Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa
File:                     3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa (raw, json)
Hash identifier:          phZgcYw4EB2fsW2pcdpf33b0e0EdYboFSiUJDUJWx/k=
Subject key identifier:   A7:18:71:B1:76:CF:A4:BD:67:54:49:2B:76:8C:00:EF:1F:D2:8F:36
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       2CD958217467683591D908CBED0E5EA5A5B111AA
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa
Signing time:             Tue 05 Mar 2024 18:15:11 +0000
ROA not before:           Tue 05 Mar 2024 18:10:11 +0000
ROA not after:            Tue 04 Mar 2025 18:15:11 +0000
asID:                     27665
IP address blocks:        190.213.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d9:58:21:74:67:68:35:91:d9:08:cb:ed:0e:5e:a5:a5:b1:11:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Mar  5 18:10:11 2024 GMT
            Not After : Mar  4 18:15:11 2025 GMT
        Subject: CN=A71871B176CFA4BD6754492B768C00EF1FD28F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:51:86:4b:19:68:ab:61:ce:30:f6:37:cc:f1:
                    84:17:c9:93:fc:7b:58:8d:dc:34:fe:7c:a3:92:ae:
                    22:18:2d:71:65:80:e6:3a:ad:22:d5:cf:e9:19:60:
                    e0:1e:b0:39:0d:e0:f0:04:7e:88:29:1a:52:60:a0:
                    27:9f:9e:cf:21:49:49:2f:3e:d4:82:ef:81:c9:f9:
                    53:83:b3:07:35:24:ae:c0:14:2e:39:06:91:07:c2:
                    9e:72:99:aa:9a:3d:d8:5e:e3:7b:be:45:b6:55:bb:
                    9c:47:d9:0f:8f:c6:de:4d:26:41:e9:79:68:f2:13:
                    b6:d6:28:1d:14:52:1a:36:94:03:fa:3b:7b:5b:e9:
                    06:e6:4f:2c:5c:af:00:27:0e:6f:50:a4:9e:e2:36:
                    dd:91:5a:2a:29:05:28:93:d7:77:08:a6:6b:6d:3b:
                    be:53:d8:b7:95:f6:d3:71:38:4c:3d:07:b0:af:94:
                    f2:28:1f:80:4b:b7:89:38:37:56:14:2a:cf:f5:31:
                    48:40:a7:ad:6b:2f:d5:51:47:af:56:ab:1d:6e:81:
                    81:b6:be:50:1b:69:3c:ce:cf:49:6a:6c:7c:5d:a6:
                    b4:53:43:da:17:62:a9:a3:d9:f8:a6:cc:14:4b:6b:
                    a6:d6:71:bb:d3:62:a3:ae:16:f5:35:c8:45:e1:39:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:18:71:B1:76:CF:A4:BD:67:54:49:2B:76:8C:00:EF:1F:D2:8F:36
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e3132382e302f31372d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.213.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:97:0f:d0:f8:c8:a7:30:2b:ca:60:af:f7:b4:34:5f:3b:a6:
         f1:63:fa:4f:44:7a:aa:d0:ed:be:f6:a6:89:4f:e1:a9:d8:01:
         2f:26:1e:e4:99:c8:e3:04:42:9c:9b:a8:dc:88:84:7d:59:cb:
         c0:ab:99:24:ff:fc:0b:bb:2e:8e:9b:b9:0f:01:e3:19:25:17:
         4c:5c:8e:2c:1d:ff:35:ce:5f:99:71:1c:1f:89:3d:2d:6b:60:
         f7:2f:66:30:2c:a6:79:be:a9:2c:55:7b:d8:3e:16:a5:f8:00:
         98:40:47:13:b7:eb:4c:b5:33:ce:a3:0e:a5:b6:c7:05:15:d0:
         47:f0:2b:86:b2:e8:42:4d:bb:67:d8:9f:13:74:96:88:6b:05:
         aa:30:9e:88:be:54:dc:32:ab:a8:6a:70:bf:97:9b:57:2a:33:
         bf:24:a0:4f:ca:4b:32:31:5c:0e:a6:f8:e5:0b:1e:40:f7:75:
         88:2a:67:9f:38:74:d3:d3:8b:ba:df:69:70:f7:dd:3e:10:ea:
         5c:96:cb:da:ce:4c:9f:78:f9:71:7d:f2:a9:8a:2e:c2:3c:9a:
         3c:25:15:f8:ac:b8:08:4f:b1:7e:ec:6f:43:c6:73:a4:0d:b7:
         7d:b7:6c:5d:30:2f:66:ed:22:74:02:fe:77:b6:2c:62:95:84:
         97:f6:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org