Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/3139362e32392e36342e302f31392d3234203d3e203131393437.roa
File:                     3139362e32392e36342e302f31392d3234203d3e203131393437.roa (raw, json)
Hash identifier:          iGH+DW6S1goSnPWhkp9TPQdNhET8JbFQsPEUGFQP9KA=
Subject key identifier:   43:7F:EB:22:03:72:AD:68:A4:AA:B3:CE:20:E9:90:DE:5F:79:5C:B5
Certificate issuer:       /CN=C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF
Certificate serial:       65145E75B9A98B792BAD3F727CBE8B19E84E622C
Authority key identifier: C9:32:6C:6B:28:11:6F:80:18:3E:CC:EA:2C:C3:E9:6F:26:D5:AF:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/3139362e32392e36342e302f31392d3234203d3e203131393437.roa
Signing time:             Tue 05 Mar 2024 18:02:15 +0000
ROA not before:           Tue 05 Mar 2024 17:57:15 +0000
ROA not after:            Tue 04 Mar 2025 18:02:15 +0000
asID:                     11947
IP address blocks:        196.29.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:14:5e:75:b9:a9:8b:79:2b:ad:3f:72:7c:be:8b:19:e8:4e:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF
        Validity
            Not Before: Mar  5 17:57:15 2024 GMT
            Not After : Mar  4 18:02:15 2025 GMT
        Subject: CN=437FEB220372AD68A4AAB3CE20E990DE5F795CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:03:ff:eb:4e:5b:d7:96:77:4a:7e:18:a0:
                    d3:dc:e4:d4:45:24:e8:9b:3e:c4:b3:ff:b3:ba:c2:
                    33:05:19:76:79:17:65:ab:f4:ed:64:71:c7:20:88:
                    67:11:3b:84:3a:52:3d:1a:2e:d3:eb:51:ed:e0:07:
                    7b:2e:6d:f4:42:f9:06:77:45:64:af:e7:ee:b1:36:
                    c3:28:0f:85:0f:02:0f:9b:51:4b:34:cd:99:62:5c:
                    23:d1:0c:ec:e0:44:6d:11:a4:46:b8:ef:83:84:a7:
                    1b:30:2f:25:f6:59:95:ff:0c:43:a7:2e:8c:60:7b:
                    23:37:8b:f8:43:0d:d1:bf:a6:62:98:18:09:5c:50:
                    d1:65:e4:da:dc:19:75:50:f5:06:68:c3:c7:98:c7:
                    9e:4e:15:4c:4d:38:c9:c8:71:61:a4:84:de:c3:0a:
                    f0:89:66:10:15:0f:c5:4e:78:11:84:0f:c0:50:f7:
                    cf:0c:01:77:7a:91:85:b6:90:49:43:ae:1e:54:8c:
                    3e:94:d9:97:45:c1:05:26:a5:e4:0c:ba:74:6d:76:
                    00:2d:f6:c5:0b:a6:e0:61:82:bf:83:1f:75:83:a5:
                    8a:fa:04:16:b3:ec:25:a7:93:90:c7:63:08:15:74:
                    bd:a3:3f:e4:59:a5:dd:ca:03:ec:b2:53:85:cb:cb:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7F:EB:22:03:72:AD:68:A4:AA:B3:CE:20:E9:90:DE:5F:79:5C:B5
            X509v3 Authority Key Identifier:
                keyid:C9:32:6C:6B:28:11:6F:80:18:3E:CC:EA:2C:C3:E9:6F:26:D5:AF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9326C6B28116F80183ECCEA2CC3E96F26D5AFCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0BC30929DA709A66F5E86E282D5DB34E0902443352C7058E793A4B4F10DFE5E/0/3139362e32392e36342e302f31392d3234203d3e203131393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.29.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:da:f5:5b:fa:22:e9:6e:e3:47:20:8e:a6:49:6e:cc:db:
         49:df:89:31:6a:c0:50:e2:e0:0c:3c:36:19:e5:cb:42:f2:ea:
         49:f7:32:ce:c9:80:b2:a6:a9:36:cc:da:24:b8:32:ed:9a:35:
         db:89:a8:1a:35:74:cc:73:4c:85:a4:7a:e0:d5:ef:00:35:4c:
         4c:9d:ce:8b:b0:f4:dd:5b:03:29:be:14:7b:66:bb:00:ad:6a:
         c5:46:27:11:03:f9:1b:78:3f:41:78:0f:7c:d5:14:e1:f7:29:
         8e:d7:23:a8:e8:1e:e5:32:8e:3b:72:b1:e2:69:8d:c8:2a:3d:
         5f:66:d5:99:aa:4c:24:08:26:77:ea:70:bd:85:d4:72:18:7d:
         9f:1c:ee:35:22:df:ee:64:29:f6:e7:9b:b9:3d:ae:a9:8f:b5:
         7a:b3:4f:dc:4e:bc:d4:c5:66:0b:31:6d:3e:b9:cd:68:1a:c0:
         f9:43:19:55:6f:a6:0f:23:9f:51:0e:95:c1:3e:17:9c:dd:bf:
         d1:35:95:0e:11:35:e3:66:46:df:89:2a:cf:89:94:f0:3a:ce:
         44:8d:10:a2:56:59:f7:83:67:55:40:d8:de:77:d2:d6:e4:67:
         62:33:4c:68:ee:5c:a2:e9:7b:16:2e:df:23:03:30:24:3f:58:
         d5:13:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org