Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3139302e372e39362e302f32302d3234203d3e203237393735.roa
File:                     3139302e372e39362e302f32302d3234203d3e203237393735.roa (raw, json)
Hash identifier:          2Axk8UO1swpQwzJGIk39i0RMIzualuS+mj365VHwfks=
Subject key identifier:   B7:2E:31:EB:A6:BD:E1:24:8B:35:7D:AA:C7:59:DE:ED:E1:32:5B:46
Certificate issuer:       /CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
Certificate serial:       122FEE2645A149FD1D7A055D541B003B962B407F
Authority key identifier: 5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3139302e372e39362e302f32302d3234203d3e203237393735.roa
Signing time:             Tue 05 Mar 2024 17:43:23 +0000
ROA not before:           Tue 05 Mar 2024 17:38:23 +0000
ROA not after:            Tue 04 Mar 2025 17:43:23 +0000
asID:                     27975
IP address blocks:        190.7.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:ee:26:45:a1:49:fd:1d:7a:05:5d:54:1b:00:3b:96:2b:40:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
        Validity
            Not Before: Mar  5 17:38:23 2024 GMT
            Not After : Mar  4 17:43:23 2025 GMT
        Subject: CN=B72E31EBA6BDE1248B357DAAC759DEEDE1325B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:eb:cf:a2:c5:e1:1f:a6:0e:13:be:bb:58:
                    0c:3d:b9:6c:33:63:18:21:42:08:42:07:8e:65:9e:
                    06:31:94:6f:d7:b1:57:45:fa:4e:1b:7e:ce:47:57:
                    02:54:41:ed:da:2c:b0:35:ab:93:57:d5:d7:fc:c6:
                    e3:42:db:a0:40:18:5e:78:e5:2d:3d:6e:59:43:2d:
                    50:8e:5e:28:c4:5a:93:ee:81:90:c2:fd:bc:8f:29:
                    66:18:a1:05:4b:fc:9c:f5:ce:28:55:88:05:76:75:
                    a1:d0:91:f9:3e:b0:20:5c:a1:9c:7b:29:d0:92:4c:
                    cc:da:81:59:fd:37:12:6f:42:46:e5:05:37:d4:72:
                    03:9b:1b:e8:86:a8:95:85:79:4f:67:ac:d4:83:3c:
                    5d:8b:f9:dc:ba:4c:d3:c5:3c:fe:ef:df:d4:18:e5:
                    97:bb:d7:a1:b1:3c:cb:92:bb:6e:71:0e:74:74:1e:
                    60:3a:e6:e1:18:a6:e4:46:7e:4d:5a:32:4d:d1:3e:
                    f0:d5:09:a3:9b:67:68:6f:b0:34:06:ab:36:c9:b1:
                    61:5a:ed:ac:a0:e3:0f:63:99:67:6f:91:37:a9:12:
                    1d:a7:a0:ea:e1:d3:b9:08:7d:b4:da:4f:ea:a8:ce:
                    0b:49:f3:f8:37:21:27:36:47:91:f2:fb:9b:cc:3f:
                    36:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2E:31:EB:A6:BD:E1:24:8B:35:7D:AA:C7:59:DE:ED:E1:32:5B:46
            X509v3 Authority Key Identifier:
                keyid:5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3139302e372e39362e302f32302d3234203d3e203237393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:3e:ce:76:2f:83:97:89:00:77:94:f7:fa:9f:4c:10:78:
         78:3e:da:bd:21:14:46:57:2c:69:34:1b:70:a4:25:d7:83:89:
         1e:6b:5f:57:8b:96:2a:21:25:f5:f6:50:32:4e:ed:f0:3b:67:
         ff:08:7a:58:2a:9e:50:e5:9a:dd:d3:c9:5f:62:08:69:99:df:
         45:cb:86:24:e4:2c:19:4c:66:64:10:ba:5d:c0:46:c4:cc:19:
         3d:e5:91:c0:49:87:6f:58:7e:80:64:aa:e6:de:00:4d:84:07:
         af:fc:90:00:0b:22:97:7f:6f:98:9a:90:85:4c:0a:29:1a:d9:
         aa:55:9c:3b:2e:11:b7:24:c1:38:b5:c0:d6:10:5b:69:2b:fd:
         ce:71:d7:60:d2:b9:90:d1:96:9a:4e:bf:65:24:0f:fe:68:0a:
         21:3b:62:cc:76:3d:36:f2:10:7e:f2:c4:3e:61:d5:2c:14:80:
         40:05:80:85:3b:32:54:f2:c3:cd:13:8d:5d:cb:71:72:b2:e0:
         7d:7d:a4:4c:60:ee:46:32:60:30:90:29:12:c3:67:79:d7:f8:
         fe:67:38:1b:a2:46:4e:db:4a:bc:41:a8:fb:c5:30:83:cf:79:
         04:a2:5a:52:11:2a:5a:78:12:3e:64:b4:be:45:f8:fc:5d:00:
         1a:b4:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org