Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3139302e3130352e3132382e302f32302d3234203d3e203134373534.roa
File:                     3139302e3130352e3132382e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          Y4VfdRNx2yN6yJQmHv49msdq1a9c5knjIAM1sZ49VtM=
Subject key identifier:   9A:08:74:04:E6:CF:AE:FD:CB:02:84:6D:17:93:7F:99:42:6A:49:70
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       0CE33140C09FB0ADA8CA14167796DC9CC20188D2
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3139302e3130352e3132382e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:05:57 +0000
ROA not before:           Tue 05 Mar 2024 18:00:57 +0000
ROA not after:            Tue 04 Mar 2025 18:05:57 +0000
asID:                     14754
IP address blocks:        190.105.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e3:31:40:c0:9f:b0:ad:a8:ca:14:16:77:96:dc:9c:c2:01:88:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Mar  5 18:00:57 2024 GMT
            Not After : Mar  4 18:05:57 2025 GMT
        Subject: CN=9A087404E6CFAEFDCB02846D17937F99426A4970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:82:8e:07:02:dd:05:bd:b4:8d:91:b4:c1:
                    e7:4e:96:e3:b0:a8:c9:93:f3:94:b9:10:52:63:44:
                    75:38:00:89:a3:f5:3e:fe:26:fb:9b:df:c4:dc:4b:
                    72:89:6e:06:5f:6d:9c:14:6d:67:3e:f6:b6:98:57:
                    e5:54:d3:fa:23:46:61:e7:27:46:04:5a:61:9a:a1:
                    15:98:0a:d4:06:b0:60:74:11:73:44:77:64:cf:96:
                    1a:13:8c:12:48:1e:74:be:f7:31:24:4b:25:f1:b3:
                    9a:87:1f:da:0a:e0:0e:b1:9b:c0:c0:c4:4c:58:fc:
                    ac:cf:fc:46:6d:e9:e8:a5:a1:9e:36:33:04:29:3e:
                    a3:11:06:65:d4:51:49:15:f7:db:db:9c:81:eb:39:
                    54:a7:62:09:ba:6b:b4:b5:cf:16:3a:eb:39:20:60:
                    f7:54:b1:ca:c7:c7:4a:4b:1e:4f:42:62:eb:09:1d:
                    02:2c:81:9b:f8:dd:34:ab:f9:1c:ca:5f:38:30:ac:
                    79:94:3c:d5:b5:24:24:1d:f7:13:3e:7e:2b:5d:6c:
                    47:80:5d:bc:5f:ac:09:2f:96:05:c1:e9:fb:9f:06:
                    56:d1:50:6d:e2:ca:77:e4:36:bf:b5:1e:bc:77:08:
                    7f:a2:ed:67:33:3b:5c:73:99:00:ce:66:d5:4c:ec:
                    ec:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:08:74:04:E6:CF:AE:FD:CB:02:84:6D:17:93:7F:99:42:6A:49:70
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3139302e3130352e3132382e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:2c:5b:18:e8:65:20:c0:42:df:7c:f6:34:90:85:83:b0:
         ce:06:2b:29:01:eb:77:bc:a0:bf:e0:4f:75:78:99:cb:ee:93:
         6b:68:e6:b9:68:ad:8e:bd:7d:8e:a0:f2:53:ae:7c:92:79:15:
         b3:76:f9:31:38:92:39:e9:c1:41:b9:fd:20:67:34:9f:5a:74:
         df:f3:dc:95:15:33:90:62:23:1f:5a:df:77:5a:3b:3d:8d:4f:
         78:e9:94:d3:b9:81:35:86:9a:b6:d4:27:14:9a:db:5c:a4:11:
         82:a2:25:9c:8a:ca:ad:a6:0b:bc:61:70:a2:a0:6f:5f:6f:77:
         b1:73:45:14:b9:af:50:a2:93:eb:fb:bd:b9:e1:90:2c:d1:e7:
         5d:c9:ce:f3:b8:c3:be:b1:3e:89:d5:da:35:ad:a8:06:e9:20:
         07:39:ec:cb:f3:fc:ab:c0:27:ca:bc:6d:27:f0:cd:ed:c4:ed:
         0e:0d:0f:0d:f7:06:50:c4:5d:67:48:c3:d9:6e:96:93:09:1c:
         ed:cf:2a:4b:46:52:ab:20:22:eb:2f:36:8f:49:af:e5:e1:50:
         3c:cd:cf:44:fb:7b:b2:87:cd:fb:b9:64:e7:15:a6:57:c6:8b:
         c7:92:f3:91:19:ac:70:10:69:84:cd:2a:1f:cc:99:15:3a:3c:
         77:63:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org