Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e302e302f31382d3234203d3e203237393834.roa
File:                     3139302e3130352e302e302f31382d3234203d3e203237393834.roa (raw, json)
Hash identifier:          7bpHijWXxecya8X1mr5yvFVtwswPfz+whg07X3nCQB4=
Subject key identifier:   C1:C3:D4:01:46:70:75:78:9C:6D:6B:53:FA:5C:33:76:85:5E:0E:90
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       4707E364A9F750D35A51CE3865FCB27E3F9FFE1E
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e302e302f31382d3234203d3e203237393834.roa
Signing time:             Tue 05 Mar 2024 17:43:54 +0000
ROA not before:           Tue 05 Mar 2024 17:38:54 +0000
ROA not after:            Tue 04 Mar 2025 17:43:54 +0000
asID:                     27984
IP address blocks:        190.105.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:07:e3:64:a9:f7:50:d3:5a:51:ce:38:65:fc:b2:7e:3f:9f:fe:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Mar  5 17:38:54 2024 GMT
            Not After : Mar  4 17:43:54 2025 GMT
        Subject: CN=C1C3D401467075789C6D6B53FA5C3376855E0E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:c7:4f:9f:b3:c2:87:1a:df:6b:32:90:9f:
                    c1:7a:8a:8d:7f:5d:9e:e3:2e:e4:5d:01:d3:da:07:
                    b0:e5:a1:5a:d2:e5:20:2f:30:fb:bc:86:16:e2:d8:
                    9c:78:8d:f9:be:ba:8a:b5:8d:5c:8c:d4:99:40:ba:
                    d9:08:c6:e9:09:c5:bc:96:72:c9:3d:58:25:59:c4:
                    bc:2b:bf:84:3a:17:9f:f3:8c:ed:eb:48:2b:54:8e:
                    52:90:9c:c5:d1:98:bf:cf:41:0c:51:22:15:84:01:
                    ac:40:de:af:73:87:b5:c0:d8:e1:32:20:0e:7c:ca:
                    6a:b8:18:8e:16:74:d4:c3:50:4d:9b:8d:b6:1f:33:
                    23:10:bb:8c:be:d9:73:75:31:ee:ef:78:92:33:b9:
                    14:21:ed:17:27:0e:45:e5:58:09:b8:cb:d8:6e:83:
                    c2:6d:29:eb:ac:03:1d:17:ce:cb:8b:fb:38:ab:55:
                    e2:82:dd:fe:59:06:fa:66:a4:d2:22:84:a9:50:7a:
                    eb:c2:04:fb:85:ec:c4:d2:d9:bd:48:27:9d:9e:67:
                    e2:4a:9d:e9:2c:b9:55:d9:d9:dd:d1:ca:6b:e6:93:
                    4a:49:a7:8f:a1:61:c3:69:50:1b:95:a6:10:16:06:
                    53:02:2b:4e:09:82:0d:8d:6b:b6:33:e0:84:ce:de:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:D4:01:46:70:75:78:9C:6D:6B:53:FA:5C:33:76:85:5E:0E:90
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e302e302f31382d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:64:94:7c:de:90:65:43:8c:dd:0e:31:1f:cc:5c:9a:cb:13:
         1e:e2:be:6b:fc:29:a1:5b:4f:9a:fe:15:6d:77:c9:f0:2d:96:
         b2:83:67:85:35:aa:7e:a0:d1:c9:3c:14:80:e6:85:da:92:aa:
         cd:54:b9:7d:c2:83:c5:86:06:98:20:2e:f9:86:3a:ff:34:1a:
         60:77:06:c2:8f:5a:54:50:b2:68:ed:5f:c0:c4:14:af:01:1e:
         ed:7f:08:ee:a2:d1:66:ed:ce:09:06:c9:4a:84:db:65:b8:14:
         6c:81:d3:c9:77:be:a1:d5:de:a9:e1:9f:73:a0:87:aa:0f:eb:
         6e:63:a8:b5:99:59:5c:0c:a9:83:bd:62:68:16:d1:64:3f:99:
         8d:d3:1e:fa:6a:ec:16:e4:4a:f7:b4:86:0a:ae:e4:cd:2c:00:
         8d:81:98:fd:51:94:a9:29:08:e6:44:24:0c:44:2d:c4:0a:b9:
         8a:f7:f2:c3:43:1f:f5:5c:4f:7b:33:a5:a3:61:e7:42:b4:21:
         9b:89:27:b0:f2:35:e1:bc:3c:60:9f:23:15:d0:87:42:bd:35:
         41:6a:33:1e:b1:9b:77:07:05:3a:65:72:fc:72:60:d2:d5:82:
         df:e5:71:20:f9:e4:e5:dc:58:65:a9:51:00:2a:35:4d:f1:c2:
         6a:c4:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:06 2024 by rpki-client on console-ams.rpki-client.org