Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa
File:                     3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa (raw, json)
Hash identifier:          khDp7sPa07zDOKDowdXyGAAWsB1NpKEJGvh3BVA1ero=
Subject key identifier:   D6:8F:0B:91:04:1C:92:86:5C:9C:20:E4:0F:C3:BE:23:30:26:8B:35
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       3F68B77AA29F02233DF9AB5F223C176F7DFB7BB2
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa
Signing time:             Tue 05 Mar 2024 17:44:45 +0000
ROA not before:           Tue 05 Mar 2024 17:39:45 +0000
ROA not after:            Tue 04 Mar 2025 17:44:45 +0000
asID:                     265768
IP address blocks:        190.112.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:68:b7:7a:a2:9f:02:23:3d:f9:ab:5f:22:3c:17:6f:7d:fb:7b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Mar  5 17:39:45 2024 GMT
            Not After : Mar  4 17:44:45 2025 GMT
        Subject: CN=D68F0B91041C92865C9C20E40FC3BE2330268B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:a2:9a:11:80:ea:9f:13:53:9a:64:ff:7a:
                    f6:ad:23:65:78:dd:bd:5b:90:05:5c:9f:f7:e3:0b:
                    f5:84:23:1b:3c:96:53:b0:63:dd:5e:97:3d:b3:23:
                    e6:67:4c:d1:20:11:41:74:85:8a:95:57:ec:29:28:
                    6f:14:af:15:dc:d4:ef:11:d9:dd:0a:47:3f:ba:18:
                    3e:45:5b:a8:b1:bf:e5:78:d2:a5:35:f2:49:22:13:
                    3c:98:db:89:7f:12:59:cd:13:2b:1c:7e:3c:70:a9:
                    2b:01:9a:59:61:f5:ba:8a:2a:ff:fb:df:29:e9:d5:
                    0f:7d:6e:87:5c:be:0d:a9:15:f9:4c:50:cf:97:e8:
                    4e:f3:9e:ab:b0:28:61:d2:77:af:48:6c:e0:17:32:
                    82:f6:d7:0b:23:f2:4f:66:fb:1f:da:c0:81:92:2b:
                    82:1f:ee:19:d5:eb:a2:1c:c3:3c:fe:41:e2:44:2b:
                    9a:e5:3f:ea:0f:d7:45:b3:5f:cd:ab:7a:36:a1:26:
                    84:c7:2b:7f:d3:0b:4a:8f:3e:fc:43:ad:45:34:fd:
                    e8:f5:be:f7:bb:6d:f0:95:91:6c:53:0b:82:79:05:
                    a6:c9:52:6a:bd:cd:ea:98:b3:6d:c3:46:07:0d:3c:
                    c8:af:e8:af:53:52:5b:d0:14:60:3d:13:ca:df:bc:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:0B:91:04:1C:92:86:5C:9C:20:E4:0F:C3:BE:23:30:26:8B:35
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3231203d3e20323635373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:7d:99:0a:fe:4f:2e:17:bd:8b:95:60:f1:35:ae:60:e2:
         91:a5:7b:21:cf:6c:52:c1:f9:78:72:54:1e:e0:50:5d:73:87:
         1f:cc:5f:2e:7e:1c:04:2d:88:5b:dd:21:3b:81:e0:ff:0c:2c:
         a1:9f:fe:9c:87:1d:2b:a7:1b:ac:36:64:95:72:86:11:58:bf:
         71:9f:6e:ae:50:1a:df:7e:8f:db:28:b9:53:55:d1:5e:c1:d1:
         9f:69:c6:5f:a1:b0:3d:78:81:e2:10:9f:8a:25:3d:98:ee:3c:
         7f:4b:dc:6e:1f:b7:af:6a:fb:36:29:b6:a9:ae:e7:af:f5:01:
         ff:ee:b3:63:c4:ad:84:8e:4b:a1:99:a5:cd:8d:bf:94:d0:59:
         35:19:b1:03:09:e0:87:f2:60:8c:0e:5f:22:fd:08:06:31:48:
         01:02:fb:32:88:00:63:7f:42:07:50:c4:e4:e7:28:97:2d:0a:
         f8:80:46:f2:15:7e:bd:05:4e:1d:4c:55:bc:ff:21:9d:08:07:
         57:e7:33:5f:1e:c2:85:2c:5d:d8:81:b0:42:bd:56:78:86:a5:
         89:07:a3:57:55:ae:8b:ad:65:97:b1:57:f6:fa:05:e9:66:1a:
         42:1e:d3:af:76:8c:c4:ea:bb:1a:00:32:c6:0a:7c:91:1c:2f:
         d8:e3:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:47 2024 by rpki-client on console-fra.rpki-client.org