Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/3139302e3130342e38382e302f32312d3231203d3e203631343736.roa
File:                     3139302e3130342e38382e302f32312d3231203d3e203631343736.roa (raw, json)
Hash identifier:          XZuTVTj9KXQ1Vp5JoXZvUFGbp/BtnCwWsP90+mRY5Gk=
Subject key identifier:   AF:7E:AC:68:8F:BA:A8:F9:83:A7:04:F6:04:9D:B5:E3:4B:F3:82:5C
Certificate issuer:       /CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6
Certificate serial:       4A35BC322771509EEF5ECFE470F104F3976CD0CC
Authority key identifier: CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/3139302e3130342e38382e302f32312d3231203d3e203631343736.roa
Signing time:             Tue 05 Mar 2024 18:17:00 +0000
ROA not before:           Tue 05 Mar 2024 18:12:00 +0000
ROA not after:            Tue 04 Mar 2025 18:17:00 +0000
asID:                     61476
IP address blocks:        190.104.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:35:bc:32:27:71:50:9e:ef:5e:cf:e4:70:f1:04:f3:97:6c:d0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6
        Validity
            Not Before: Mar  5 18:12:00 2024 GMT
            Not After : Mar  4 18:17:00 2025 GMT
        Subject: CN=AF7EAC688FBAA8F983A704F6049DB5E34BF3825C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:43:14:34:0e:9b:5f:42:23:48:56:df:d3:
                    dd:b1:25:8e:fd:10:26:8f:cd:2a:50:fc:9e:bc:a0:
                    c8:86:2e:67:6c:2a:08:03:ad:80:13:20:e9:8f:e4:
                    13:bb:70:37:3d:e2:4c:2c:80:6f:3b:d3:b1:15:c0:
                    7e:12:77:72:d8:b8:1b:e3:6e:56:5b:5a:24:b0:7e:
                    3b:6d:c0:d6:66:d6:48:2c:8c:8c:60:96:f0:61:fd:
                    0c:d2:ad:5d:61:8c:ad:7b:b6:bf:61:ac:fe:23:e8:
                    c0:c2:c3:62:c1:5f:ff:b0:45:92:cc:52:fb:d3:1d:
                    c7:c0:ac:9a:dd:4d:38:2a:a8:ed:85:35:8c:28:d0:
                    e0:a0:6f:1f:b3:79:7c:6b:b2:3c:55:e6:3d:68:f1:
                    87:3c:29:b8:49:af:dd:37:44:23:1d:e3:aa:fd:09:
                    e4:32:cd:f8:52:29:c1:14:ce:ce:77:1b:c3:e4:d4:
                    03:ad:52:cf:6a:87:16:d6:3c:7c:09:90:04:1f:5d:
                    66:21:78:55:70:98:08:f3:ff:34:62:5a:71:89:79:
                    d2:ff:9a:7c:13:12:ee:9f:9d:c6:03:6a:55:06:36:
                    68:5d:90:60:d9:26:06:24:5e:3d:10:1e:72:01:3b:
                    87:74:dc:aa:79:01:3b:ac:63:4e:f7:ee:63:8c:e4:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:AC:68:8F:BA:A8:F9:83:A7:04:F6:04:9D:B5:E3:4B:F3:82:5C
            X509v3 Authority Key Identifier:
                keyid:CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/3139302e3130342e38382e302f32312d3231203d3e203631343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:32:bb:5b:4d:cd:ff:fa:b0:ed:a5:b9:60:3e:34:07:a8:
         ab:f1:26:85:ef:7d:16:21:f3:44:92:b5:70:a7:ab:98:9f:99:
         5f:50:e3:b1:79:39:ed:d7:76:98:d9:ca:19:e3:14:73:f8:f2:
         84:56:0a:37:95:8a:89:f6:92:0f:50:91:83:60:3d:b6:5b:2a:
         cf:ad:dd:41:bb:a7:d0:35:6e:a7:df:1c:52:c6:61:ca:85:d9:
         54:e1:98:0b:a5:09:fb:18:dd:94:de:cc:45:af:aa:59:bf:67:
         02:63:65:67:dd:aa:48:a9:b6:09:86:32:4d:39:56:49:f6:9e:
         20:44:bd:00:1b:22:0c:bf:c7:e9:1e:a0:f5:de:97:cf:ed:b0:
         df:1a:e6:7a:77:b9:1f:58:81:05:86:09:f5:e1:c1:16:8c:2f:
         8b:3c:71:1a:9b:f1:6e:bc:cb:cf:35:28:5b:81:ff:b1:ad:8f:
         5f:ce:81:1f:7d:16:ba:f1:56:fa:2b:0e:a1:00:3d:8e:ba:43:
         fc:7b:7f:43:22:46:3b:51:83:95:64:a7:2e:00:92:1f:db:7a:
         d6:54:00:51:fe:9e:1f:dc:f0:85:2b:63:9f:20:0a:a3:83:f5:
         5e:4a:8b:fc:b8:8d:2a:84:f8:d8:b9:d1:41:ad:50:53:bc:3e:
         96:b9:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org