Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa
File:                     3139302e39342e3132382e302f31392d3234203d3e203237363638.roa (raw, json)
Hash identifier:          0hJg/sLJ4e764QtiRQx8EYDNmkfxcB2GfrKXpC6uphA=
Subject key identifier:   A0:46:ED:DE:5D:E0:1F:A2:8E:30:5E:A8:4A:D2:B5:E1:8C:DC:54:AA
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       4C10E56389C5BEDED5A5E9617EDB5F3D6463FF42
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:41 +0000
ROA not before:           Tue 05 Mar 2024 18:16:41 +0000
ROA not after:            Tue 04 Mar 2025 18:21:41 +0000
asID:                     27668
IP address blocks:        190.94.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:10:e5:63:89:c5:be:de:d5:a5:e9:61:7e:db:5f:3d:64:63:ff:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:41 2024 GMT
            Not After : Mar  4 18:21:41 2025 GMT
        Subject: CN=A046EDDE5DE01FA28E305EA84AD2B5E18CDC54AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:d0:0f:5b:96:00:d6:23:cc:f9:9c:cc:59:
                    af:f7:1c:b3:ae:c2:85:b1:d0:fb:41:7f:c6:20:7b:
                    52:58:7f:c5:29:a9:0f:14:53:61:ee:32:0b:c8:99:
                    6d:06:0e:d3:77:d7:6d:9b:82:97:98:c1:0e:39:ba:
                    31:e4:d6:a0:45:4b:91:ea:ed:9b:f9:b1:46:d4:cb:
                    0b:17:9a:d6:57:43:9d:41:b8:c2:5b:b0:f4:27:c6:
                    26:13:a9:fb:b2:50:1a:58:8e:8b:1f:cb:ce:39:6d:
                    6b:a1:c2:b5:6b:fd:e9:4a:b1:f1:cc:15:04:f7:94:
                    77:fa:45:bd:76:2e:0e:2f:26:c6:70:55:fa:47:4c:
                    e9:5f:2c:fd:b4:56:65:f1:8c:9a:a3:8b:16:19:b8:
                    f3:43:dc:d0:32:1e:b7:ce:50:c8:73:a1:68:3b:4c:
                    75:36:1f:88:21:3d:3e:58:c0:3f:9e:e0:29:f5:32:
                    da:5e:4b:f8:2f:d5:4f:51:d3:83:95:1d:e2:57:f4:
                    ab:f6:12:3a:de:60:74:04:af:34:08:86:84:91:8c:
                    c9:de:f7:1c:b2:0c:e9:11:db:4e:2d:cd:ba:54:ce:
                    df:61:9b:9b:4f:71:b9:1b:6c:8f:a7:ea:90:28:3a:
                    e9:e4:5c:33:db:ae:3f:d3:df:84:4e:6f:1c:56:e9:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:46:ED:DE:5D:E0:1F:A2:8E:30:5E:A8:4A:D2:B5:E1:8C:DC:54:AA
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:93:96:64:72:22:33:66:64:5f:b7:41:4e:38:ba:e5:c7:
         fc:df:e6:5d:68:cc:46:56:f2:17:9f:9b:25:d5:28:b5:dc:6f:
         25:a8:63:92:95:23:d2:ad:71:39:ba:ce:4b:c3:35:4a:61:86:
         c5:49:f0:a0:ec:95:33:36:cc:0a:14:76:16:0f:3d:42:0f:33:
         d3:92:61:8a:d7:b5:71:5f:d7:6f:8f:73:ec:c2:ed:69:6c:d3:
         54:95:24:c6:4b:15:4b:45:72:77:08:12:c5:9f:e8:1b:59:20:
         b3:af:f7:0e:5b:e7:c6:36:ab:56:d7:e7:bc:47:2a:64:3f:94:
         38:e8:76:a2:4c:c7:bb:87:f2:8a:35:96:29:67:16:20:27:d9:
         bb:6d:8c:ee:a6:0f:e0:4d:e2:00:7a:89:25:24:b8:be:48:4a:
         6d:3c:18:1c:3e:39:f9:be:d0:be:fa:a3:60:28:f8:54:11:33:
         85:c0:bc:b5:3b:ad:d6:c3:3c:e9:3c:89:ac:6b:d4:74:8b:77:
         ef:ca:22:90:e9:3e:07:4b:1c:f7:1a:38:54:cf:b0:3e:e3:21:
         a7:a7:cb:97:31:9c:f2:12:96:d0:d3:e8:2a:b7:63:86:0d:b9:
         e4:2c:8d:a3:c4:58:4f:34:89:de:a9:81:3d:d4:0a:61:5a:a7:
         94:5f:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org