Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa
File:                     3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa (raw, json)
Hash identifier:          EM5oiyLRCSwOM4AmjsLnf3VJENPA3c3yqPwFc8xsYO8=
Subject key identifier:   A7:44:CC:04:F8:5F:F8:B2:28:07:8A:73:0B:60:6C:48:FD:1F:96:02
Certificate issuer:       /CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
Certificate serial:       53BC8FEA78219959049C647E3CE373113D0991DB
Authority key identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa
Signing time:             Tue 05 Mar 2024 17:53:32 +0000
ROA not before:           Tue 05 Mar 2024 17:48:32 +0000
ROA not after:            Tue 04 Mar 2025 17:53:32 +0000
asID:                     267853
IP address blocks:        190.211.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bc:8f:ea:78:21:99:59:04:9c:64:7e:3c:e3:73:11:3d:09:91:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07
        Validity
            Not Before: Mar  5 17:48:32 2024 GMT
            Not After : Mar  4 17:53:32 2025 GMT
        Subject: CN=A744CC04F85FF8B228078A730B606C48FD1F9602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:38:5a:b2:c5:d7:19:84:de:54:af:1b:0e:
                    58:8e:2e:54:19:ed:1f:fa:20:f6:1b:7d:7d:83:a1:
                    9f:1a:71:fd:d2:3f:98:d6:8a:81:fe:c5:4a:9e:05:
                    5a:e8:7d:61:9f:49:41:7f:10:ae:bb:04:a8:8c:af:
                    4b:fe:f1:98:77:80:a8:26:ee:6e:e7:24:43:7c:df:
                    46:ff:df:e5:de:8f:ef:ba:40:38:a7:93:a7:7e:14:
                    db:48:01:e3:47:db:8f:05:63:25:c4:eb:f0:86:91:
                    17:86:52:a5:1e:34:a7:ae:df:30:6c:54:21:db:22:
                    71:ce:29:7d:6c:ac:62:f9:ae:eb:ce:52:05:77:bd:
                    c3:be:14:ba:7c:7c:d8:3c:87:2e:2f:05:84:05:f8:
                    ee:99:66:34:cb:f2:c3:2e:e9:b5:48:3b:a8:78:10:
                    88:48:fa:70:38:0f:6c:f3:7a:d2:e9:de:31:74:1b:
                    3e:c4:ee:14:32:e7:a8:1d:1f:73:2c:77:62:80:97:
                    87:d5:f8:36:f3:84:d4:5f:b4:f2:d8:ff:40:84:68:
                    8c:7a:71:dc:cf:25:8a:28:9c:af:86:4c:d1:8b:68:
                    23:0c:a5:ed:0d:b9:48:fa:90:84:f5:9b:fa:da:e6:
                    8e:37:46:06:f7:50:f3:19:07:a8:2a:4f:65:78:05:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:CC:04:F8:5F:F8:B2:28:07:8A:73:0B:60:6C:48:FD:1F:96:02
            X509v3 Authority Key Identifier:
                keyid:2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/3139302e3231312e3137362e302f32302d3230203d3e20323637383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:54:3a:bd:76:43:0a:4b:08:90:97:bf:de:1e:b1:4c:6f:cf:
         04:ff:8a:3c:1a:9b:b7:f2:50:02:ac:9a:69:30:ef:21:6b:ff:
         aa:90:50:c7:5a:0a:f1:6f:c4:18:14:45:7a:36:ab:0e:68:bf:
         28:a1:99:dd:eb:aa:95:79:ee:ce:dc:9e:14:0d:50:7d:23:51:
         4a:be:80:50:da:dd:b6:34:b9:a8:69:c6:66:6c:3b:9b:a3:74:
         fb:91:20:d0:26:b1:f7:16:50:5e:96:cd:bb:bc:0f:1e:c4:86:
         33:9e:fd:d7:97:27:30:94:a9:01:fe:09:85:da:ef:69:13:0a:
         41:da:65:f7:0b:77:ce:a6:7c:d8:a6:81:41:10:ab:4d:63:34:
         f6:5b:c9:9a:d2:0f:77:ff:7e:94:87:c7:e5:06:7c:06:a0:76:
         b8:7c:50:3f:c3:4b:dc:72:4d:a1:9f:06:44:07:40:dc:fd:f3:
         b7:c0:68:3f:de:ac:4e:a8:ce:79:c3:a7:6c:a4:48:09:22:5c:
         6b:c4:e2:3e:bc:5c:5d:c6:c6:76:3a:23:ce:1d:a8:40:a0:a8:
         ed:56:0e:0a:55:1e:19:e1:20:47:f1:c0:25:5f:8a:a6:c7:f2:
         21:bc:c8:49:fa:b8:2e:1d:85:56:73:b8:8a:8a:96:c4:9b:bb:
         c1:33:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org