Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3234203d3e203131393437.roa
File:                     3139362e33322e33322e302f31392d3234203d3e203131393437.roa (raw, json)
Hash identifier:          W1hkfUZV9lggMIkAHiURXgoXUUr7IbKB2UdTfCfyoLg=
Subject key identifier:   E9:65:6F:18:6E:AC:E9:45:77:83:C2:66:56:5B:B6:0C:1B:E7:90:66
Certificate issuer:       /CN=E3639ACB469ACD09A9A4D97F8416716237860877
Certificate serial:       07D54900D0BBF147B9F0806C906DF090C01438D6
Authority key identifier: E3:63:9A:CB:46:9A:CD:09:A9:A4:D9:7F:84:16:71:62:37:86:08:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3234203d3e203131393437.roa
Signing time:             Tue 05 Mar 2024 18:02:03 +0000
ROA not before:           Tue 05 Mar 2024 17:57:03 +0000
ROA not after:            Tue 04 Mar 2025 18:02:03 +0000
asID:                     11947
IP address blocks:        196.32.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d5:49:00:d0:bb:f1:47:b9:f0:80:6c:90:6d:f0:90:c0:14:38:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3639ACB469ACD09A9A4D97F8416716237860877
        Validity
            Not Before: Mar  5 17:57:03 2024 GMT
            Not After : Mar  4 18:02:03 2025 GMT
        Subject: CN=E9656F186EACE9457783C266565BB60C1BE79066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9c:80:de:68:af:b4:30:a6:f0:99:54:91:f3:
                    e0:ea:a8:f8:e3:1e:fa:17:29:3e:93:3a:56:7d:f4:
                    d4:2d:33:79:4b:42:f1:6e:7f:aa:2d:c6:10:ff:10:
                    1f:55:ba:df:95:91:d1:aa:3a:12:b0:26:e2:68:7a:
                    a2:be:08:18:a8:9d:80:b5:27:49:3c:38:28:45:ab:
                    75:52:1a:0c:39:71:ae:66:f7:7b:9e:65:16:51:5e:
                    ae:41:84:59:80:74:6c:42:e0:88:9d:01:47:c2:36:
                    91:5f:31:66:1d:42:ef:06:df:48:aa:88:b8:db:c2:
                    3a:a1:56:63:4c:be:55:46:f7:8c:b6:0e:da:ec:2b:
                    f6:e2:60:ec:19:3f:61:ae:e5:f4:40:0b:7c:01:6f:
                    36:bc:87:b1:7a:57:0c:ed:35:19:ff:0e:db:3f:bb:
                    29:44:48:9d:29:05:00:5d:c8:de:38:47:5c:f1:0f:
                    a7:3c:35:60:f8:ec:43:76:f0:f5:68:a5:12:4a:9e:
                    8d:9d:6d:36:43:f0:16:75:c7:ec:5b:2c:dd:56:f2:
                    02:fd:d1:b6:c6:0a:f3:78:53:d9:2e:ec:88:b0:65:
                    38:a2:a4:10:0b:8d:03:d2:66:4a:cb:b4:a1:cc:bb:
                    d3:73:2f:66:61:0d:c1:c7:93:31:47:fd:c8:29:fa:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:65:6F:18:6E:AC:E9:45:77:83:C2:66:56:5B:B6:0C:1B:E7:90:66
            X509v3 Authority Key Identifier:
                keyid:E3:63:9A:CB:46:9A:CD:09:A9:A4:D9:7F:84:16:71:62:37:86:08:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/E3639ACB469ACD09A9A4D97F8416716237860877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3639ACB469ACD09A9A4D97F8416716237860877.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B28D7B24E51CB6F00B934686EE52F9356E1DFD87884A6901E920D505ACE6B50/0/3139362e33322e33322e302f31392d3234203d3e203131393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:9e:2c:f2:ac:06:25:35:3d:c5:f0:e6:ad:04:c8:69:eb:
         b7:8d:e1:1e:8e:4e:ac:c1:d8:9e:6e:9d:40:06:bd:84:6d:c7:
         7f:a2:f3:f0:39:9d:42:b7:84:44:e8:78:40:c8:86:8d:3e:51:
         7e:f1:9a:b0:03:24:66:c1:36:c8:52:69:a2:9c:72:79:63:f7:
         55:68:bd:21:db:05:85:63:f3:1d:96:ce:97:00:44:9e:31:81:
         b9:d0:a4:97:0f:b3:af:f2:26:93:01:b7:4b:19:25:da:e3:9d:
         ab:f3:b3:dd:9f:4b:10:b1:66:bb:ce:e0:ed:5a:8e:3c:af:c7:
         b0:19:6a:9d:a3:a1:13:83:8c:e8:65:2e:5e:ad:b0:bb:06:8a:
         3b:a0:f4:e8:7b:91:13:10:f9:07:14:70:d6:ee:df:e3:09:c7:
         2b:7e:68:6a:db:76:93:50:27:e4:9d:78:a7:af:2f:53:a5:c5:
         24:7f:8c:b0:a2:19:37:47:28:54:a2:34:61:ea:f9:95:c7:58:
         4a:89:01:0d:27:29:1d:b3:49:d1:6d:4f:9c:a2:79:04:59:c1:
         fb:f1:fd:f4:96:09:d9:a7:2e:ae:0b:a4:52:13:bf:6c:4d:ba:
         f3:67:2f:1b:3d:cd:9f:7c:08:d6:51:ae:6f:9f:c4:16:37:ee:
         57:f4:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org