Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/3139302e3130332e302e302f32302d3234203d3e203133333136.roa
File:                     3139302e3130332e302e302f32302d3234203d3e203133333136.roa (raw, json)
Hash identifier:          jNwooX99U3bu1xffl+Rn3WktSWz22Vtu1f8AsXcykCY=
Subject key identifier:   28:08:DC:CD:59:7C:B6:2C:B6:53:AB:F6:77:0E:01:3E:0E:05:82:D3
Certificate issuer:       /CN=AD10C8E46313770F3E82B1B8566F3987574A70EB
Certificate serial:       01F8A6A59BF88D870148F3A2D4181A3483A2F89C
Authority key identifier: AD:10:C8:E4:63:13:77:0F:3E:82:B1:B8:56:6F:39:87:57:4A:70:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/3139302e3130332e302e302f32302d3234203d3e203133333136.roa
Signing time:             Tue 05 Mar 2024 18:18:55 +0000
ROA not before:           Tue 05 Mar 2024 18:13:55 +0000
ROA not after:            Tue 04 Mar 2025 18:18:55 +0000
asID:                     13316
IP address blocks:        190.103.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f8:a6:a5:9b:f8:8d:87:01:48:f3:a2:d4:18:1a:34:83:a2:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD10C8E46313770F3E82B1B8566F3987574A70EB
        Validity
            Not Before: Mar  5 18:13:55 2024 GMT
            Not After : Mar  4 18:18:55 2025 GMT
        Subject: CN=2808DCCD597CB62CB653ABF6770E013E0E0582D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:23:80:77:b7:2b:37:10:f4:a4:5a:8d:e2:
                    55:74:41:9d:05:ff:b3:29:c4:91:cf:82:21:9d:3b:
                    46:0a:f2:1e:16:97:5d:66:9a:42:5f:91:83:d7:fe:
                    35:53:43:8c:48:62:93:0f:80:61:3f:a5:93:d0:49:
                    0b:7b:a4:f2:50:d1:41:77:ce:1e:9a:ec:3d:30:d7:
                    c2:29:59:c2:b1:70:a5:ab:80:33:f6:97:21:62:d3:
                    c5:5e:ab:ff:00:2c:ec:17:53:43:49:e3:4b:2b:f3:
                    d6:f3:de:2b:99:93:d3:e6:b8:1e:a9:1f:0d:af:c1:
                    63:f6:d6:5e:bb:36:97:83:96:e3:73:bc:fe:69:36:
                    13:c5:04:2e:03:27:41:8c:8d:4e:75:fc:75:2e:b4:
                    d6:f4:31:60:0c:93:73:bc:70:00:88:7a:bb:af:54:
                    3c:6c:9c:f9:77:02:ad:7b:2b:96:c5:97:70:87:2b:
                    dc:0d:27:84:82:cf:69:c9:86:58:9f:d9:51:61:fd:
                    b9:df:72:56:33:21:4c:61:6b:de:af:46:38:4d:c7:
                    28:4d:58:58:9e:f9:81:1e:07:c3:6c:74:bb:f5:66:
                    fd:ae:40:e4:eb:60:63:33:a2:35:6d:60:22:3d:2a:
                    4a:4c:ee:20:28:1d:f3:37:86:3f:62:27:f8:40:4e:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:DC:CD:59:7C:B6:2C:B6:53:AB:F6:77:0E:01:3E:0E:05:82:D3
            X509v3 Authority Key Identifier:
                keyid:AD:10:C8:E4:63:13:77:0F:3E:82:B1:B8:56:6F:39:87:57:4A:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/3139302e3130332e302e302f32302d3234203d3e203133333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:bb:8e:20:b1:e3:81:b4:c4:8f:97:0a:89:3f:91:6a:60:
         d9:7c:71:60:0e:d4:70:d4:29:97:9e:de:1b:24:eb:18:49:2f:
         80:9b:2d:48:da:fb:98:4e:6b:f8:6c:a5:81:12:c8:0e:11:49:
         59:52:99:2d:2b:05:d2:1a:bf:0c:e6:df:30:26:4b:c3:97:d8:
         2d:00:0d:bc:9c:f4:06:b7:c3:b0:6a:37:8a:39:7f:34:be:53:
         de:92:1d:d0:d8:44:0b:aa:93:c7:4b:d5:fd:d7:c2:ea:da:21:
         55:22:a1:70:c9:cd:db:83:41:1c:6a:82:aa:ac:c8:d7:4a:7c:
         69:38:09:a4:28:28:e8:3d:4d:8d:a4:1c:13:3a:0d:a0:2b:a3:
         0d:cb:3e:73:89:34:06:7c:81:a4:27:ed:8d:7e:a7:a9:af:3b:
         db:99:41:f8:bd:96:79:bd:32:f4:5b:b2:d6:f7:4e:95:4d:a0:
         14:32:2a:67:66:c9:b1:9f:d7:58:1f:23:1e:a5:d6:a9:39:c7:
         9f:e1:77:1f:2c:30:01:b0:ed:56:ae:3e:dc:92:73:b0:1d:9c:
         8d:d7:f5:56:6b:a7:0d:3e:39:53:2a:9d:09:1c:4d:87:44:46:
         e7:9f:8e:41:52:24:2c:48:48:eb:21:d7:f9:11:d8:c4:c2:f5:
         9c:51:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org