Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa
File:                     3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa (raw, json)
Hash identifier:          yt+ISWLssoWcQmZBMLujIlns1Hjit6+WwxriTWgxyMI=
Subject key identifier:   17:E7:DD:6B:F2:2B:26:B4:7D:47:B2:41:F7:82:4D:B1:BA:2E:75:65
Certificate issuer:       /CN=7576B30485208191B54BA2BD59339967753E0699
Certificate serial:       1F8819FACE3D21670AEBB804039FAA3A144991CB
Authority key identifier: 75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa
Signing time:             Tue 05 Mar 2024 18:00:34 +0000
ROA not before:           Tue 05 Mar 2024 17:55:34 +0000
ROA not after:            Tue 04 Mar 2025 18:00:34 +0000
asID:                     13805
IP address blocks:        190.123.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:88:19:fa:ce:3d:21:67:0a:eb:b8:04:03:9f:aa:3a:14:49:91:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7576B30485208191B54BA2BD59339967753E0699
        Validity
            Not Before: Mar  5 17:55:34 2024 GMT
            Not After : Mar  4 18:00:34 2025 GMT
        Subject: CN=17E7DD6BF22B26B47D47B241F7824DB1BA2E7565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:40:81:f0:54:64:fc:4e:62:40:dd:f3:2e:
                    58:43:51:02:0b:f3:f4:41:b3:3b:ab:95:eb:ff:dd:
                    88:7a:b3:f0:d0:dd:da:21:49:22:ea:be:aa:23:5d:
                    2a:d6:a3:96:95:28:b1:f4:0c:e1:a2:f7:92:7e:38:
                    c8:36:5e:00:80:22:e0:70:1d:c1:af:3b:da:95:ae:
                    6e:d8:8f:a2:5c:bb:5f:63:2f:6d:3e:16:c3:b9:5d:
                    89:88:2f:7c:c0:cd:bd:ba:36:17:f3:a0:c9:33:a0:
                    d2:d0:c6:5c:2d:aa:67:96:1d:ee:3e:a2:60:64:4f:
                    bb:67:e2:21:ff:7c:85:7a:5c:af:4e:b4:15:42:15:
                    4f:bf:80:c4:b5:9e:a1:1b:60:c8:8e:8d:a8:68:02:
                    52:55:2d:15:72:2b:ff:de:b8:84:db:b6:00:d8:5e:
                    c7:cf:a0:92:23:3a:c1:f2:23:98:91:cb:3e:2f:26:
                    0c:e6:b3:5d:fc:7f:22:b4:08:ca:4b:33:b9:d3:b8:
                    e1:9a:e2:ef:7a:35:30:ba:81:5d:1a:ce:6a:f4:11:
                    7f:87:ee:54:f3:dd:93:6c:f5:f4:6c:3b:6c:b6:bb:
                    80:2c:e6:fc:c1:fe:9c:fa:72:e8:39:08:28:50:36:
                    68:dd:b3:49:38:bc:1b:70:0f:30:28:47:41:67:7b:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E7:DD:6B:F2:2B:26:B4:7D:47:B2:41:F7:82:4D:B1:BA:2E:75:65
            X509v3 Authority Key Identifier:
                keyid:75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/3139302e3132332e3132382e302f32302d3230203d3e203133383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:98:1c:6f:5d:8d:ee:d1:bc:45:74:cc:9a:92:5d:a4:14:02:
         89:c1:03:a2:04:f1:e9:54:77:38:35:ce:10:82:61:db:cc:a3:
         5d:ac:fe:74:40:0a:66:c3:26:64:36:f8:5c:09:94:ea:af:44:
         e9:74:03:5b:46:76:b0:bc:20:67:33:e1:f0:c4:6f:38:fb:c1:
         25:5a:75:d6:25:64:43:d7:82:31:47:b8:73:21:e2:27:ab:39:
         db:42:af:64:76:34:8f:b9:39:7d:03:87:20:b5:95:56:f9:91:
         05:70:10:ab:9f:88:fb:f4:ab:23:b6:18:3b:ee:e5:36:b8:46:
         75:10:a7:fd:d1:67:c0:4f:29:0c:e5:e6:6e:53:69:31:55:93:
         f8:f4:0e:d8:55:a5:fb:20:6f:87:a2:fb:a5:0f:02:88:86:cd:
         c7:c3:69:07:0d:62:1f:d9:e9:74:81:13:63:b2:c3:28:29:2f:
         f3:f2:bf:67:17:14:88:77:fe:b1:ac:04:4a:7d:f7:32:9c:b0:
         ba:35:62:62:57:6c:b3:5c:04:64:07:ea:aa:00:e5:7b:53:38:
         9f:be:63:d6:74:21:bf:de:72:3c:45:e3:41:9c:d1:20:5b:db:
         bf:d8:ce:54:7e:a2:5f:3b:2d:1f:e1:00:46:1b:87:58:5f:60:
         40:89:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:17:42 2024 by rpki-client on console-fra.rpki-client.org