Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e3131342e38302e302f32302d3234203d3e203238303338.roa
File:                     3139302e3131342e38302e302f32302d3234203d3e203238303338.roa (raw, json)
Hash identifier:          mEc5EIZx1zeEP5GS4+czFRt2COlQmteRrk8no2Cfzqg=
Subject key identifier:   5C:CE:CD:AF:70:F2:26:F1:88:19:6A:2D:C2:14:F1:3B:11:E9:08:72
Certificate issuer:       /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial:       28B8C5A823F098B0E129D253CF75F3873374EFAF
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e3131342e38302e302f32302d3234203d3e203238303338.roa
Signing time:             Tue 05 Mar 2024 18:02:35 +0000
ROA not before:           Tue 05 Mar 2024 17:57:35 +0000
ROA not after:            Tue 04 Mar 2025 18:02:35 +0000
asID:                     28038
IP address blocks:        190.114.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b8:c5:a8:23:f0:98:b0:e1:29:d2:53:cf:75:f3:87:33:74:ef:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
        Validity
            Not Before: Mar  5 17:57:35 2024 GMT
            Not After : Mar  4 18:02:35 2025 GMT
        Subject: CN=5CCECDAF70F226F188196A2DC214F13B11E90872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d3:90:d5:ee:05:6c:6f:31:ad:da:57:6f:b5:
                    31:60:c3:40:86:9a:6a:14:48:c7:70:08:f6:1a:15:
                    a8:67:98:0f:e5:df:72:05:95:ec:7f:fe:b7:ee:15:
                    84:4c:dd:bd:60:8d:0c:7a:0b:04:0c:c8:dc:fc:f0:
                    65:e2:52:1a:fc:84:76:8e:89:5f:a5:29:94:f4:a4:
                    90:63:41:b8:35:1b:c1:89:f5:0b:67:24:8b:a2:82:
                    9d:22:88:3f:ec:92:89:1c:ac:fa:0d:4f:81:c1:12:
                    3f:f5:67:23:24:95:38:c5:09:2b:f7:9a:fa:21:8b:
                    4e:a7:d7:75:5e:fc:a8:ef:44:bf:21:53:9b:b8:e8:
                    5b:c8:cb:f9:ad:39:04:06:b4:55:88:f2:dc:2f:83:
                    ff:fa:bd:ca:af:33:d2:32:48:da:f3:33:36:34:95:
                    26:b5:e8:ee:40:a2:3f:77:62:56:b6:39:c9:d0:f8:
                    a5:da:cc:27:de:6a:b8:f8:6b:ed:d2:74:e3:51:90:
                    d3:62:8b:75:a3:c0:77:1f:35:1d:9f:b5:f9:99:ab:
                    c5:49:04:02:f0:76:3f:f0:d8:34:ad:9f:04:0e:af:
                    7a:f8:9e:97:fe:a5:25:7d:1d:60:41:d7:d0:4a:eb:
                    e5:79:0f:9b:21:5d:29:df:fb:4f:38:fe:b8:7a:72:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:CD:AF:70:F2:26:F1:88:19:6A:2D:C2:14:F1:3B:11:E9:08:72
            X509v3 Authority Key Identifier:
                keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e3131342e38302e302f32302d3234203d3e203238303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:40:3c:b4:5a:ce:b8:31:84:de:a7:55:18:62:f6:02:60:d7:
         f0:0d:52:0c:47:92:77:86:dd:8f:10:07:d3:7f:10:3a:52:23:
         5d:ff:92:5d:b1:b5:16:2c:c9:ef:28:04:bf:fb:7e:64:47:0f:
         8c:3e:72:91:c0:42:b9:f8:41:5d:b0:61:62:40:1f:47:02:d8:
         0a:19:5d:59:9a:7f:a5:e7:3a:5f:e6:3a:2a:ca:7e:ee:96:a4:
         4b:1a:27:78:27:7f:7f:73:9b:6c:e5:98:65:a8:12:fd:fa:fb:
         1a:06:00:17:ac:b5:51:19:41:42:17:39:60:60:7b:af:14:d1:
         77:9f:36:05:19:30:6c:54:f6:20:99:17:95:d3:af:81:48:e8:
         0f:08:f7:45:ef:31:eb:fe:39:36:82:e2:62:8b:6e:30:db:5c:
         47:3e:21:a7:66:95:4e:d1:8c:e9:96:71:f3:a1:a8:58:17:2d:
         29:a7:98:92:0b:dc:da:74:c3:22:7f:fa:d3:6c:71:3f:e1:a7:
         e0:ec:33:1b:11:41:aa:5e:06:71:56:73:a3:f3:f8:dc:5b:c8:
         ff:90:6f:b4:91:44:0b:9a:74:18:50:87:c3:0d:12:f7:02:a0:
         62:28:dc:a7:d6:2f:b3:c5:db:d6:48:e4:76:18:6b:15:89:a5:
         ea:b9:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:29:16 2024 by rpki-client on console-fra.rpki-client.org