Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa
File:                     3139302e362e3132382e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier:          ilMseSSp3FREOcclysobS/FsTaDR+gzvKMWuOLAPbgE=
Subject key identifier:   B5:A2:9E:21:85:07:B6:99:88:A3:59:AD:07:C8:64:E4:A6:91:6C:0E
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       399ED12EAFA8593F86B70CE7F6F28B167C0109E3
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa
Signing time:             Tue 05 Mar 2024 18:09:15 +0000
ROA not before:           Tue 05 Mar 2024 18:04:15 +0000
ROA not after:            Tue 04 Mar 2025 18:09:15 +0000
asID:                     12066
IP address blocks:        190.6.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9e:d1:2e:af:a8:59:3f:86:b7:0c:e7:f6:f2:8b:16:7c:01:09:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:15 2024 GMT
            Not After : Mar  4 18:09:15 2025 GMT
        Subject: CN=B5A29E218507B69988A359AD07C864E4A6916C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:bb:ee:2b:d6:e4:d9:31:b4:84:00:c1:7a:
                    f8:1a:4f:aa:32:0f:cf:b8:1f:bd:18:ed:cf:37:ac:
                    3f:3b:47:01:cb:7a:96:fe:11:bb:06:95:4f:bb:40:
                    4f:75:23:8d:0f:80:1b:3f:fa:f5:97:8b:3f:27:eb:
                    5a:3c:bb:85:76:b7:cf:b1:65:c8:37:7a:1c:72:90:
                    ba:00:fa:87:67:21:e5:d9:ad:ea:36:fa:17:92:34:
                    cd:16:e9:fb:a2:e6:71:b0:67:17:28:88:a1:74:cb:
                    6b:1a:33:4d:46:90:63:6c:d4:db:70:d3:96:51:04:
                    0c:58:2a:6e:ff:34:ed:e4:2f:f9:a3:66:50:c9:5f:
                    21:18:97:6a:b9:4e:7a:e1:e3:1f:d9:e9:8b:3f:ca:
                    c2:7d:5d:97:3c:31:10:9c:85:48:39:7e:28:cd:7f:
                    b3:49:96:62:fd:6a:cf:eb:62:26:1e:0d:ae:5c:7d:
                    3d:9a:2b:a7:60:e4:13:55:4b:47:d9:2e:2f:c3:a3:
                    b7:4e:ed:9c:4b:da:d5:36:46:6e:01:32:51:c2:df:
                    e8:72:8b:8c:bf:64:28:a2:b1:6f:bf:59:fb:a0:ee:
                    9a:db:13:b0:39:af:6b:d6:8f:b1:13:d4:44:23:e7:
                    38:0b:cf:ab:bb:cd:b7:c0:a7:40:9f:2c:48:48:9f:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:9E:21:85:07:B6:99:88:A3:59:AD:07:C8:64:E4:A6:91:6C:0E
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:11:f1:91:6d:db:98:7f:43:a9:2b:65:e0:af:9c:dd:45:
         74:a1:f2:ac:9e:b1:33:8b:3f:b6:db:f9:1d:b8:da:0e:1d:cf:
         60:8f:29:f9:ea:48:5f:38:db:cc:42:cb:fd:3b:69:ec:70:a9:
         d2:f2:a7:6e:03:89:53:53:0f:41:b0:44:da:c1:9c:1b:d3:63:
         be:5b:d9:43:e9:1e:80:d1:a7:89:83:89:8b:d8:1d:24:64:8b:
         ac:14:fe:05:26:60:3c:fb:b7:3a:e1:34:3c:4a:36:ee:f2:6d:
         db:40:c3:9b:ab:d0:03:a6:c4:27:7d:5f:08:65:69:f9:ae:00:
         32:df:5d:26:ff:41:7f:83:14:b5:55:f3:bf:05:ee:a1:3c:d1:
         2f:b6:96:28:54:8b:29:3f:78:86:e0:c5:a3:26:18:a7:08:68:
         63:ac:76:e2:a8:58:e2:fb:27:d7:60:30:0a:b7:4e:d9:23:01:
         12:08:3c:98:36:70:5a:90:50:93:67:8d:cb:c1:ce:37:9c:1f:
         80:b3:7d:a8:26:0d:e3:86:f4:f5:a8:8c:8e:79:c0:c6:41:7f:
         1d:8e:8a:0e:52:1b:98:e2:a3:77:9c:62:a7:64:d2:04:e2:a8:
         53:bc:25:57:52:48:1c:d8:e0:19:4e:42:11:3c:20:dc:5f:47:
         a9:85:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org