Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3139302e3130372e3134342e302f32302d3234203d3e203134373534.roa
File:                     3139302e3130372e3134342e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          BrMSFyw4W8qj4TlGJB68DmLTDERZzm3MIFI2v+3y9VI=
Subject key identifier:   4C:BE:70:60:A8:5C:33:6E:BA:9A:5C:A2:99:71:28:E2:EE:06:04:C3
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       338AE0F5C960909A1CFA0B877FF19C0654633581
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3139302e3130372e3134342e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:05:57 +0000
ROA not before:           Tue 05 Mar 2024 18:00:57 +0000
ROA not after:            Tue 04 Mar 2025 18:05:57 +0000
asID:                     14754
IP address blocks:        190.107.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8a:e0:f5:c9:60:90:9a:1c:fa:0b:87:7f:f1:9c:06:54:63:35:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Mar  5 18:00:57 2024 GMT
            Not After : Mar  4 18:05:57 2025 GMT
        Subject: CN=4CBE7060A85C336EBA9A5CA2997128E2EE0604C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:a7:73:f3:28:ec:88:dd:58:7e:1f:4e:76:
                    5e:29:da:45:55:39:6f:ac:bc:4a:d3:82:5e:9e:7e:
                    63:e8:e3:e8:34:4a:d8:d7:0f:b0:de:36:4a:bd:32:
                    f9:1d:69:cd:03:93:67:5a:48:f3:a8:7b:e5:4f:96:
                    1c:06:1c:ef:e9:f2:76:4b:6d:38:2a:29:32:d1:d1:
                    03:fb:a2:11:ac:a1:74:51:41:78:74:ad:ca:21:7f:
                    c0:1b:ab:69:a2:54:36:c6:a8:af:07:e5:b3:ad:7c:
                    22:c9:74:ce:1f:1c:bc:18:f1:a8:12:3b:33:0e:8a:
                    2d:8d:c9:36:d2:23:78:e4:1c:ae:68:41:6e:85:28:
                    4e:51:46:32:c9:9d:75:84:c2:d2:96:f2:c2:5c:6a:
                    3c:23:6a:7b:60:31:f2:58:1d:95:f5:72:d9:22:c7:
                    5f:ef:28:14:de:7b:10:e6:cb:6f:de:e9:a8:23:9a:
                    4d:47:8e:58:22:df:de:67:3f:46:94:9f:5a:cc:17:
                    65:2f:ed:a8:43:17:c6:77:5b:33:1a:f7:79:7e:08:
                    33:d4:4f:c7:31:8b:89:b4:5b:83:cc:09:15:4c:08:
                    ab:11:7e:19:45:3b:a7:1d:43:95:7e:ec:ac:f0:3b:
                    ac:c2:17:22:82:0c:4c:9e:ca:d3:77:52:c7:fa:28:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BE:70:60:A8:5C:33:6E:BA:9A:5C:A2:99:71:28:E2:EE:06:04:C3
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3139302e3130372e3134342e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:a8:69:02:d2:0e:9e:2e:8f:06:d8:2b:3a:5d:9f:0d:f1:
         ad:94:c0:e1:cf:58:4b:06:91:41:66:1d:39:e3:f6:0f:ef:31:
         13:f2:de:20:a2:e2:5a:d0:4f:e8:f7:6a:4f:34:91:a6:53:b4:
         7d:93:cc:7c:8f:7e:ca:04:52:02:63:6d:56:9e:dd:e8:c2:6b:
         27:a9:95:f0:88:87:d1:54:8d:a7:2c:26:9e:9b:3d:54:a0:f8:
         b5:d1:7e:c1:53:bc:15:8b:f5:3d:ea:7d:b3:76:f1:d5:cb:90:
         21:0f:62:07:4a:cd:5b:8e:1c:57:e0:98:4e:f4:6a:54:b9:a9:
         8c:e5:c8:77:14:e0:eb:d3:d9:ea:02:5b:17:25:dd:fa:85:18:
         3f:b3:43:33:ac:fd:3f:14:e3:ba:be:2d:7d:b8:21:e2:0a:3e:
         9c:6a:ee:52:f1:fe:55:97:4a:6b:ce:f8:90:5c:c2:c1:64:ba:
         f1:9f:57:bd:5e:6d:98:ae:4b:f0:cf:ec:c3:ce:25:1e:4b:96:
         3d:45:ac:91:c8:5c:fd:75:e1:4d:9a:15:2b:b4:14:63:25:2f:
         68:38:57:ab:12:2c:f1:d7:6d:d1:41:55:13:93:a5:67:3b:80:
         63:36:db:d1:3c:23:6f:2c:06:bf:4e:49:5d:f1:36:de:a1:d3:
         d9:86:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org