Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203238313138.roa
File:                     3139302e362e3132382e302f32302d3234203d3e203238313138.roa (raw, json)
Hash identifier:          UxswLAxpcCJsFPbqQaQ3g2FaMRVAPkFSJ8q8c5l5/EY=
Subject key identifier:   F8:C0:F9:8D:3E:2A:5D:40:0C:12:AB:10:37:B3:B6:96:3D:A2:64:35
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       2BB7DD86AD9FF0F26CE533D1A3CC6F1DF53BDE0F
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:14 +0000
ROA not before:           Tue 05 Mar 2024 18:04:14 +0000
ROA not after:            Tue 04 Mar 2025 18:09:14 +0000
asID:                     28118
IP address blocks:        190.6.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b7:dd:86:ad:9f:f0:f2:6c:e5:33:d1:a3:cc:6f:1d:f5:3b:de:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:14 2024 GMT
            Not After : Mar  4 18:09:14 2025 GMT
        Subject: CN=F8C0F98D3E2A5D400C12AB1037B3B6963DA26435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:6a:bf:43:15:ba:eb:77:0e:5c:88:94:be:
                    a5:72:40:2a:fd:bd:16:c2:75:66:13:bf:d1:74:9c:
                    da:b7:ab:b7:2a:73:8e:e0:3a:63:54:9f:67:76:74:
                    60:6e:fe:72:2d:2b:68:fa:a7:01:f6:bb:d3:f4:2e:
                    6b:1d:d6:9b:47:5d:53:cf:78:18:f5:1a:a1:73:e1:
                    11:46:4e:51:4e:07:c3:15:b2:7f:32:de:e6:01:f6:
                    d5:3e:b5:42:81:93:e0:0f:e2:5d:29:e0:78:70:92:
                    d8:ea:59:7c:e0:9b:0a:fc:73:55:b1:5f:b5:fc:42:
                    fc:46:f3:85:9f:70:a4:c8:c4:b8:8f:a7:3b:ab:ca:
                    f6:80:3a:05:10:7d:15:29:3a:da:d5:68:0c:bf:67:
                    6e:e4:65:4e:e1:b5:5f:c6:b1:bb:09:1d:06:83:ec:
                    86:07:aa:99:92:ee:31:bc:a5:85:aa:35:17:cd:a5:
                    b7:bf:ae:b1:e4:38:9a:7e:da:61:ce:be:f8:18:a5:
                    33:49:78:78:95:dd:f7:b9:82:03:a2:d7:02:7f:cc:
                    3b:8c:54:36:e4:7c:b3:28:bc:46:d8:d9:eb:c7:7e:
                    e9:63:a2:0e:14:a7:6e:72:39:26:f3:23:f0:54:5b:
                    11:40:93:74:ff:a3:7d:51:ff:f6:29:b4:63:7f:61:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:F9:8D:3E:2A:5D:40:0C:12:AB:10:37:B3:B6:96:3D:A2:64:35
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:61:81:67:6d:a4:70:97:7e:70:bd:ee:33:a0:71:9b:6e:77:
         87:a1:52:45:bc:fc:8a:0c:4a:d2:e9:59:50:07:db:dc:61:de:
         34:e3:53:f6:24:1d:b5:e8:92:a2:10:81:88:7a:0e:2f:b6:88:
         a9:d9:d4:d1:8f:21:20:5c:a7:2c:86:33:dc:97:08:f7:5f:4f:
         57:33:b9:99:70:ed:54:6f:cd:63:52:b0:a8:06:1f:7f:04:43:
         9d:50:d7:05:10:a6:29:0a:b8:db:4a:de:2c:d4:68:72:fc:7c:
         a3:3e:8c:b8:a2:7c:da:84:4c:15:ed:53:ca:fe:c2:55:ac:2f:
         27:2c:4e:b8:27:c8:50:68:bf:db:2d:00:d4:6f:e9:61:d1:3d:
         7d:57:40:cd:83:1a:9e:a7:b8:c8:23:1a:44:89:a7:a2:99:29:
         be:ce:7a:c7:c2:89:28:c3:95:d7:95:62:b9:ee:24:92:61:2c:
         6f:92:03:b7:cb:f3:ea:56:e2:28:aa:43:bb:1c:ef:aa:c2:51:
         6e:0f:84:5d:13:82:37:ce:d5:f7:32:d0:c5:39:4d:70:cd:16:
         6b:eb:33:80:cf:74:28:aa:b2:d7:7b:57:b2:c8:c3:f1:8f:f9:
         ca:33:b6:0f:5b:a7:81:da:ca:37:01:52:ad:b8:3f:03:aa:91:
         62:8e:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:14:57 2024 by rpki-client on console-fra.rpki-client.org