Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237393437.roa
File:                     3139302e31352e3132382e302f32302d3234203d3e203237393437.roa (raw, json)
Hash identifier:          EiTG+MFs7uxotLs5CYrJNc87nrYZ6rHYpjcO6N0fuxc=
Subject key identifier:   01:A3:1E:7A:D2:72:1A:2E:9C:55:F3:26:78:AA:3C:FF:52:90:71:02
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       29BD478A913E2A43D7281E3BAEE2519CAD24A3B0
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:44:39 +0000
ROA not before:           Tue 05 Mar 2024 17:39:39 +0000
ROA not after:            Tue 04 Mar 2025 17:44:39 +0000
asID:                     27947
IP address blocks:        190.15.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bd:47:8a:91:3e:2a:43:d7:28:1e:3b:ae:e2:51:9c:ad:24:a3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Mar  5 17:39:39 2024 GMT
            Not After : Mar  4 17:44:39 2025 GMT
        Subject: CN=01A31E7AD2721A2E9C55F32678AA3CFF52907102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:db:57:d7:16:47:21:da:09:cd:b3:7c:d5:
                    07:50:14:5d:4a:2e:32:3c:a9:d6:e5:a3:65:ee:76:
                    92:46:5f:8b:6f:2e:d3:b3:ea:e8:47:32:86:b9:bf:
                    79:5c:31:ed:ee:45:1f:35:99:b2:9d:05:90:d1:5a:
                    6d:9b:76:c8:07:8f:43:fe:20:fa:28:f3:d0:9b:fc:
                    cb:d0:17:50:c6:df:58:0d:f9:c7:58:e5:ff:63:2f:
                    44:70:4c:f8:72:94:27:27:de:33:ee:df:b4:f6:c2:
                    8e:68:fb:03:95:7f:57:3f:12:b5:a7:a6:01:77:86:
                    f9:6a:d1:82:d8:ab:c5:dd:2f:cf:4f:9c:ea:ed:96:
                    6b:d3:14:e3:3d:38:3b:95:7f:09:e5:1a:dd:f2:5b:
                    04:e3:b7:52:bc:ce:e4:6c:a3:bd:50:6e:35:80:42:
                    5c:13:79:5c:5d:d8:99:1f:59:2d:cd:77:46:08:bd:
                    37:d6:c8:4a:66:31:50:07:58:35:b9:a6:74:ec:d5:
                    10:c3:ed:e3:b3:39:05:2f:43:10:98:70:33:38:b9:
                    ab:3c:36:7d:73:85:7f:d7:d2:d3:1a:ad:f1:6a:3b:
                    91:ec:db:37:39:97:d2:8b:6c:2d:7c:0a:82:07:1b:
                    b6:4f:41:95:45:69:e0:e7:d5:28:05:2c:08:a8:68:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:1E:7A:D2:72:1A:2E:9C:55:F3:26:78:AA:3C:FF:52:90:71:02
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:d9:18:9c:58:51:af:3e:6f:f6:7e:14:af:3b:14:81:98:4b:
         fe:3a:90:ac:e4:fd:30:8a:fa:97:49:22:4d:d8:1e:b5:68:63:
         be:e3:95:24:23:7e:4b:ad:b1:60:c4:15:f9:b6:39:b0:40:73:
         74:46:ef:dc:6d:13:f8:01:86:2e:dc:87:af:9d:51:ca:ed:ee:
         18:36:66:20:97:7b:c1:30:76:40:b6:4e:8e:ca:18:55:d5:5b:
         0a:0d:f0:c5:33:41:a0:41:01:cc:67:8f:49:95:e6:dd:2f:f2:
         88:f3:b6:2d:5e:bd:24:fe:ff:18:36:d3:db:ad:a3:86:9b:95:
         f8:33:82:3a:11:ed:1b:cf:38:95:89:1f:b0:17:a3:bf:17:7b:
         f9:99:54:3f:8e:04:c4:77:33:b4:d9:ad:c8:59:45:9a:0d:70:
         d9:34:60:83:c8:c1:55:38:4b:c7:db:80:32:cf:37:ac:06:33:
         78:1d:cb:16:b0:27:ae:a7:4d:1c:b4:9e:cc:e9:05:24:ba:2c:
         87:04:c3:9e:b8:77:cc:96:9a:b1:f3:f6:53:44:50:21:da:8f:
         13:18:92:f3:02:2f:3d:ae:ab:96:e1:53:4b:71:fb:e4:21:d8:
         2b:c5:da:71:96:1c:5e:f4:ae:4f:03:29:ba:a2:91:36:9c:05:
         b1:4d:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org