Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa
File:                     3139302e39352e3132382e302f31372d3234203d3e203237393437.roa (raw, json)
Hash identifier:          gHRJ2/eGDKlsmwVtU8CUS3AKYyIAdLLGGm2s9fa1xF4=
Subject key identifier:   E3:77:04:D6:B5:49:D7:CD:1A:E0:C7:C0:05:33:88:12:6D:D5:2C:BF
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5342C9D9766DA4C2B45B7A35B81A2BA12B21BFDE
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     27947
IP address blocks:        190.95.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:42:c9:d9:76:6d:a4:c2:b4:5b:7a:35:b8:1a:2b:a1:2b:21:bf:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=E37704D6B549D7CD1AE0C7C0053388126DD52CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:ee:7d:c0:dc:cc:88:34:b3:0a:37:fa:ee:
                    90:9a:90:20:0d:e9:5a:cc:71:3d:b6:5a:c7:23:a3:
                    cf:0d:d9:f8:02:c2:03:c4:ba:c4:cc:34:48:62:e1:
                    94:9e:bd:bf:f1:bd:10:ae:bb:76:dd:83:5f:eb:a3:
                    d7:f4:31:65:06:59:d4:e1:86:89:31:ce:3a:ce:a4:
                    71:20:1b:e4:48:e5:f1:ea:39:13:28:77:58:43:e0:
                    18:1c:2f:a9:ad:34:61:00:36:3f:a8:7d:0e:8d:4e:
                    49:84:00:ca:fb:87:36:20:de:99:3d:5c:7e:22:ac:
                    92:c9:c3:dd:b6:b1:24:14:d6:c1:0a:61:b7:8b:a8:
                    22:99:82:7b:87:4a:11:1b:62:01:1f:9b:0b:ee:75:
                    e5:1b:11:80:42:c2:4b:cf:af:1e:a6:d6:13:94:b0:
                    cb:a1:36:a3:64:1b:60:3d:37:cc:fc:e2:47:a6:13:
                    8e:fd:0f:aa:9c:3d:8e:78:49:0e:33:e8:72:7d:74:
                    9a:2b:9a:62:2b:83:93:ce:37:3f:54:04:8a:75:7f:
                    09:bf:bf:65:bb:aa:09:95:e4:b0:58:17:6b:d4:3c:
                    5b:3c:ce:8c:5f:7f:e9:0f:5d:9f:bc:f9:13:10:7a:
                    66:3b:03:96:f4:e4:e9:da:2a:65:8b:03:c5:b4:c7:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:77:04:D6:B5:49:D7:CD:1A:E0:C7:C0:05:33:88:12:6D:D5:2C:BF
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.95.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:52:94:05:03:82:5e:ce:9f:92:5f:b1:b1:cc:26:a6:8f:ca:
         79:18:6b:4f:da:86:3b:9c:1f:e7:dd:98:28:fd:7b:dd:af:d8:
         85:26:cc:77:79:5d:24:73:24:6e:27:05:cc:70:61:43:96:d8:
         46:42:22:36:d7:d4:c9:5f:73:22:6f:82:85:7d:d6:36:03:a4:
         67:b5:8b:3d:e0:6f:25:24:28:f2:f3:ac:d3:3d:90:0c:db:3e:
         63:7b:43:1b:93:72:4f:a6:97:b6:9d:ce:af:56:df:3f:8e:12:
         3f:e5:1e:45:29:9e:f2:0e:6e:15:a1:11:40:d4:88:ba:0d:3f:
         fb:6d:ab:1d:06:39:21:38:09:bd:37:e7:52:9c:76:8b:b7:0f:
         2f:d4:16:5b:6e:e2:76:10:ee:96:42:62:c6:ba:97:4a:30:d8:
         1a:21:9a:5f:e6:fc:5f:ac:91:8d:a9:3d:43:ac:5b:5c:36:30:
         58:40:4c:31:ae:13:83:09:9f:5d:db:4b:22:e6:34:97:7b:fc:
         c0:c0:00:c5:6f:1e:e1:3d:63:13:a2:c4:62:65:64:7e:92:46:
         fa:ff:d4:d5:9c:4e:84:4a:eb:29:39:56:00:36:4c:ed:45:f2:
         31:76:18:f5:26:a0:3e:d7:14:a9:d6:12:ce:29:e6:b6:42:95:
         f2:65:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:33 2024 by rpki-client on console-ams.rpki-client.org