Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3234203d3e203237383933.roa
File:                     3139302e3137302e36342e302f31382d3234203d3e203237383933.roa (raw, json)
Hash identifier:          sdx6K7u/xiVcYpyMuPrmQeNq7pWHCjjBkS7EBUcWXYE=
Subject key identifier:   0B:C6:BB:77:7B:58:11:06:80:CD:6A:50:96:36:39:24:8C:C0:FE:2A
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       0F153CCDB5FD94F5DC4854C59C86ABF1715EFE48
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3234203d3e203237383933.roa
Signing time:             Fri 23 Aug 2024 22:35:00 +0000
ROA not before:           Fri 23 Aug 2024 22:30:00 +0000
ROA not after:            Fri 22 Aug 2025 22:35:00 +0000
asID:                     27893
IP address blocks:        190.170.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:15:3c:cd:b5:fd:94:f5:dc:48:54:c5:9c:86:ab:f1:71:5e:fe:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Aug 23 22:30:00 2024 GMT
            Not After : Aug 22 22:35:00 2025 GMT
        Subject: CN=0BC6BB777B58110680CD6A50963639248CC0FE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:8b:2a:f4:34:bd:03:e3:93:1a:a3:f8:f9:
                    50:19:22:99:fa:a8:83:1a:4c:c6:4e:c7:e3:c0:fd:
                    92:cf:1e:85:b3:a1:58:ea:27:cf:e4:1a:d5:0e:de:
                    61:74:60:dc:90:2b:2c:80:1e:bf:69:a1:e8:25:27:
                    d5:18:6f:97:aa:80:f1:db:8b:c8:bd:6d:dc:c4:fd:
                    65:c8:28:c3:05:32:5b:e6:03:e2:03:c5:85:8f:0e:
                    c9:88:2d:ab:07:90:f6:46:31:2b:51:ae:ab:f6:00:
                    87:65:c6:37:21:03:6d:1c:5e:39:ae:ff:1e:19:ec:
                    44:b0:0d:39:3a:14:a5:9b:a0:7f:85:31:1b:21:b0:
                    a9:38:99:f3:55:6f:e2:76:6a:11:73:ec:ae:5e:05:
                    3a:91:dc:3d:d2:49:c1:45:55:0d:27:f8:7b:74:7f:
                    cf:c8:ff:62:c8:26:a4:00:62:98:82:ff:2e:b6:0f:
                    4c:bd:5d:79:2c:62:1f:c8:65:0e:90:59:96:f3:0d:
                    9e:d3:2e:0f:ed:99:a5:c1:5e:87:6a:1a:aa:7f:06:
                    b5:74:ec:e2:06:3c:fb:10:ef:51:ec:02:a5:15:72:
                    ad:9d:e7:cb:85:a2:c2:08:13:b4:31:32:d9:02:32:
                    fd:f6:0b:f8:ce:13:73:b8:83:bd:ad:8f:c8:b7:99:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C6:BB:77:7B:58:11:06:80:CD:6A:50:96:36:39:24:8C:C0:FE:2A
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/3139302e3137302e36342e302f31382d3234203d3e203237383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:13:d1:a9:19:93:4b:7f:8d:2f:68:e6:e6:92:66:40:c4:
         b6:ed:96:29:c3:d2:64:d9:87:d9:63:ea:b6:04:ab:d0:64:f7:
         45:bd:99:b0:c2:cb:11:f9:f6:ad:53:77:37:34:d3:a1:6c:97:
         3f:03:f8:26:79:b6:9a:08:c9:45:4c:d9:9d:27:95:2e:e9:ac:
         55:61:b6:86:9b:50:a9:a6:a2:c5:29:4d:1f:b0:f1:61:60:91:
         df:bb:b4:c1:b6:a6:47:23:13:05:77:d2:83:9b:70:5d:3d:27:
         8b:e5:00:51:9c:97:30:d9:f5:1f:1e:cc:d2:50:60:06:d5:82:
         69:a1:80:bf:5e:de:ab:1b:6c:91:84:a8:0f:ca:db:a0:f3:ac:
         15:80:69:1f:a0:f8:41:43:26:a1:e9:44:41:f0:d8:a4:f5:16:
         9c:9c:94:73:2b:2a:c3:fd:c0:44:6f:0f:73:f2:ed:56:f2:bb:
         e8:8d:10:6c:d5:a3:3a:c2:47:37:84:b1:6b:c0:79:23:36:b1:
         03:29:c9:f9:09:35:2b:68:4b:b9:fc:01:b9:39:19:36:62:98:
         72:ad:50:26:45:27:72:45:6f:9f:c5:02:2b:a6:56:aa:76:27:
         a2:47:cf:5d:ea:10:63:ef:44:4b:27:9e:af:bc:c9:62:e4:d8:
         3a:c1:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org