:
         bb:df:ff:78:f4:11:79:f3:d3:77:f8:d5:a9:a6:77:fa:31:6c:
         49:3f:3b:d6:0b:a4:ab:3b:7c:e4:8c:b3:f3:1f:f9:fa:d9:21:
         4b:0c:91:5a:91:17:10:b1:a7:28:c1:67:2c:18:5c:20:ba:c6:
         f7:c5:21:f4:fd:92:ac:49:2b:79:68:a9:d8:b3:65:be:8a:63:
         b3:0d:27:1d:37:26:c5:8b:b4:e3:2c:5b:c5:47:71:30:79:3c:
         12:ff:f5:17:6f:4f:31:16:c3:fb:ab:03:c8:90:f7:05:24:cc:
         6e:00:b9:51:fa:3e:03:b9:54:60:7d:9f:48:95:c4:b4:a3:7b:
         ef:3c:f1:4c:3f:b3:33:e7:61:b7:8d:be:e8:1f:9a:c1:96:d0:
         6e:d3:d6:94:76:f1:3c:9a:45:67:42:6b:03:c0:6f:29:94:47:
         19:07:61:a5:e1:ce:bb:b5:a1:11:1e:54:d9:02:d1:83:6c:1f:
         c5:0a:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org