Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3234203d3e203532343039.roa
File:                     3139302e3132302e3137362e302f32302d3234203d3e203532343039.roa (raw, json)
Hash identifier:          LR1NFzC1e7jJEQO9Ztj1WjaRdDSGwmaQEgS4aBfQRcY=
Subject key identifier:   2C:70:55:35:59:75:B8:26:C5:BC:CA:2D:B7:4B:27:EC:DB:22:BC:33
Certificate issuer:       /CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
Certificate serial:       0930840E29E03EFFA080BA41E3271BDD7AB3ADCD
Authority key identifier: 77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3234203d3e203532343039.roa
Signing time:             Tue 05 Mar 2024 17:51:53 +0000
ROA not before:           Tue 05 Mar 2024 17:46:53 +0000
ROA not after:            Tue 04 Mar 2025 17:51:53 +0000
asID:                     52409
IP address blocks:        190.120.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:30:84:0e:29:e0:3e:ff:a0:80:ba:41:e3:27:1b:dd:7a:b3:ad:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771AF1546674A5AF0E840AB47513D4E5AB59822F
        Validity
            Not Before: Mar  5 17:46:53 2024 GMT
            Not After : Mar  4 17:51:53 2025 GMT
        Subject: CN=2C7055355975B826C5BCCA2DB74B27ECDB22BC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:aa:aa:e0:64:f9:91:22:9c:e2:c2:3b:e1:
                    24:9e:e0:ba:3c:49:05:2a:79:6c:3b:fb:97:85:3e:
                    d4:20:ba:5a:b9:14:1e:18:d1:84:26:44:90:00:0b:
                    78:3e:d8:03:14:24:39:8d:47:a8:eb:9e:c5:a4:06:
                    e2:17:d1:47:f1:2b:5e:63:a9:fc:6f:a4:6e:cd:1d:
                    c5:81:d7:da:d0:b2:8c:56:95:05:b8:60:e1:96:a8:
                    81:52:4b:18:82:a9:cc:9a:47:e5:46:37:64:ea:b6:
                    55:04:b3:e3:09:b3:12:c5:fb:56:d1:a4:fb:0b:41:
                    d1:cc:2c:94:fc:92:49:db:44:82:41:67:ec:ac:71:
                    07:ab:fc:d1:55:d9:25:02:a3:bb:97:10:56:70:0e:
                    c0:10:86:af:84:24:25:7d:66:be:2b:db:8b:89:fe:
                    d4:49:8b:c3:21:f6:5a:2f:40:3d:d1:57:5b:5b:97:
                    7c:fb:7b:94:6d:01:4e:78:ee:01:ec:bf:56:be:d4:
                    11:c8:e4:ed:29:00:99:5b:30:2b:d6:84:b2:ae:74:
                    9e:6c:95:c8:16:a5:5b:54:58:c3:73:1d:97:a5:6e:
                    62:6a:04:12:5e:6e:2f:54:2d:c5:09:09:bf:b5:4a:
                    a8:d6:40:13:37:23:a5:7e:3b:57:b9:f9:e0:e7:f1:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:55:35:59:75:B8:26:C5:BC:CA:2D:B7:4B:27:EC:DB:22:BC:33
            X509v3 Authority Key Identifier:
                keyid:77:1A:F1:54:66:74:A5:AF:0E:84:0A:B4:75:13:D4:E5:AB:59:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/771AF1546674A5AF0E840AB47513D4E5AB59822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B825E887AB4E5105996D0F6C3EBB29DDFE56D86F0ECFAE227F9ADF657BB1AA/0/3139302e3132302e3137362e302f32302d3234203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:35:1c:ef:27:ce:6e:84:ba:5e:0d:0e:91:93:7b:eb:ac:
         ff:3d:05:66:85:8a:0f:10:89:cc:d9:0b:de:87:97:af:7e:72:
         58:88:01:56:7a:34:39:ac:05:97:0b:ec:44:53:d8:4c:18:53:
         f6:83:57:69:65:81:03:bf:cf:8c:24:98:0d:b7:7e:66:52:d6:
         a5:5d:a8:08:92:5f:b3:aa:e0:61:29:a4:f6:a9:ae:54:6e:69:
         4a:59:00:1b:b3:fc:35:9d:b7:40:01:db:45:b8:61:22:57:1f:
         de:27:9d:df:ed:80:58:b4:57:6b:52:34:b5:86:d3:53:0a:f0:
         f4:99:f1:87:1a:c7:f8:24:40:63:a9:43:64:cb:5e:89:f5:ad:
         cf:51:ff:2a:e5:bc:f7:59:10:ae:ad:78:8c:22:0d:b6:c8:42:
         38:e0:49:8b:b7:f8:51:b1:dd:18:13:b0:b8:4d:66:13:b1:f5:
         e4:d3:ad:71:03:0f:ec:5d:52:7e:56:6d:7a:48:c0:dd:48:80:
         38:5d:2e:3d:0a:00:5f:57:d0:fa:2a:84:4f:a4:00:64:9b:20:
         29:d4:fb:c2:30:0d:56:9e:bd:02:9d:d8:0b:92:35:bd:21:11:
         7f:39:03:ce:8c:24:13:ef:1b:33:b0:fa:02:58:37:7e:6c:e6:
         7d:89:bc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:24:11 2024 by rpki-client on console-ams.rpki-client.org