Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e322e38302e302f32312d3234203d3e203238303733.roa
File:                     3139302e322e38302e302f32312d3234203d3e203238303733.roa (raw, json)
Hash identifier:          zpZhPAmJHwYQVOyji6PxwZMySWH26honpg4adDAEdjc=
Subject key identifier:   09:34:C3:FF:EB:09:F4:A4:A4:B8:19:F0:D0:E6:D5:C0:D3:50:20:FB
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       0C93BBF761A310E0400F5E0835C35D24771BBBAC
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e322e38302e302f32312d3234203d3e203238303733.roa
Signing time:             Tue 05 Mar 2024 17:46:15 +0000
ROA not before:           Tue 05 Mar 2024 17:41:15 +0000
ROA not after:            Tue 04 Mar 2025 17:46:15 +0000
asID:                     28073
IP address blocks:        190.2.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:93:bb:f7:61:a3:10:e0:40:0f:5e:08:35:c3:5d:24:77:1b:bb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Mar  5 17:41:15 2024 GMT
            Not After : Mar  4 17:46:15 2025 GMT
        Subject: CN=0934C3FFEB09F4A4A4B819F0D0E6D5C0D35020FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:bd:6e:32:84:96:49:3d:09:4e:4f:45:9d:
                    42:f5:a9:fb:fa:d1:a3:51:df:04:a2:29:c4:b5:ab:
                    18:0e:7f:b9:7b:85:07:cb:d2:aa:79:96:5b:19:ba:
                    b4:9b:28:51:5f:b0:05:dc:65:5a:85:d9:08:f7:4c:
                    d8:c1:28:0d:ee:a1:85:4c:60:a5:bc:b6:b5:0c:62:
                    10:25:88:a8:73:3c:b3:f2:18:b6:45:27:4f:80:71:
                    9b:c8:c4:49:c9:2f:7c:f8:c9:2c:b1:0d:23:4d:2b:
                    41:57:b3:3d:92:49:df:2f:17:78:1d:21:25:78:c3:
                    7d:ae:6c:6a:35:f1:87:ec:c2:4e:d3:af:37:61:d0:
                    6c:90:df:df:4d:a6:30:35:11:80:99:a8:83:d4:e2:
                    9a:80:64:1e:b3:00:58:b2:7c:ba:fb:4d:41:89:d3:
                    b6:1e:f8:f8:52:ae:b8:68:ba:68:ea:81:ee:db:7d:
                    34:e6:46:c6:d1:07:28:36:e8:e6:a2:97:9e:a6:a9:
                    f8:b4:83:30:4e:21:57:61:df:eb:08:ae:58:f4:a5:
                    9c:90:dc:72:45:a5:da:77:a2:bc:d7:5c:01:6f:94:
                    fc:61:32:f6:0d:13:98:a0:2e:b7:16:15:ba:20:71:
                    50:c1:7a:22:37:5e:d7:e3:0a:01:63:5f:5a:7f:07:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:C3:FF:EB:09:F4:A4:A4:B8:19:F0:D0:E6:D5:C0:D3:50:20:FB
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e322e38302e302f32312d3234203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:6e:16:a6:d3:eb:00:e9:48:52:70:be:6b:a6:58:c3:ba:
         58:3d:26:19:c0:ae:64:0c:af:30:82:10:3e:08:bb:41:92:fe:
         05:d7:2a:ff:da:71:6e:b7:99:d2:42:4c:d0:a8:94:0e:e0:03:
         2f:b5:d2:15:f5:5d:d2:c7:78:d1:97:46:a4:e3:62:1b:8c:2a:
         a2:af:ef:24:04:eb:45:d5:eb:9b:d4:0c:5a:91:ad:f7:a7:54:
         0b:07:e2:bf:9a:26:e0:93:1e:11:f5:f4:2d:b5:d2:18:98:1d:
         8d:0c:9c:6c:d3:50:e7:d8:51:1f:c0:6a:1a:11:9f:44:70:b8:
         a0:7e:75:92:f9:46:2c:7a:25:85:d0:13:99:31:34:b2:f6:74:
         c6:8f:e8:c9:1f:15:20:c9:e8:d4:b6:85:ce:05:ef:d3:7e:71:
         4b:09:2b:16:b2:3d:c6:3c:2b:db:ae:a4:6c:b2:d8:07:e6:22:
         83:68:85:2f:d4:12:94:d8:6b:7a:1f:6a:9b:ff:b8:fa:ce:fc:
         66:d9:fc:8f:46:16:b9:74:d3:f6:75:c1:07:3a:ed:79:9e:38:
         c3:97:8c:10:8e:8f:dc:20:44:dc:75:a0:ab:2e:d1:77:6a:e7:
         81:d8:50:2a:5c:8b:b6:0b:6c:b0:2d:73:8d:07:5f:81:f9:6d:
         16:c5:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org