Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38302e302f32302d3234203d3e203237393838.roa
File:                     3139302e3132322e38302e302f32302d3234203d3e203237393838.roa (raw, json)
Hash identifier:          Z6mLbd8JLRE7k9YH4cFVGZIHxBX0Fw0tDk1G0DyoaS0=
Subject key identifier:   89:6F:8A:A0:95:9A:57:D3:8F:58:B6:A8:80:D0:C2:82:3F:70:F3:D6
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       18C94235804F8D0F4293A804560865DE35A2B68C
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38302e302f32302d3234203d3e203237393838.roa
Signing time:             Tue 05 Mar 2024 18:09:07 +0000
ROA not before:           Tue 05 Mar 2024 18:04:07 +0000
ROA not after:            Tue 04 Mar 2025 18:09:07 +0000
asID:                     27988
IP address blocks:        190.122.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c9:42:35:80:4f:8d:0f:42:93:a8:04:56:08:65:de:35:a2:b6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Mar  5 18:04:07 2024 GMT
            Not After : Mar  4 18:09:07 2025 GMT
        Subject: CN=896F8AA0959A57D38F58B6A880D0C2823F70F3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:6d:e9:19:0e:2d:fc:7f:1f:99:dc:c4:50:
                    57:a9:2a:5b:90:b9:5f:79:5a:bc:e7:4a:74:a2:95:
                    26:fd:d5:cd:21:37:9e:39:2f:24:0b:fa:94:3a:ac:
                    72:66:95:3e:af:32:50:46:a0:85:0c:e2:17:98:ca:
                    b3:09:d5:88:7b:27:43:97:8e:be:0d:f7:5b:03:bd:
                    fa:a4:56:b9:7d:f2:8c:ec:6f:6e:81:83:0d:25:2d:
                    95:92:b1:c7:42:4b:a7:6d:4d:85:9a:a0:17:06:e7:
                    d3:c6:48:0d:35:43:82:94:3c:a1:67:d2:a0:b4:44:
                    80:75:62:1c:8c:18:41:86:95:e7:1f:59:37:53:73:
                    5c:af:12:93:04:60:3b:b4:ea:db:74:9f:51:53:eb:
                    0a:18:ac:e0:b4:c6:96:62:2c:e2:6e:40:2e:52:d8:
                    b7:40:cc:c7:7c:90:86:6b:12:79:ab:1e:77:0c:ad:
                    b9:38:7e:b0:21:71:8b:2d:8b:62:dd:54:16:a2:f9:
                    9a:b7:ca:18:eb:b7:d8:1b:36:35:e7:57:4a:d1:56:
                    9b:0d:c4:be:56:ed:57:e8:da:9e:c2:05:a4:ee:84:
                    f4:24:4f:a4:26:c9:f8:1a:bd:97:e3:1f:c5:7f:1c:
                    ee:59:8c:cf:90:b9:8a:0d:aa:3b:58:47:2a:0c:90:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6F:8A:A0:95:9A:57:D3:8F:58:B6:A8:80:D0:C2:82:3F:70:F3:D6
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38302e302f32302d3234203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:d6:22:07:75:25:e1:b2:bc:85:c8:d3:48:c1:24:41:ea:
         d0:a0:eb:8b:ed:d4:bd:cf:3e:c1:16:87:ad:54:19:f7:35:cf:
         99:92:0f:a5:a1:e0:76:d2:7f:10:b4:97:32:a7:a9:d5:6f:08:
         66:8c:77:f0:22:f1:14:34:da:f4:30:a2:cb:07:bf:74:60:ec:
         c6:cd:a5:02:09:89:ea:dd:8d:5b:a9:1f:e5:27:6a:0d:f0:2b:
         01:ef:1f:57:37:3f:ba:c6:22:7b:2c:f3:b9:69:9e:61:9f:63:
         9c:25:95:bd:9b:9e:a1:b6:82:cd:df:de:6a:48:b8:cf:9b:9b:
         4d:7b:53:16:43:28:5f:5d:09:60:b7:ca:d8:bd:28:0c:2e:2c:
         07:69:b9:4a:60:a6:0b:c1:c8:4e:b8:27:51:08:25:dd:70:47:
         e9:56:17:26:c0:9f:ea:7a:8a:be:0d:c6:50:ff:64:79:68:3a:
         08:c0:2e:f9:d7:84:e8:27:85:0d:37:64:6e:7e:22:43:8d:76:
         04:c5:fa:9c:33:ef:91:af:29:25:ce:d3:11:6e:8f:91:03:55:
         e4:96:5e:0a:34:9b:c0:ae:34:b3:95:0d:05:de:9c:46:e0:9f:
         dd:cb:0b:f9:e1:8e:c4:f2:8c:b8:44:8b:4a:44:f0:f9:02:ba:
         21:05:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org