Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f32302d3230203d3e203237373235.roa
File:                     3139302e362e36342e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          p4whUR7NZYlcTTjXKJZnaalWO27qs5GsQBEn96pNTDY=
Subject key identifier:   53:90:44:F8:F3:4C:B1:A6:4B:3F:2E:F2:05:54:4A:29:02:42:28:BC
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       72C304B32D7907F6429C2E2017E801D5D80A47D0
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 18:04:58 +0000
ROA not before:           Tue 05 Mar 2024 17:59:58 +0000
ROA not after:            Tue 04 Mar 2025 18:04:58 +0000
asID:                     27725
IP address blocks:        190.6.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:04:b3:2d:79:07:f6:42:9c:2e:20:17:e8:01:d5:d8:0a:47:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:58 2024 GMT
            Not After : Mar  4 18:04:58 2025 GMT
        Subject: CN=539044F8F34CB1A64B3F2EF205544A29024228BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:9c:e3:f9:e2:f8:50:19:f7:ef:d0:55:30:
                    a9:f8:94:47:ff:1a:fa:e2:90:48:94:c8:ca:ec:23:
                    b5:13:f4:c8:fb:8b:77:52:6e:54:5b:cd:0e:fe:3e:
                    c5:fa:11:c5:63:90:e9:9b:97:83:12:97:f4:ac:75:
                    80:16:f1:c5:72:12:3b:51:68:c8:34:ab:27:24:d1:
                    e5:46:a2:66:8c:a5:49:b7:e8:ad:e9:e8:01:81:a2:
                    be:df:30:5a:0f:8a:e9:99:d6:ff:7a:a0:78:9f:8e:
                    55:b5:15:a8:4b:26:63:09:7d:b0:f7:70:a6:f4:79:
                    98:de:d2:9e:fc:32:5e:61:fb:ae:4e:79:9c:67:a9:
                    62:8a:58:23:d6:d0:76:d4:52:f1:17:ac:54:30:05:
                    33:9c:8a:83:9a:6c:74:4d:f2:e1:52:ec:0f:09:8c:
                    d7:95:50:44:09:3b:f8:d7:ca:95:17:cf:4a:04:b5:
                    9e:97:ce:57:9d:6e:1b:65:ea:22:b9:e8:44:27:91:
                    bf:c2:a4:f1:da:46:ea:30:c2:ff:d5:a8:b3:de:7a:
                    ba:b1:e0:61:bb:86:8f:ed:28:8b:f9:a2:06:59:f3:
                    1b:37:ee:0f:b5:21:a0:81:eb:ba:a2:b7:51:e3:23:
                    1d:55:df:b7:ef:10:18:ad:dc:e2:8c:2b:8c:80:f7:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:90:44:F8:F3:4C:B1:A6:4B:3F:2E:F2:05:54:4A:29:02:42:28:BC
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e36342e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:bf:e3:b8:de:75:d1:26:dc:48:f1:5e:3b:3e:f1:7d:39:
         ec:db:08:f9:43:29:df:cc:cd:b5:36:66:cc:d6:12:69:c7:d5:
         a5:1e:75:11:bd:5f:2e:e1:40:a2:c7:75:80:1b:c6:16:ec:1c:
         72:3b:32:5a:1f:8c:c3:fb:3c:43:d8:77:fa:60:0f:24:d4:bc:
         e5:03:e4:90:6c:88:e7:2c:5b:96:66:0d:fa:ee:fc:48:38:44:
         96:be:72:69:1b:39:3d:e8:4f:e9:d6:ba:ec:12:c8:ee:e2:e6:
         40:5e:3b:9d:d8:41:45:6a:24:5e:f6:08:00:4f:b3:8d:43:e3:
         a3:75:f9:a3:86:a4:bd:f9:23:b7:fe:a6:50:a5:53:3e:d1:5b:
         84:e8:24:47:49:3a:b7:46:9a:96:9f:1d:aa:5e:09:ce:b7:bc:
         49:fd:a9:3d:68:07:df:ba:d1:98:fe:1e:92:07:05:cb:6c:d5:
         e6:18:89:25:b5:5e:1a:03:88:d3:e8:0a:70:24:d7:6e:53:34:
         f9:c7:9f:49:d3:42:df:be:bb:ff:41:dd:70:ea:0c:d0:9e:c2:
         a2:9b:57:3d:25:b0:a1:d4:45:79:24:47:e5:e0:19:3b:87:86:
         d5:8d:55:05:ad:4a:6b:c1:73:d4:c1:e2:90:61:9a:3b:6e:8e:
         ca:f2:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org