Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e3130322e35362e302f32312d3234203d3e203237373936.roa
File:                     3139302e3130322e35362e302f32312d3234203d3e203237373936.roa (raw, json)
Hash identifier:          aU3fheT9E4KuhxizLQSTg651wlBiyehMtec3O7bE+78=
Subject key identifier:   20:0D:21:22:7A:FD:F7:08:BF:F5:F5:C4:7F:B5:92:98:C7:13:13:19
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       37D4694FB93293DE571834A9BF8101F762E6436A
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e3130322e35362e302f32312d3234203d3e203237373936.roa
Signing time:             Tue 16 Jul 2024 21:10:00 +0000
ROA not before:           Tue 16 Jul 2024 21:05:00 +0000
ROA not after:            Tue 15 Jul 2025 21:10:00 +0000
asID:                     27796
IP address blocks:        190.102.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 07:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:69:4f:b9:32:93:de:57:18:34:a9:bf:81:01:f7:62:e6:43:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Jul 16 21:05:00 2024 GMT
            Not After : Jul 15 21:10:00 2025 GMT
        Subject: CN=200D21227AFDF708BFF5F5C47FB59298C7131319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:68:79:17:de:03:ce:8e:a9:f8:e4:d5:95:
                    82:38:a9:09:e5:8f:e5:73:98:71:ab:2b:ad:67:1b:
                    b3:3e:05:dc:c7:6e:b1:a6:14:63:3d:7e:90:50:0e:
                    de:d5:f0:1a:13:8e:f9:31:0b:0c:bb:91:5f:8e:1c:
                    bd:47:10:94:2e:30:76:13:22:88:3a:55:69:ab:d8:
                    11:94:46:8e:9b:56:fd:8c:63:54:3a:68:dc:f3:95:
                    f3:b8:4f:56:2a:68:3e:7e:44:b1:a2:a6:a0:5d:79:
                    56:16:d5:81:85:c7:10:b4:22:16:f2:d0:0e:57:ad:
                    1b:e6:00:ce:44:ab:be:04:bc:c6:27:c2:3c:40:b8:
                    a3:b3:71:e9:0e:76:a1:06:1d:49:ff:af:24:67:fb:
                    cf:42:5c:06:38:40:d9:d2:95:43:e0:d1:b7:c4:ff:
                    f6:c6:82:43:b7:df:45:c0:8d:1c:1c:9d:5d:ab:68:
                    cb:09:cd:91:e5:d8:b5:42:65:16:38:15:6e:11:02:
                    cd:2b:b9:97:7f:74:d5:a9:55:99:05:a5:be:e6:e2:
                    73:82:ca:e2:1e:05:a0:1f:bd:1a:18:e0:91:7c:b2:
                    fd:8a:f8:52:e8:2f:1f:c0:20:48:7e:be:b3:5e:ac:
                    2f:e8:c5:9c:75:ac:3f:b3:57:ff:ed:e1:31:bf:7c:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:21:22:7A:FD:F7:08:BF:F5:F5:C4:7F:B5:92:98:C7:13:13:19
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3139302e3130322e35362e302f32312d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:8a:77:30:0c:e8:48:6e:21:85:c5:64:63:55:58:c2:b3:
         9b:90:70:a7:a6:8e:76:29:8d:7c:8f:c0:2a:a0:7d:f2:b0:e6:
         24:94:b8:e4:ef:a5:8f:ad:bc:8e:e8:72:5e:c2:7d:3b:41:cc:
         2e:0a:75:2b:0a:41:d9:70:ef:0d:c4:3b:49:32:42:89:3f:b5:
         26:62:89:d2:a9:c4:d6:cf:69:a4:72:f3:90:83:3f:cf:9f:31:
         ba:47:d4:55:95:9a:4f:49:4b:86:02:06:d2:c0:79:a3:aa:73:
         29:ca:63:2a:c9:ff:3d:3b:c1:33:20:5d:df:82:70:5a:3a:69:
         3c:cb:89:90:32:d6:bb:3c:e0:ad:4a:08:5d:8d:c2:7d:53:1c:
         3d:77:d2:af:8e:41:42:1e:fc:26:b6:d9:80:23:d4:f7:66:30:
         da:c0:e6:c7:11:50:f9:a5:36:f8:7b:1f:b0:23:07:7d:e7:9e:
         db:57:a4:65:ba:d2:e5:d8:f7:35:1e:31:de:12:fe:b5:94:13:
         75:d3:db:11:a3:1b:81:c7:30:45:27:e9:5d:f3:7d:66:96:bc:
         10:f5:cb:2a:19:35:3b:8a:84:51:a8:b5:1f:cb:8a:b3:f0:5d:
         e1:36:fc:1c:06:0b:8f:c1:11:a4:1b:aa:57:74:55:91:cf:c6:
         14:ce:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 08:42:25 2024 by rpki-client on console-ams.rpki-client.org