Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203237383936.roa
File:                     3139302e302e36342e302f31392d3234203d3e203237383936.roa (raw, json)
Hash identifier:          zpM0LdaRCCN2Mb9tSR+DY7WhwEfclE6qvG7/ezjoze4=
Subject key identifier:   7C:78:53:8D:07:A8:73:35:A3:FE:D7:5E:0C:0E:C2:9F:C2:27:42:76
Certificate issuer:       /CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
Certificate serial:       0E5BA6617E8EE6BA30A6145022BBFDE9E1F6BA8F
Authority key identifier: 66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203237383936.roa
Signing time:             Tue 05 Mar 2024 17:42:05 +0000
ROA not before:           Tue 05 Mar 2024 17:37:05 +0000
ROA not after:            Tue 04 Mar 2025 17:42:05 +0000
asID:                     27896
IP address blocks:        190.0.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5b:a6:61:7e:8e:e6:ba:30:a6:14:50:22:bb:fd:e9:e1:f6:ba:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
        Validity
            Not Before: Mar  5 17:37:05 2024 GMT
            Not After : Mar  4 17:42:05 2025 GMT
        Subject: CN=7C78538D07A87335A3FED75E0C0EC29FC2274276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:8c:25:39:4a:10:24:26:62:7a:64:4a:0e:
                    63:03:e0:9f:bf:bb:f9:28:8c:a8:54:64:a4:8b:35:
                    c9:c3:fc:7a:64:56:7d:c9:1e:cf:1f:e6:d3:35:ae:
                    ed:2e:35:12:ee:97:9e:e6:ab:70:91:6f:a6:dc:b5:
                    68:96:e8:33:77:f9:df:0e:41:f7:53:65:f9:6e:76:
                    e4:92:c3:85:fb:ee:cb:98:84:ae:f4:b9:d4:9c:47:
                    65:ae:be:9c:c1:40:5d:3b:60:d2:8c:42:72:d3:e9:
                    04:b6:b4:e5:3b:97:84:d0:b5:c9:fd:07:c7:56:ee:
                    a0:c4:45:dd:d8:5a:44:43:3e:d0:1c:06:76:38:df:
                    fa:8f:be:ba:aa:41:69:b1:13:cd:1d:17:a2:18:6c:
                    d4:53:ea:3f:07:e5:d4:b7:be:d3:fe:2c:95:6f:a9:
                    4c:92:98:14:d3:1e:b5:01:f0:ae:51:a6:ea:b2:b6:
                    69:65:70:40:db:f3:fe:9f:45:70:c8:61:47:85:7f:
                    70:1b:3a:77:a0:c1:66:87:bf:53:e5:11:47:b6:1d:
                    fa:0e:85:eb:5b:fb:b7:0c:ae:59:ba:a3:79:9d:bb:
                    28:b3:a0:09:a2:28:c2:7d:ae:3f:a9:89:b1:0b:dc:
                    f8:68:50:d9:14:5d:6d:da:50:55:94:b1:42:63:0f:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:78:53:8D:07:A8:73:35:A3:FE:D7:5E:0C:0E:C2:9F:C2:27:42:76
            X509v3 Authority Key Identifier:
                keyid:66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203237383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:b5:de:00:f9:3e:af:32:a8:93:9c:fb:f4:f6:9d:e2:83:
         c6:90:ad:41:2c:55:65:2d:93:46:29:c4:80:37:d6:6f:b5:45:
         38:1f:9f:64:5a:4f:c7:ca:bb:8f:6e:b6:38:69:b6:0b:b5:6a:
         81:fc:05:13:46:5c:27:54:f3:df:6a:f4:68:04:61:69:94:84:
         83:b9:cf:42:d6:03:9e:bb:e0:e4:1f:0b:8f:86:8b:96:6e:73:
         7a:68:d9:fa:80:05:f4:ec:40:c1:90:60:9f:23:dc:e5:c8:86:
         66:22:54:b2:27:6b:06:98:33:c5:13:b1:91:37:98:32:7d:20:
         d3:7f:74:dd:17:e8:39:2b:93:94:c2:f7:34:02:6d:59:0f:75:
         3c:59:2b:82:49:1c:ab:4a:73:03:5a:a5:01:db:14:0e:36:0c:
         ab:33:48:bf:35:7a:08:0e:44:7b:a8:a2:bb:ee:f8:6d:22:e4:
         f0:60:35:8a:1e:77:76:91:c8:8d:cc:1b:1a:08:51:ed:71:ac:
         57:5d:49:ba:b8:c2:38:d0:d9:84:9b:3a:b9:40:e1:b3:58:3d:
         f9:29:23:9c:61:48:b5:7f:85:21:05:90:9e:61:f7:3e:f9:3c:
         8d:f5:07:94:99:f9:b2:04:b9:20:c7:cb:e2:6d:97:02:ce:dd:
         da:c6:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org