Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e3131322e302f32302d3230203d3e203237383933.roa
File:                     3139302e3137302e3131322e302f32302d3230203d3e203237383933.roa (raw, json)
Hash identifier:          9qsv0K0FDoJoIIYmdqmRa0b2eHnIfadWNWPQrjgvXew=
Subject key identifier:   6B:94:89:37:EC:27:87:C6:7B:07:01:D5:98:3B:D8:9A:8C:3F:1E:71
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       1B350D150F655D0D19F03F6E443BDF3E3456F33E
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e3131322e302f32302d3230203d3e203237383933.roa
Signing time:             Tue 05 Mar 2024 17:49:28 +0000
ROA not before:           Tue 05 Mar 2024 17:44:28 +0000
ROA not after:            Tue 04 Mar 2025 17:49:28 +0000
asID:                     27893
IP address blocks:        190.170.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:35:0d:15:0f:65:5d:0d:19:f0:3f:6e:44:3b:df:3e:34:56:f3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Mar  5 17:44:28 2024 GMT
            Not After : Mar  4 17:49:28 2025 GMT
        Subject: CN=6B948937EC2787C67B0701D5983BD89A8C3F1E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:92:89:b0:6c:1d:0c:f6:2f:49:bd:51:3b:
                    1f:20:63:41:8c:de:b9:ab:be:2b:5a:be:0c:04:f6:
                    26:f2:0e:db:7b:88:41:7f:b4:08:42:b4:3c:b9:1c:
                    69:0e:06:76:70:21:7c:09:1d:81:93:89:28:2b:36:
                    15:f0:a5:c0:1f:3a:cb:0e:59:b4:45:91:06:e1:00:
                    1d:ad:86:3f:2c:88:ad:81:9f:a1:db:89:cd:e1:07:
                    2c:f7:57:34:49:a6:2f:b6:9e:47:9a:38:1c:c2:0c:
                    64:65:31:50:c2:2d:9d:3a:13:13:9c:67:79:e6:e0:
                    2c:b5:07:96:70:bd:73:fe:39:75:87:ab:a3:44:ee:
                    03:69:cf:8c:0b:86:f7:6b:f4:1b:85:58:00:6d:f1:
                    bb:5c:55:4d:9c:e3:0c:e6:ce:10:f3:1d:a3:02:21:
                    a9:8b:54:de:8c:ea:f5:4d:92:23:02:e2:2f:d9:ca:
                    88:95:7c:6a:a4:d0:59:ec:2e:55:46:aa:b7:9b:26:
                    35:7d:70:5c:b0:34:54:52:ae:91:46:d5:3d:3f:23:
                    cc:aa:c3:2d:8c:6d:29:ec:a1:08:e8:ad:65:ec:27:
                    94:d5:dd:90:7b:f8:fe:31:4e:12:5c:69:b7:df:6e:
                    8e:f2:35:44:94:3d:5f:7b:56:28:d6:3d:03:b6:86:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:94:89:37:EC:27:87:C6:7B:07:01:D5:98:3B:D8:9A:8C:3F:1E:71
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e3131322e302f32302d3230203d3e203237383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:60:6f:f3:de:e3:50:da:be:2f:d3:7e:85:fe:08:5b:5a:bd:
         7b:10:f4:47:23:36:3b:04:e2:09:a2:81:7c:e1:2f:06:7f:c3:
         ef:3f:d4:74:a0:46:2c:58:de:da:5a:3d:3e:b2:22:36:fb:08:
         06:f2:f7:57:7b:82:71:2a:f7:f3:5a:ae:5c:c7:1c:dc:7f:5b:
         57:e2:9f:4a:f3:1a:21:5b:cc:f1:5e:ca:53:3b:b4:39:ec:58:
         a2:53:83:cb:af:4f:b3:eb:fb:3f:31:e2:97:b0:60:8e:fd:3d:
         8c:c0:29:24:9b:67:04:9d:d3:f7:c1:53:c6:03:b1:67:73:73:
         9c:3f:8b:64:a7:f1:da:ad:d6:75:42:24:ef:33:23:06:7d:c3:
         6a:ea:85:0f:ab:ca:f3:ba:9f:6a:cc:67:f5:0a:f5:4c:f8:ee:
         10:d5:39:50:ed:9f:91:0a:88:4c:3b:f4:96:d0:cd:5c:88:bc:
         77:e3:e6:a3:34:ac:04:f4:4b:f5:c1:df:ee:37:a9:fb:2d:93:
         7e:3a:ec:39:97:23:23:b7:a3:15:8b:2a:d7:0b:90:ad:9a:46:
         12:25:e2:6a:26:a3:15:c9:ef:53:01:b9:e7:3c:82:53:66:ba:
         cb:db:7c:39:fb:e9:2f:7a:f6:d8:3a:64:61:1e:5c:21:4c:e8:
         34:72:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:55 2024 by rpki-client on console-ams.rpki-client.org