Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e38302e302f32302d3230203d3e203237373235.roa
File:                     3139302e362e38302e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          DlK7ntujSHc2jYNdzpSRlZwqWUfD6s/BPZGfKkaNsYY=
Subject key identifier:   2C:B3:7F:CA:F8:3F:2B:D4:DB:57:E3:2B:66:DC:BB:6B:8D:D6:2A:A7
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       2E50FB78E1ABCD7C93262245A8D4614283252CEB
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e38302e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     27725
IP address blocks:        190.6.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:fb:78:e1:ab:cd:7c:93:26:22:45:a8:d4:61:42:83:25:2c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=2CB37FCAF83F2BD4DB57E32B66DCBB6B8DD62AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:99:3e:24:7c:f0:1a:a6:68:a2:b4:d6:40:
                    c9:30:c2:29:f1:3b:16:5a:34:bb:67:4b:4a:8f:d9:
                    2a:08:a6:a2:de:97:de:50:32:c7:b7:f3:a6:3b:30:
                    91:05:78:f4:ac:14:ea:32:5b:12:69:69:bf:3f:86:
                    84:fd:db:ed:3d:9d:f7:fb:32:cf:81:20:89:9b:18:
                    d0:46:81:2a:5a:01:b9:87:6e:74:7a:51:44:55:06:
                    45:34:fa:92:b5:3f:b0:23:b7:66:14:1c:a8:29:64:
                    06:50:df:43:a9:4c:8d:29:3b:dd:56:b0:a1:ea:0d:
                    9d:1e:9c:f5:03:06:0c:73:09:44:5c:a2:d8:d7:27:
                    06:fb:25:ab:d7:8c:9d:6c:16:27:d6:51:41:6a:8a:
                    19:3f:46:ee:65:be:98:4e:6f:59:99:9c:36:0e:64:
                    18:20:d0:9c:db:f3:9b:97:9a:5e:c5:15:06:db:26:
                    8b:57:ac:5e:36:29:30:cd:a0:9a:2c:33:b6:cb:3c:
                    57:52:f1:e8:6c:6e:2c:98:e9:a1:75:60:f1:5d:ee:
                    59:b2:57:b1:06:0e:94:ba:24:bc:f8:94:8c:a0:ce:
                    15:fc:f5:7f:e9:8a:9d:c4:d1:1f:09:25:60:c6:cb:
                    16:4b:8b:e7:73:e9:1b:cd:5a:ac:fd:3c:0d:d3:d6:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:7F:CA:F8:3F:2B:D4:DB:57:E3:2B:66:DC:BB:6B:8D:D6:2A:A7
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e362e38302e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:14:a3:c1:44:f9:74:ad:58:81:e9:ed:d3:eb:c5:e6:c1:95:
         84:b4:41:4a:c4:2e:b7:ea:fe:8a:03:42:ad:d0:ab:d5:1e:c5:
         3b:72:4a:a0:d2:f9:a2:0d:89:b9:ac:ef:57:25:dc:e4:f1:d1:
         d4:b7:5a:46:1e:5b:6e:f0:f0:28:30:09:be:e7:01:3d:3c:16:
         b7:73:23:a6:c9:ff:e4:76:0a:e0:e1:02:95:78:d1:d4:12:f7:
         39:eb:dc:9d:97:39:39:65:2f:32:85:98:ff:ed:ad:7b:ac:2e:
         ce:5d:45:ab:ba:3a:25:dc:85:50:33:87:42:f3:11:9e:38:1e:
         81:4b:9e:0a:31:19:99:94:f3:12:b6:b7:13:e4:dd:79:9c:97:
         58:12:bc:1d:a2:d8:9e:53:b9:8a:68:e2:83:a7:b8:38:89:0e:
         98:a9:b2:25:94:3c:9f:6e:b1:6d:8d:47:45:26:56:4f:21:6e:
         a6:90:e1:3e:1d:2a:97:a6:58:57:3c:43:ab:3e:d2:f9:01:54:
         50:fa:4a:80:80:39:30:4b:39:87:9e:8d:37:03:ff:ed:a0:cb:
         20:3f:d6:27:89:eb:44:4a:16:d7:d5:c9:75:13:5d:79:79:7b:
         e0:59:33:32:88:68:a8:ec:17:a6:d5:e7:86:08:cb:82:b6:6b:
         e5:12:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org