Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa
File:                     3139302e39342e3134342e302f32312d3234203d3e203237363638.roa (raw, json)
Hash identifier:          2L9Q1CwAFQEMrWLKboAj58mCqFamI4q+bXabyvPRV2s=
Subject key identifier:   0E:68:C6:B3:19:80:A5:0B:22:23:09:87:BE:93:54:B6:06:DE:BF:14
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       5B1F8DD2E1A7DE8690B0A17050AFBED769D05418
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:40 +0000
ROA not before:           Tue 05 Mar 2024 18:16:40 +0000
ROA not after:            Tue 04 Mar 2025 18:21:40 +0000
asID:                     27668
IP address blocks:        190.94.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1f:8d:d2:e1:a7:de:86:90:b0:a1:70:50:af:be:d7:69:d0:54:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:40 2024 GMT
            Not After : Mar  4 18:21:40 2025 GMT
        Subject: CN=0E68C6B31980A50B22230987BE9354B606DEBF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:15:e3:a5:ec:e9:65:27:98:9d:9d:22:f4:
                    66:4b:c1:3f:f5:fa:76:f2:8d:11:89:0e:13:e8:87:
                    a8:3b:56:12:31:fd:6e:08:18:1b:c8:34:72:bc:df:
                    5e:25:a8:82:61:92:b0:75:01:86:06:2e:4e:6d:c2:
                    9e:92:24:99:6a:eb:ec:2c:b6:b6:14:1c:2a:52:c3:
                    e2:26:b3:93:1f:1e:d3:a9:69:7b:69:7b:b8:76:00:
                    cb:83:84:29:1e:2f:c7:67:78:ba:a8:2f:54:5f:dc:
                    9c:a6:8a:be:97:40:26:9b:da:a0:b1:c6:53:46:78:
                    35:76:a1:cf:33:9d:10:33:4a:19:f1:d8:ae:f9:f1:
                    b3:6d:e0:e0:48:0f:c2:54:e0:30:f9:a0:31:e7:9d:
                    cd:d2:3b:cd:31:7f:f7:6a:65:46:55:e7:be:b3:9c:
                    08:e6:00:39:15:c8:a4:01:23:41:b2:f8:b4:39:6f:
                    b5:e1:62:a9:7e:1b:41:4e:c2:ee:16:60:1f:50:4b:
                    d5:20:ae:75:eb:b5:10:36:3c:63:73:fe:5e:d3:f3:
                    5c:e0:ae:f0:82:d7:d2:28:87:60:0d:72:84:a3:25:
                    df:16:a9:81:0a:c9:6f:cb:fa:14:01:d6:ed:c8:4c:
                    e2:7e:12:af:8d:5a:0b:2c:9f:9f:8e:f3:45:5e:e2:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:C6:B3:19:80:A5:0B:22:23:09:87:BE:93:54:B6:06:DE:BF:14
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:12:e4:e1:91:8c:eb:c8:30:6f:44:2f:6d:bd:25:11:e2:64:
         0a:a6:ea:b0:c8:86:58:d9:4d:3c:09:3f:28:92:9a:97:f7:97:
         52:fa:38:55:fb:61:6a:0f:d8:1f:d5:88:d8:f8:4f:66:0b:cf:
         66:80:7e:ae:cb:82:f8:48:ff:51:66:eb:5b:16:8c:19:77:c7:
         6e:6f:57:49:64:e3:ab:10:1a:04:be:b4:a9:61:cd:42:e9:43:
         60:56:8f:0f:89:09:4d:bc:c9:84:53:2d:95:47:0d:40:63:ca:
         6b:bc:d2:51:5f:6e:98:8d:db:b9:9a:0a:80:2f:e4:f8:e3:57:
         51:7d:37:d1:d2:85:79:81:55:0f:ed:d8:12:90:99:cf:81:b7:
         10:4d:99:f4:f1:6b:b3:53:28:de:cf:45:50:ed:ae:2b:0a:14:
         ab:fd:18:a6:73:9a:2e:82:0b:d1:b6:65:f0:74:97:71:13:88:
         f0:65:7c:91:af:94:e8:8f:a7:b9:94:a1:eb:ac:93:65:48:08:
         eb:17:14:57:cb:7a:40:96:d1:d4:32:6a:6c:1d:23:8d:c4:43:
         24:66:64:bd:f4:09:62:09:8e:76:a2:63:ca:11:e6:70:4a:05:
         b4:9e:97:84:7a:ee:e6:52:22:0b:ac:25:e1:38:4c:d0:e8:67:
         8a:79:b7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org