Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa
File:                     3139302e372e3139322e302f31392d3234203d3e203237383736.roa (raw, json)
Hash identifier:          1kysQ2QjBjLul3Qco2d87+sUxr+TU+RRI9iLy2SfJ5k=
Subject key identifier:   76:9A:85:F9:74:6F:B3:8F:13:B1:31:DD:58:2E:07:C3:C5:D6:02:A7
Certificate issuer:       /CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
Certificate serial:       2B47271DF704A461D3A49486F931F13E7749F945
Authority key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa
Signing time:             Tue 08 Oct 2024 20:55:00 +0000
ROA not before:           Tue 08 Oct 2024 20:50:00 +0000
ROA not after:            Tue 07 Oct 2025 20:55:00 +0000
asID:                     27876
IP address blocks:        190.7.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:47:27:1d:f7:04:a4:61:d3:a4:94:86:f9:31:f1:3e:77:49:f9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
        Validity
            Not Before: Oct  8 20:50:00 2024 GMT
            Not After : Oct  7 20:55:00 2025 GMT
        Subject: CN=769A85F9746FB38F13B131DD582E07C3C5D602A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:73:99:5a:58:70:de:1c:2f:1d:1a:31:45:
                    ac:b0:8b:6d:f0:4e:95:a9:df:26:ac:73:1b:49:65:
                    47:9a:43:f6:36:06:32:c2:db:da:05:87:0d:fd:35:
                    c1:07:04:50:96:17:91:d9:bb:52:81:d0:9d:29:69:
                    f2:79:dc:de:27:59:f7:ba:02:3c:50:d6:fd:a1:94:
                    84:a7:a2:c3:c5:57:d2:5f:e7:31:c8:95:22:59:a9:
                    31:a6:c2:5b:1d:1f:4c:4b:8c:46:74:b7:82:24:1f:
                    75:40:36:70:26:d0:07:2d:40:b2:91:c6:95:f2:75:
                    e3:56:8d:27:f3:7c:6d:99:16:8a:2e:cd:dd:9c:43:
                    22:d2:0d:7f:8e:c7:5f:14:2d:57:b0:99:77:e8:e1:
                    50:14:fd:44:c1:db:5c:40:c7:64:e2:5a:48:27:04:
                    b1:1e:c7:d3:f7:73:0f:e1:f0:78:bf:05:29:ca:a6:
                    52:2e:b2:80:45:76:f3:a6:68:fd:65:2e:a9:74:58:
                    eb:8c:af:dc:4b:c2:3d:d1:02:95:5d:b8:a8:59:0b:
                    c9:4e:b7:54:8f:e6:ac:f4:e7:76:98:5f:70:53:0c:
                    b8:05:b9:d2:32:13:df:c3:8b:08:68:18:6f:a7:b0:
                    50:54:75:73:cb:08:70:51:76:e6:6d:20:d9:7a:90:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:85:F9:74:6F:B3:8F:13:B1:31:DD:58:2E:07:C3:C5:D6:02:A7
            X509v3 Authority Key Identifier:
                keyid:4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f31392d3234203d3e203237383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:c8:88:ac:f3:e4:d8:2c:23:01:59:7d:8c:43:47:16:7a:
         d7:e9:77:2f:58:30:ac:94:92:f9:5f:55:04:34:f7:52:43:0e:
         6f:08:7b:23:21:3b:f2:ae:5c:41:3a:de:c1:87:5d:b7:20:86:
         5b:40:1f:61:3e:f0:46:93:8b:80:05:db:c3:ce:62:30:5b:de:
         cb:89:59:f7:2a:2d:8a:a5:ef:26:f1:b6:50:d4:a4:c1:70:05:
         95:51:76:67:76:9a:71:92:0f:38:b3:0b:d6:0f:35:ae:b5:10:
         da:75:8b:59:47:59:17:7a:68:5b:ae:92:d8:be:d4:af:f0:2c:
         ec:99:cb:95:7a:30:e1:d1:08:a1:10:45:e6:df:40:7e:ec:95:
         99:0e:18:05:36:c6:6b:b8:5c:a3:0c:65:ee:72:b2:c3:db:d3:
         94:db:e3:8c:f0:09:7f:fb:0d:74:48:76:7e:e5:9f:ce:f8:04:
         d8:8c:1e:b9:cc:90:bd:57:8f:8d:c7:ef:3e:49:44:e6:e3:9b:
         ce:05:77:47:a0:32:b4:a5:7f:8d:90:8b:ef:a4:b8:fa:a3:bc:
         fe:7e:eb:4c:ae:5d:a8:b8:8f:f4:5f:9e:4b:1f:8e:c5:11:6c:
         0d:3d:26:c3:0a:2b:36:6a:e6:4f:bb:f6:42:b6:c2:7f:ca:69:
         4b:ae:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org