Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa
File:                     3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa (raw, json)
Hash identifier:          mgT2wxv6zjyMcpZVISr2t6EQpFtScg0u6rdxIMZ4Qdk=
Subject key identifier:   5A:47:7B:10:AD:F1:D0:C0:0A:2D:44:D9:27:D7:18:73:E6:AC:DC:C2
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       4DA89C798E172DDAD90AEA9A04F8967C776E863A
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa
Signing time:             Thu 07 Nov 2024 19:45:01 +0000
ROA not before:           Thu 07 Nov 2024 19:40:01 +0000
ROA not after:            Thu 06 Nov 2025 19:45:01 +0000
asID:                     264688
IP address blocks:        190.196.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a8:9c:79:8e:17:2d:da:d9:0a:ea:9a:04:f8:96:7c:77:6e:86:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Nov  7 19:40:01 2024 GMT
            Not After : Nov  6 19:45:01 2025 GMT
        Subject: CN=5A477B10ADF1D0C00A2D44D927D71873E6ACDCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:39:c7:72:41:ca:fc:7a:1c:74:71:49:c8:
                    9f:98:9a:a7:d5:2b:88:01:5b:42:d6:e1:e8:6e:88:
                    4c:01:6e:a5:97:fb:c0:58:a7:0f:87:ba:1a:9a:fe:
                    cc:46:a4:33:f3:f6:b7:80:31:47:50:56:2e:b6:24:
                    c0:a9:98:f4:90:3d:39:89:63:20:2d:03:9d:dd:9d:
                    f7:ad:fd:4d:7f:2b:33:1b:b5:13:76:43:57:99:8a:
                    75:15:28:de:9b:50:9c:09:82:85:18:4d:0a:13:73:
                    73:19:06:1f:40:e8:b1:5e:30:d7:88:ba:2d:e8:31:
                    48:72:88:79:a2:bb:6c:b7:08:2e:3f:f8:61:65:1c:
                    fb:f0:89:22:99:f5:1a:ec:43:c4:51:1a:b5:5c:d4:
                    2c:a4:4e:75:cb:e6:42:71:ae:a9:28:d7:49:be:dc:
                    ce:26:bc:f8:11:09:e7:f6:53:16:7e:ca:02:f5:60:
                    ff:ee:f6:eb:51:46:10:f7:2a:93:d9:b2:fa:b3:c4:
                    d6:a3:05:10:88:87:a8:94:a3:2e:65:8c:aa:de:b6:
                    de:2f:91:a3:ef:b0:b7:25:e4:ce:3c:70:f9:1c:2e:
                    fe:70:a5:7a:dd:40:e6:95:77:85:60:04:48:cd:b3:
                    9a:91:bb:c9:1b:9f:5c:52:d3:2c:48:89:02:2f:64:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:7B:10:AD:F1:D0:C0:0A:2D:44:D9:27:D7:18:73:E6:AC:DC:C2
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:aa:a5:a9:63:70:d4:d2:f5:e5:fc:be:b0:82:ba:a4:9f:
         3b:60:fc:78:11:8c:5c:20:4d:ee:e2:ae:9e:d5:f6:a1:a7:78:
         23:1f:54:32:44:37:a1:eb:40:5a:ca:b4:8a:12:c5:c6:df:81:
         ed:34:9c:c7:04:b2:7b:42:b4:51:23:c3:ee:b1:16:36:fa:18:
         3d:be:e7:82:23:72:0b:93:5f:04:83:8c:99:48:01:9f:c7:64:
         c9:72:a1:1b:42:5e:48:bf:1d:50:83:9e:54:5a:f6:8b:df:36:
         0b:a8:af:d9:8a:5c:8f:73:0e:c4:00:6d:dd:06:d6:11:7c:46:
         00:8b:c8:95:42:85:36:13:1e:1f:86:60:21:98:4a:39:2e:82:
         88:0b:81:d7:47:35:5f:ae:1f:c6:e6:49:fe:4a:2f:52:df:d1:
         f9:7e:fe:98:80:63:b8:c6:6d:a5:79:94:60:7c:97:e0:83:6e:
         c8:75:01:33:55:e3:52:82:41:52:ec:9a:64:75:a9:97:2a:2d:
         5e:41:6f:10:0f:8c:3d:ee:34:1d:e7:53:3f:1c:de:63:82:c9:
         9d:f7:0e:8c:cc:5c:ea:d2:65:ec:f8:e5:fe:0a:2b:d2:db:70:
         df:d4:10:4d:8f:da:38:10:e1:72:28:0d:f4:cf:31:87:f7:bf:
         fe:49:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org