Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e31322e36342e302f32302d3234203d3e203237383433.roa
File:                     3139302e31322e36342e302f32302d3234203d3e203237383433.roa (raw, json)
Hash identifier:          yGQ7ohp/Z7wlr1jJ1PD1P2423cQQsszkgAXhURkRiQI=
Subject key identifier:   DC:40:78:2F:6E:B4:DC:F6:C8:3D:89:DA:48:37:37:F3:5D:1A:3D:F1
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       15296ACC6326454D91BFB16F099DE3F49DBD5BBE
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e31322e36342e302f32302d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     27843
IP address blocks:        190.12.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:29:6a:cc:63:26:45:4d:91:bf:b1:6f:09:9d:e3:f4:9d:bd:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=DC40782F6EB4DCF6C83D89DA483737F35D1A3DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:e9:ba:76:23:a9:e6:6d:dd:38:4d:e0:af:
                    fb:72:b7:3f:63:b2:00:56:c1:8a:1d:b7:7b:51:ec:
                    2a:ec:bf:b7:6a:01:fc:76:7e:ed:cf:78:c5:13:8d:
                    b0:df:84:f4:ac:8d:1b:9a:55:a9:09:7f:1a:65:36:
                    b0:f2:85:dd:93:d4:d9:e7:d2:84:e4:b1:be:70:fa:
                    bc:63:31:ac:b6:a5:f8:d0:7f:1d:ed:d8:0a:50:8d:
                    98:7a:1a:5e:89:1b:ac:a8:74:6a:b0:52:96:30:60:
                    3c:39:2b:ee:e8:03:52:05:fb:2a:4d:e6:15:63:54:
                    1f:1c:40:a4:3e:4d:96:f8:54:3c:4f:36:d3:7b:ce:
                    9a:41:49:88:17:5c:3c:b1:0f:eb:00:e8:bb:a6:8f:
                    8c:5d:b2:b4:ad:f3:cd:91:b4:cf:ab:1b:e6:b5:d5:
                    3c:e5:af:5e:6d:ef:89:03:a1:3c:20:9f:f9:94:7a:
                    36:90:b8:04:34:a5:ec:99:4b:73:af:39:31:10:8f:
                    b2:50:a7:11:d1:85:a6:2e:77:48:6a:fe:67:3d:46:
                    b2:29:10:1d:72:ad:f6:8c:6b:e2:db:85:87:a5:63:
                    eb:32:05:b3:b4:fb:ed:2b:f2:94:86:f7:0b:ec:ed:
                    66:9d:14:25:c7:97:5f:af:8c:0c:3e:3a:c6:e0:ff:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:78:2F:6E:B4:DC:F6:C8:3D:89:DA:48:37:37:F3:5D:1A:3D:F1
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e31322e36342e302f32302d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:bb:c0:c1:cb:28:08:04:17:20:2b:c5:f3:c9:24:41:32:
         5f:57:90:1e:0f:cb:66:9e:20:ee:79:45:42:2f:e6:a2:b6:21:
         00:27:7d:31:78:2a:c6:1a:32:e9:03:d8:c2:ef:2e:1d:d7:24:
         e3:2c:02:91:c7:39:00:13:af:70:6e:9c:3e:db:7b:a1:57:af:
         09:7a:d4:49:2f:53:1a:99:db:42:64:8f:5d:d8:8f:3e:84:4f:
         a5:6d:b6:13:0d:12:72:5b:2a:7b:87:c2:62:f1:a1:40:ea:b4:
         92:3c:aa:16:4c:44:cd:be:a4:8d:eb:31:50:f4:98:70:80:f0:
         47:9a:50:ac:32:5b:65:38:44:e2:4c:27:57:b9:c6:31:3c:a4:
         bb:1e:ef:1e:8f:1c:fc:50:40:c9:cc:7c:56:05:33:13:c4:29:
         bb:15:39:e6:f5:5b:be:66:3b:2c:77:54:c1:36:1a:01:6f:2e:
         ba:fd:f1:40:07:e6:cb:f5:6e:91:e1:8f:72:b1:85:e8:fc:e1:
         94:00:21:19:5c:aa:1c:e9:e1:eb:6b:21:3b:70:0d:d6:dd:12:
         7a:b8:8e:e8:83:b3:0d:58:4f:47:cf:b2:a8:52:7b:bf:0d:8a:
         f3:8d:21:40:06:62:a7:84:15:5b:a5:de:2d:6c:91:7e:76:60:
         e2:32:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org