Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa
File:                     3139302e3130372e36342e302f32302d3232203d3e203237393032.roa (raw, json)
Hash identifier:          j+sfy7Yu3KjfwjxI1iK8pktrg811lhdI7jfYArq/PtM=
Subject key identifier:   3B:1D:C7:AD:A0:24:DE:F1:4F:8E:FD:C9:FB:4E:9D:FB:10:B7:18:A3
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       495F96E3DD96D5427EA9FA546D4A4C76B555C854
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa
Signing time:             Tue 05 Mar 2024 17:57:01 +0000
ROA not before:           Tue 05 Mar 2024 17:52:01 +0000
ROA not after:            Tue 04 Mar 2025 17:57:01 +0000
asID:                     27902
IP address blocks:        190.107.64.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5f:96:e3:dd:96:d5:42:7e:a9:fa:54:6d:4a:4c:76:b5:55:c8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Mar  5 17:52:01 2024 GMT
            Not After : Mar  4 17:57:01 2025 GMT
        Subject: CN=3B1DC7ADA024DEF14F8EFDC9FB4E9DFB10B718A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:23:5c:fb:9f:4a:d8:05:ed:df:0e:e5:2d:
                    53:b5:8d:82:e0:95:57:23:65:00:33:e2:9f:0f:56:
                    45:24:f1:63:f3:1e:39:ff:2a:bf:b4:28:63:09:01:
                    3d:aa:12:8b:21:b4:80:74:a8:21:32:12:c4:f2:1e:
                    bf:c2:46:3b:86:44:53:d7:ed:48:03:cb:6d:d1:2c:
                    68:ab:be:e4:44:59:cc:7f:99:91:d0:fe:c0:ca:b4:
                    e0:dc:7e:c5:ed:a8:bf:a1:ac:f6:80:43:d5:59:6a:
                    94:97:ee:b1:c3:3b:73:a1:65:5c:f9:95:52:30:fc:
                    a0:c0:40:24:b3:78:29:3a:c9:51:fa:8d:3d:a8:a4:
                    1f:20:18:be:7f:15:da:e3:6e:35:1a:7b:f9:89:78:
                    91:84:e6:95:5e:6c:a0:7c:7c:f3:7d:56:2e:ab:ab:
                    28:e0:5c:54:e5:c0:d3:e9:0c:a4:81:cd:91:d1:38:
                    97:de:f0:b4:54:a2:d9:7c:16:01:f0:e6:04:b1:31:
                    73:8f:4b:e4:fa:77:96:f6:7c:f1:53:b3:aa:a6:3b:
                    fc:91:4a:67:fe:6b:ec:61:d6:84:1a:4a:1f:95:15:
                    1c:3f:dd:7f:3c:69:d0:30:46:26:5d:e9:f3:9c:51:
                    21:ee:a3:3d:c7:3c:59:f3:e3:d1:d9:ee:38:c9:e5:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1D:C7:AD:A0:24:DE:F1:4F:8E:FD:C9:FB:4E:9D:FB:10:B7:18:A3
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:70:77:87:42:c5:21:47:92:16:8f:5d:cf:3e:18:e0:ca:
         af:6d:bd:e8:1d:ce:57:c2:20:09:a9:9d:3e:b3:62:78:94:1a:
         34:8e:9a:b1:40:dc:08:c4:8c:e4:32:c0:50:e9:ad:17:82:f1:
         05:46:8d:ee:09:ce:6d:9b:25:12:ac:de:f2:d9:f7:63:6e:77:
         fa:9f:bf:cc:5a:df:00:74:61:a2:ba:58:ae:8f:43:eb:b7:fb:
         6f:1f:72:de:dc:84:12:ae:46:37:ba:42:31:ef:b7:8f:60:44:
         7f:a5:3c:a0:26:45:a5:91:5d:b2:8c:a2:01:88:b4:86:77:26:
         0d:f1:91:01:4d:a9:01:79:7c:67:63:33:18:79:a7:3c:cc:62:
         f5:fd:7f:ae:dd:19:b3:ec:72:89:11:19:06:78:37:7d:8e:99:
         40:d8:09:1c:bb:fb:f4:72:f2:d5:32:a3:a9:4b:1f:66:45:22:
         af:77:48:a7:02:41:5f:f8:fa:56:58:30:77:58:05:c7:0c:fb:
         3b:16:a7:ee:36:f1:79:1d:b4:1b:e4:bd:c7:a8:4a:e4:03:04:
         07:f8:75:07:4f:9c:51:ee:e6:95:21:6a:40:85:e7:f6:98:f0:
         92:55:92:7f:f4:ff:99:80:a1:6f:11:0e:bd:f9:9b:12:9b:f8:
         2c:fb:ae:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:00 2024 by rpki-client on console-fra.rpki-client.org