Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37322e302f32312d3234203d3e203237393032.roa
File:                     3139302e3130372e37322e302f32312d3234203d3e203237393032.roa (raw, json)
Hash identifier:          Im+qGaK+VI52D3eAi86msJMRPJtm6p9wtCslmhNMUFQ=
Subject key identifier:   07:BD:0F:A8:58:57:C9:F2:21:CF:2F:A0:66:FA:D6:4B:23:A3:68:90
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       2508C577BF6B099DAB2E396207F8D1606D80161A
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37322e302f32312d3234203d3e203237393032.roa
Signing time:             Tue 05 Mar 2024 17:57:02 +0000
ROA not before:           Tue 05 Mar 2024 17:52:02 +0000
ROA not after:            Tue 04 Mar 2025 17:57:02 +0000
asID:                     27902
IP address blocks:        190.107.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:08:c5:77:bf:6b:09:9d:ab:2e:39:62:07:f8:d1:60:6d:80:16:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Mar  5 17:52:02 2024 GMT
            Not After : Mar  4 17:57:02 2025 GMT
        Subject: CN=07BD0FA85857C9F221CF2FA066FAD64B23A36890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:77:78:25:f1:94:ff:ba:b5:eb:08:6d:44:
                    7e:fa:5b:a2:5f:ab:c1:63:18:6f:ab:35:50:ea:d1:
                    3f:a6:f2:48:bf:d9:bd:cc:b0:4a:fa:a3:c0:50:66:
                    55:ba:91:95:46:8d:d5:8a:d3:83:e5:61:65:b5:a7:
                    49:1d:77:80:85:1b:4c:15:13:4e:31:26:54:33:85:
                    ee:af:92:f8:ab:4b:c4:91:56:09:89:cf:9a:19:40:
                    e5:66:6e:76:e2:04:d0:ba:f9:89:8f:c4:9e:cf:5c:
                    7a:20:40:cc:cb:3e:1a:50:94:49:15:b4:76:de:75:
                    31:4d:ee:d1:75:2e:ab:c3:d7:f1:ca:52:b5:39:50:
                    5b:84:d6:36:c8:cc:a2:4d:dd:8f:42:d0:94:e9:dd:
                    ec:61:d1:b1:a0:3c:4a:f5:8c:f7:c2:5a:69:86:ae:
                    f3:e5:e1:18:7a:c2:5e:33:0b:2b:b0:87:25:b6:71:
                    15:1e:be:00:92:05:b1:12:b6:3f:fc:9a:4e:88:81:
                    b0:38:62:0a:d4:6f:80:4c:43:26:7c:c0:1a:fa:52:
                    0b:68:9a:7f:19:cc:fd:6b:0a:05:38:e0:c4:33:3a:
                    c6:69:36:24:2c:4f:80:7c:d8:f8:78:8e:e8:16:50:
                    c1:74:7f:1e:2d:4c:03:dc:8e:dc:b2:76:91:92:d5:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BD:0F:A8:58:57:C9:F2:21:CF:2F:A0:66:FA:D6:4B:23:A3:68:90
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37322e302f32312d3234203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:18:68:6e:90:b2:73:7a:e5:58:7f:84:13:92:e1:7e:fa:89:
         47:37:63:d6:90:b4:f0:91:82:fd:c2:aa:00:19:d1:f5:03:b2:
         50:33:9a:be:a6:b4:7f:25:fe:fa:c2:63:f6:20:5e:91:86:a4:
         3c:3c:1c:a1:6a:22:f0:d6:63:eb:ad:86:7f:99:f7:07:2d:a3:
         c7:3f:82:8c:22:4c:43:01:2d:8b:94:9c:93:e2:5d:5e:03:85:
         9e:0e:d6:a3:ad:a5:b0:e0:1d:d5:22:aa:7d:be:d3:89:bb:b9:
         54:8f:0c:13:92:cb:17:f9:85:9e:ae:6c:fb:ee:7a:f7:f3:85:
         e0:41:c0:44:ca:0b:04:f3:06:f0:a3:31:12:b4:26:14:93:91:
         c1:3f:1b:70:4c:9e:7f:27:88:dd:11:c8:f8:bf:d0:7b:59:3d:
         5b:e8:7e:72:08:9e:ea:fd:7e:d7:1a:11:e8:28:dd:f8:41:86:
         42:01:13:a8:d9:0f:d7:ba:b9:78:e0:ce:c9:16:f9:fb:94:09:
         51:25:1b:5b:e0:77:e9:cc:a5:a2:10:21:d7:98:e6:34:12:9d:
         44:69:19:38:b1:9b:89:35:20:1e:81:15:a7:00:c6:41:8c:f0:
         39:57:44:25:36:5d:56:98:20:90:49:c7:53:c4:af:95:62:bb:
         74:c6:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org