Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa
File:                     3139302e372e3136302e302f32302d3230203d3e203237393038.roa (raw, json)
Hash identifier:          s5lJUxwhd4dIQSrP/wH3/gvN+llOX3XkvEsXpx+lNFo=
Subject key identifier:   2C:7E:D3:2E:C2:E6:0C:EE:80:A7:60:D6:A6:A0:F3:30:F8:2E:1A:2A
Certificate issuer:       /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
Certificate serial:       46C9A36198854D76316DA65DEC610FC151C7C0
Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa
Signing time:             Tue 05 Mar 2024 18:06:07 +0000
ROA not before:           Tue 05 Mar 2024 18:01:07 +0000
ROA not after:            Tue 04 Mar 2025 18:06:07 +0000
asID:                     27908
IP address blocks:        190.7.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:a3:61:98:85:4d:76:31:6d:a6:5d:ec:61:0f:c1:51:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
        Validity
            Not Before: Mar  5 18:01:07 2024 GMT
            Not After : Mar  4 18:06:07 2025 GMT
        Subject: CN=2C7ED32EC2E60CEE80A760D6A6A0F330F82E1A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:a8:3a:7f:be:f3:a8:18:0d:b5:03:dc:ff:
                    81:94:3a:10:1e:79:9d:96:14:e9:cd:8b:b6:3c:fc:
                    d9:d5:0a:5c:b5:52:d8:c8:14:c8:ef:b1:fa:41:d5:
                    2b:67:5d:0b:6b:69:4a:3a:c4:eb:92:12:b9:7c:3d:
                    d8:75:f9:1c:9a:a3:c8:8d:6d:8b:73:79:99:3b:51:
                    be:8c:01:19:c5:c0:32:c9:62:8d:52:90:ac:9e:50:
                    e4:28:69:78:60:ba:62:6c:eb:0c:38:b9:7a:26:c7:
                    4d:98:f1:1f:cf:c8:ff:b6:95:01:c7:85:f7:2f:c7:
                    60:b2:f3:66:7d:88:0b:bd:1c:56:5b:0f:a6:9c:53:
                    bb:30:9e:1d:45:54:2c:09:9a:7d:45:dd:de:2a:26:
                    95:8e:92:e6:23:03:55:ca:82:11:e2:22:a9:4a:74:
                    9b:2b:13:a6:cf:d8:12:35:c0:7a:5f:eb:b6:8e:f5:
                    d7:f1:db:ef:12:3a:a8:53:7f:89:e1:4f:58:0a:46:
                    09:2d:20:05:8b:44:60:18:ab:11:d8:c5:69:41:85:
                    05:47:ee:d6:8a:e6:bc:bb:41:1b:a2:e3:5b:73:52:
                    c3:63:f7:18:0a:7a:85:b7:26:1b:4b:22:30:34:5e:
                    c9:6e:8e:12:c7:76:65:8b:ce:64:97:d0:18:e2:8a:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7E:D3:2E:C2:E6:0C:EE:80:A7:60:D6:A6:A0:F3:30:F8:2E:1A:2A
            X509v3 Authority Key Identifier:
                keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:22:9f:e6:3b:b4:94:87:24:e6:a6:e6:9d:2c:39:81:d3:9c:
         79:78:34:e4:bb:b1:39:40:79:b1:1f:15:69:d1:f7:92:37:3d:
         18:b1:26:d2:33:3d:79:4d:0f:dc:26:7f:68:dc:59:ac:8a:f8:
         c9:61:9b:2b:2f:93:a5:50:ab:3a:77:b4:f4:bd:fe:78:2f:f9:
         d1:f4:dc:66:64:50:9f:bc:91:1e:b7:da:90:34:75:03:50:33:
         01:3f:d4:d9:f3:9b:f3:50:d2:3a:31:c8:b2:7f:d1:69:2e:09:
         f8:45:35:41:04:15:d6:aa:ff:52:4b:15:00:bb:52:cb:4c:24:
         82:95:e5:42:af:37:2a:ff:07:50:2a:26:c3:79:ae:3e:d1:d8:
         b4:02:05:b1:31:ef:02:bb:11:1c:51:45:bc:1f:29:71:a1:65:
         bb:bc:58:f2:4d:05:49:8f:ff:b9:7b:ee:9c:9f:ad:48:df:08:
         ed:eb:3f:6b:6f:c8:40:9e:59:2e:4b:05:df:b8:c7:b0:12:78:
         5a:56:cb:19:80:15:41:f2:89:60:cc:aa:ab:95:b0:7e:41:3e:
         48:52:83:da:ad:a3:6d:d7:fc:f3:7b:51:82:33:89:f7:77:d9:
         d2:68:88:5d:55:c0:2b:bf:fa:3c:83:48:83:a6:2f:a8:6c:d5:
         72:18:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org