Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3139302e3132322e36342e302f32302d3234203d3e203237393430.roa
File:                     3139302e3132322e36342e302f32302d3234203d3e203237393430.roa (raw, json)
Hash identifier:          i/s+H99dNEXkkCChnbovb4JpKreYnZvqCOP0NFx0VUA=
Subject key identifier:   BC:51:E9:3D:CD:78:1A:88:9D:AC:BE:B6:12:E0:C6:BF:13:D2:90:6E
Certificate issuer:       /CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
Certificate serial:       3920B489428F41CFC16696443BBAA3F211E9AF30
Authority key identifier: 94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3139302e3132322e36342e302f32302d3234203d3e203237393430.roa
Signing time:             Tue 05 Mar 2024 17:53:32 +0000
ROA not before:           Tue 05 Mar 2024 17:48:32 +0000
ROA not after:            Tue 04 Mar 2025 17:53:32 +0000
asID:                     27940
IP address blocks:        190.122.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:20:b4:89:42:8f:41:cf:c1:66:96:44:3b:ba:a3:f2:11:e9:af:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
        Validity
            Not Before: Mar  5 17:48:32 2024 GMT
            Not After : Mar  4 17:53:32 2025 GMT
        Subject: CN=BC51E93DCD781A889DACBEB612E0C6BF13D2906E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:05:ef:c6:62:8a:f5:21:62:53:bc:76:b9:
                    b4:1e:5a:45:99:ae:7e:06:54:dc:e3:ab:72:d8:cc:
                    c9:37:a2:02:12:fc:c6:22:52:6a:44:7b:ef:0d:a6:
                    e3:69:88:79:dc:fc:b4:f3:84:58:a5:e1:45:7e:62:
                    3d:a1:94:b3:0c:f0:d9:50:e3:fe:b4:e5:0c:b4:9f:
                    9c:3d:21:ba:df:70:6b:dd:dc:bc:02:f3:37:30:47:
                    b4:32:9e:b9:45:74:91:fa:5f:94:14:36:82:db:8e:
                    f9:2f:d7:83:7a:7c:65:f4:2a:fa:67:ce:0f:de:ee:
                    58:e6:c1:43:1b:e4:d1:e0:50:5a:77:2b:10:e4:a4:
                    80:f5:ad:f4:7a:50:6c:c5:0f:89:b2:e1:1b:8d:6b:
                    a7:91:d8:d4:f8:b1:3a:93:23:73:99:64:c6:e6:e2:
                    06:d1:78:5f:27:e5:12:97:30:c4:16:ad:8c:1c:72:
                    0b:a5:e2:e3:ae:78:02:b1:42:5e:8c:a4:70:c1:c2:
                    a1:ea:2d:13:0f:a1:08:ba:b9:50:77:21:29:3a:81:
                    dd:7f:57:ca:c5:df:7c:d4:2c:29:32:3b:cc:6b:4d:
                    a8:f9:a9:57:f6:da:e0:46:b1:9d:d0:56:81:ea:36:
                    53:c7:05:e2:62:f0:27:4a:db:a2:1a:8e:1f:1b:a9:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:E9:3D:CD:78:1A:88:9D:AC:BE:B6:12:E0:C6:BF:13:D2:90:6E
            X509v3 Authority Key Identifier:
                keyid:94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3139302e3132322e36342e302f32302d3234203d3e203237393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:c5:30:b2:ce:fd:8c:c0:80:61:7c:f9:2c:09:d8:40:8b:
         dd:5a:f4:24:50:4b:eb:50:bb:d0:e0:2f:47:08:8b:05:ec:7d:
         28:3e:cf:8e:74:3c:ec:e8:1a:33:d1:11:73:98:a5:f1:18:de:
         aa:0d:75:12:c7:8e:7b:3c:48:f1:2b:bc:92:8c:42:00:fd:e1:
         5e:e9:c6:62:86:90:f2:96:64:36:a5:87:8a:cd:5a:28:c4:9d:
         29:ce:29:2d:67:3f:49:84:db:4b:c6:71:83:30:08:96:0b:ad:
         6f:8d:37:b5:e5:a2:dc:75:43:ba:31:0c:b3:e3:76:13:cd:51:
         83:08:21:88:6d:17:a9:ee:f2:22:f5:91:0b:49:80:bd:ac:8d:
         ff:7c:4f:12:2a:61:4a:02:a8:20:f7:92:e6:ed:53:07:71:ff:
         01:9c:21:e2:93:60:07:28:9a:4d:86:2f:09:2c:1c:52:31:c1:
         41:48:15:29:ee:c3:f4:e8:80:cc:4b:53:a2:4d:3b:cd:61:2f:
         07:20:23:7c:28:15:8f:b2:83:ef:26:25:5b:4e:0b:ad:c7:57:
         6f:6a:8c:95:62:6d:e2:9b:45:60:8b:be:ed:f1:18:96:04:5c:
         6c:77:24:f5:99:27:0f:74:d3:fa:94:0b:e0:4b:d2:5f:4e:1e:
         72:89:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:21 2024 by rpki-client on console-fra.rpki-client.org