Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa
File:                     3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa (raw, json)
Hash identifier:          k4tzUaiz38ve5vHU9JBjWAgMMAAIj0Kl5hyi1NWNjJw=
Subject key identifier:   FF:95:16:C2:39:C3:47:04:00:3E:8B:3C:9A:F3:C0:8B:71:20:B9:B3
Certificate issuer:       /CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
Certificate serial:       341939BD67ED79FF08F217FFB6B05B464DB20056
Authority key identifier: F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     28068
IP address blocks:        190.122.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:19:39:bd:67:ed:79:ff:08:f2:17:ff:b6:b0:5b:46:4d:b2:00:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=FF9516C239C34704003E8B3C9AF3C08B7120B9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:ae:a0:11:a2:b4:1d:e9:6f:5a:ab:89:84:
                    8a:f7:4b:c6:9d:28:8f:a1:e0:9b:b9:bf:e3:77:93:
                    24:14:8b:aa:35:e7:6d:44:be:23:10:55:df:e6:43:
                    82:89:4a:19:58:48:bf:98:38:ef:97:59:ca:b1:d3:
                    44:f7:a2:e8:74:51:ee:4c:af:72:ff:ae:9f:8f:c1:
                    60:67:36:5e:23:07:e6:f4:26:0f:d7:73:dc:79:e7:
                    1d:21:77:b8:34:cc:b0:7d:65:7f:63:3a:78:0e:85:
                    b3:88:97:76:f5:7a:cb:c5:57:f5:1e:2d:c9:b3:57:
                    b6:c2:5c:2d:79:07:87:6d:41:37:3b:01:ce:e8:e7:
                    59:b4:a7:04:b1:6f:9a:e1:ec:83:e9:94:17:08:8a:
                    89:76:0d:20:78:4c:b1:1f:f7:1a:1e:81:4f:a2:47:
                    63:03:60:cc:4e:0b:14:c4:9c:e1:e4:2e:89:fd:c5:
                    60:d5:67:3d:b2:87:1b:70:20:fc:bb:e4:fc:02:a7:
                    f2:84:ea:6a:33:a6:1d:f8:b5:69:15:f5:ac:79:c1:
                    41:e2:5d:ac:70:03:3c:b3:34:e3:44:4f:8f:17:cb:
                    16:ee:90:a7:30:ba:a4:5c:bb:71:fa:9c:ba:47:45:
                    b0:ef:41:8f:50:4c:5b:77:fc:7c:6b:d5:b2:06:d7:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:16:C2:39:C3:47:04:00:3E:8B:3C:9A:F3:C0:8B:71:20:B9:B3
            X509v3 Authority Key Identifier:
                keyid:F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:8e:b3:13:13:df:ab:59:03:25:0c:b1:34:4f:62:17:ac:
         32:db:ed:0b:ef:58:64:0b:7a:a5:3e:1c:fb:2e:cc:fe:50:61:
         62:73:e6:c8:b9:cd:50:1a:14:d9:39:be:69:cc:5e:65:73:87:
         0a:2c:ac:9f:29:54:89:2a:ce:c8:d0:e0:fc:5a:b5:41:94:dd:
         f1:dd:62:4a:22:b6:4e:85:c4:43:3c:32:fb:f7:17:e0:de:c1:
         65:af:5e:72:c0:c2:a1:64:3b:07:77:8e:b9:69:d8:09:67:98:
         8d:5d:42:a4:ca:4d:98:59:e5:fa:d8:d9:c2:26:fa:1a:35:b5:
         26:43:81:5d:5e:4d:76:f7:f6:1f:04:8f:40:7b:06:41:bf:f7:
         89:52:c8:f4:38:3a:0f:dd:8f:c7:c1:ef:c4:72:d7:ea:52:e7:
         1a:ae:7a:33:a6:de:ac:1c:d3:6f:55:ef:5d:e1:5e:e4:ef:99:
         e6:69:90:ed:1c:a7:e9:86:16:f3:d9:8e:33:5f:57:af:7d:6c:
         e2:02:1e:3f:ef:a9:99:ee:93:dd:01:2b:96:57:1a:3b:69:89:
         36:29:50:a6:94:5f:c5:71:73:fc:4a:8a:2d:75:6b:d2:9d:56:
         de:5a:4f:a6:f8:26:08:1e:58:e5:48:8f:f8:e7:eb:3b:96:a2:
         07:37:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:19:00 2024 by rpki-client on console-ams.rpki-client.org