Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa
File:                     3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa (raw, json)
Hash identifier:          MWuMI0GxwU1kKHeXsskMlPVhHcQHnTUPmN5pCuk8pCg=
Subject key identifier:   43:DE:34:DA:AD:6E:FD:80:F8:C6:8A:06:01:9D:0E:72:0A:D3:A7:35
Certificate issuer:       /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854
Certificate serial:       24F0D016F302E3421DB3BA88BCC1A526521E7FC0
Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa
Signing time:             Tue 05 Mar 2024 18:03:02 +0000
ROA not before:           Tue 05 Mar 2024 17:58:02 +0000
ROA not after:            Tue 04 Mar 2025 18:03:02 +0000
asID:                     27996
IP address blocks:        190.114.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:d0:16:f3:02:e3:42:1d:b3:ba:88:bc:c1:a5:26:52:1e:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854
        Validity
            Not Before: Mar  5 17:58:02 2024 GMT
            Not After : Mar  4 18:03:02 2025 GMT
        Subject: CN=43DE34DAAD6EFD80F8C68A06019D0E720AD3A735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:56:c3:34:cb:9a:e5:89:cc:86:3d:bc:53:
                    29:4c:1c:5f:95:ab:23:14:b6:e4:fe:62:c1:ef:6a:
                    ba:bc:6c:cd:34:22:eb:b4:63:db:e1:5c:cd:c2:5e:
                    d5:15:7d:e2:b8:a5:30:ff:c4:fa:95:c5:2e:e3:87:
                    81:62:6f:7c:a6:28:e1:f6:7e:5c:ec:8d:93:a8:18:
                    b0:d1:6a:8d:87:34:ed:9d:d8:9b:43:65:0b:14:d6:
                    a5:55:16:98:a8:23:4b:17:e9:e0:c2:cb:d1:c1:d3:
                    af:6a:1f:34:94:c0:ff:a8:18:d6:9c:e1:ea:88:51:
                    c1:f6:f9:84:82:8c:86:d9:8b:37:e7:fc:56:95:67:
                    3c:98:74:2b:65:3e:aa:99:54:87:2b:30:9c:cd:79:
                    2b:1d:c3:0d:fe:74:7e:ca:df:5c:0c:e1:a8:1f:75:
                    28:b1:21:79:0f:05:a7:af:9a:72:0f:9d:9f:d4:4f:
                    65:c9:fc:22:94:f4:d7:a2:3a:35:f3:1a:9a:44:57:
                    b6:43:be:11:6e:51:1c:44:2a:1c:07:5b:08:d6:c7:
                    c5:f7:f3:2a:d7:9d:a1:68:1f:3c:1c:93:fd:55:da:
                    53:21:ec:9c:2b:40:2d:f4:e4:d3:be:2b:fc:86:0b:
                    67:66:19:3a:8e:7d:cf:45:21:52:20:d5:65:bb:b5:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:34:DA:AD:6E:FD:80:F8:C6:8A:06:01:9D:0E:72:0A:D3:A7:35
            X509v3 Authority Key Identifier:
                keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:4c:04:51:d5:64:88:e7:78:ee:68:e7:56:9c:0e:08:91:
         fc:b8:9e:ae:0b:21:f7:4d:04:8f:d5:3a:85:a5:9e:f9:a6:4e:
         eb:b7:bf:e1:a9:a1:8a:34:c1:49:65:9b:b7:a8:a2:d4:aa:36:
         01:d7:86:24:3d:46:5a:a1:b5:66:1f:fa:21:7e:75:dc:66:d4:
         3b:ba:76:e7:31:7d:55:97:9d:21:52:01:e5:29:83:54:a5:1c:
         4b:64:17:0f:eb:b3:dc:6f:19:ef:6e:0b:5c:ff:1a:df:1c:6d:
         d8:e3:c2:f9:6f:fc:7f:15:6c:fb:71:8d:8e:5d:c0:ce:7c:ca:
         1a:f7:d8:e5:80:41:41:e7:14:8b:fe:ee:c2:48:29:e7:06:d3:
         3f:fd:0c:be:ba:9c:52:95:ac:bc:dc:c8:b7:20:c5:91:48:42:
         06:9c:78:13:c4:1d:7c:87:43:5a:39:0c:57:29:20:25:b2:ff:
         fe:d9:b7:a2:71:fb:4c:93:09:a4:fd:fb:c8:31:d3:5e:9e:8a:
         85:49:39:87:e0:53:d4:56:d7:bf:d6:d7:44:73:0b:2a:ca:d2:
         62:74:00:0f:8b:c8:78:3e:14:ec:f2:8e:81:ff:a6:89:22:51:
         84:7a:14:92:96:b1:41:7c:12:93:08:15:1b:24:e8:19:1d:e1:
         28:08:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org