Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa
File:                     3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa (raw, json)
Hash identifier:          0blf43um1O8ZaOju9GNB/JxvDma7vfi90B8l3epBnQc=
Subject key identifier:   E1:24:9D:FB:35:E9:66:DC:9F:28:91:60:DB:D5:17:39:C0:AA:14:56
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       6AB5D72A7A352A3032AB1C27D176CF66A90B2F1C
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 17:43:53 +0000
ROA not before:           Tue 05 Mar 2024 17:38:53 +0000
ROA not after:            Tue 04 Mar 2025 17:43:53 +0000
asID:                     27839
IP address blocks:        190.106.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b5:d7:2a:7a:35:2a:30:32:ab:1c:27:d1:76:cf:66:a9:0b:2f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Mar  5 17:38:53 2024 GMT
            Not After : Mar  4 17:43:53 2025 GMT
        Subject: CN=E1249DFB35E966DC9F289160DBD51739C0AA1456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:5c:f1:ca:0e:19:03:f1:7e:1c:42:fa:af:
                    14:a9:07:4b:28:25:90:88:b5:70:97:9b:31:7c:2e:
                    fe:77:c8:37:73:38:9e:0a:d5:73:75:d7:e1:17:51:
                    8e:a8:6c:a9:54:dc:1b:45:25:b5:30:3b:4c:b2:33:
                    0f:5d:87:a3:4b:98:d7:0d:61:30:ef:a8:9d:8d:a0:
                    ee:0a:05:fb:44:32:db:89:54:a2:55:fc:52:5b:9a:
                    be:51:1d:22:90:13:c4:43:d1:d0:4c:24:55:45:48:
                    09:36:6a:f9:80:d4:dd:37:e5:47:f1:c0:51:84:9e:
                    aa:48:1f:f5:f6:8b:86:56:c5:20:40:30:44:ed:93:
                    9d:e6:75:36:ac:79:4a:5e:d1:d6:94:ab:76:4c:95:
                    56:49:4b:69:2f:34:d5:69:6a:d1:2b:20:9e:0c:4a:
                    2b:89:7d:b3:81:88:27:e7:6d:04:c2:ac:40:95:87:
                    14:1e:4e:87:17:fe:67:e1:58:e7:0d:04:d9:f7:16:
                    73:a5:fd:69:b3:7e:6d:b9:98:17:6a:4a:c9:1a:72:
                    0a:3f:58:a3:8a:b5:e4:40:87:57:6e:7c:7a:83:f1:
                    c3:1d:f8:71:37:7c:a6:c6:ec:5d:38:50:ac:6e:47:
                    b5:90:6c:31:5a:34:67:24:45:c1:0a:c0:fd:cf:08:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:9D:FB:35:E9:66:DC:9F:28:91:60:DB:D5:17:39:C0:AA:14:56
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:61:ac:97:0e:8a:c0:63:e9:f9:c0:2c:2f:3b:bd:99:a9:30:
         85:9d:90:a2:be:97:a8:0b:92:53:a4:8a:e6:02:15:af:93:80:
         c9:67:fa:4a:19:f8:ac:cf:7e:54:64:73:e7:98:1e:5b:c2:00:
         46:8a:7a:db:0a:a6:54:c4:7e:ab:97:26:35:1d:1a:1a:15:5b:
         bc:be:90:f5:f2:4f:c7:36:c1:dd:13:b0:6e:48:14:a2:15:ef:
         ec:bf:80:3b:9f:b8:13:26:d8:f3:b3:94:7a:cf:4f:bc:47:0b:
         3a:68:f8:61:17:19:e3:ef:cb:8c:6a:0d:16:dd:4f:4c:06:48:
         72:79:49:74:fb:5f:eb:f1:8c:3f:be:71:6a:f6:e9:eb:ea:e1:
         31:19:ef:44:8a:05:cd:61:f5:f5:67:38:8b:c6:b6:d1:df:dc:
         fe:d5:a1:de:15:87:84:ab:f6:1a:ef:1a:00:8a:ec:41:94:57:
         81:6d:ca:cf:5b:59:b9:95:91:ae:96:b3:dd:f4:f4:33:0c:99:
         ff:b6:bc:75:ac:44:f2:5c:64:7c:76:79:c8:8d:89:9a:10:36:
         fe:e9:79:45:f8:47:25:68:23:36:be:7d:bd:b4:88:8f:7f:bf:
         4c:5b:3d:51:54:ea:51:67:fc:df:23:4c:13:0f:5c:13:11:fd:
         9f:28:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:15 2024 by rpki-client on console-ams.rpki-client.org