Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3139302e3132322e3131322e302f32302d3234203d3e203237383837.roa
File:                     3139302e3132322e3131322e302f32302d3234203d3e203237383837.roa (raw, json)
Hash identifier:          tHgQwouXItJrfRJhJG9o5nWvniTsCHY26Qy1ZM2IOWA=
Subject key identifier:   09:4C:CE:51:84:3A:CE:AB:D0:05:8C:F4:F7:3C:5B:16:2A:0E:54:3E
Certificate issuer:       /CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
Certificate serial:       17F5E7F9E633CC709B610E2089B751E4A230E1F8
Authority key identifier: F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3139302e3132322e3131322e302f32302d3234203d3e203237383837.roa
Signing time:             Tue 05 Mar 2024 18:06:30 +0000
ROA not before:           Tue 05 Mar 2024 18:01:30 +0000
ROA not after:            Tue 04 Mar 2025 18:06:30 +0000
asID:                     27887
IP address blocks:        190.122.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f5:e7:f9:e6:33:cc:70:9b:61:0e:20:89:b7:51:e4:a2:30:e1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
        Validity
            Not Before: Mar  5 18:01:30 2024 GMT
            Not After : Mar  4 18:06:30 2025 GMT
        Subject: CN=094CCE51843ACEABD0058CF4F73C5B162A0E543E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:d8:80:21:18:a6:d5:e7:f6:de:c1:6c:2e:
                    d1:0d:1f:dd:ef:9b:eb:6b:15:84:a4:20:ba:56:8a:
                    84:32:26:57:66:fa:7b:f7:ba:38:68:3f:1f:04:fa:
                    4b:e0:eb:8a:32:3b:d1:32:45:18:57:8f:1d:79:da:
                    67:3a:14:5e:45:b3:cf:b5:57:31:10:46:b2:e9:f0:
                    1b:d7:e8:0a:8f:2b:c1:71:b4:2d:d2:1a:6c:91:3a:
                    b7:1d:cb:19:1c:d5:7a:f9:81:f8:77:d8:54:97:43:
                    d5:56:d9:50:5b:5b:59:b9:48:33:ac:34:39:2d:07:
                    1c:a4:e8:d2:30:eb:de:b0:2b:81:3b:14:69:f9:dc:
                    cd:ae:ca:5e:8d:6e:8c:29:af:54:32:e2:37:7e:b9:
                    0c:62:94:36:7c:62:4f:73:b5:0f:2b:95:b4:30:ed:
                    d8:3a:46:27:10:2e:64:69:07:ab:9b:93:37:c9:45:
                    c0:6f:a5:a8:be:66:73:54:e5:e7:d1:18:5f:e2:0d:
                    da:33:dd:dd:b7:1f:3a:6c:e1:54:04:c4:0d:55:21:
                    64:02:63:d6:bc:1d:61:34:14:52:73:30:94:de:b0:
                    29:0c:2c:0c:7a:94:c9:d2:b7:0a:d0:3b:b6:ff:e6:
                    e2:90:0c:a6:eb:67:ad:9f:47:05:97:39:79:7c:1f:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:CE:51:84:3A:CE:AB:D0:05:8C:F4:F7:3C:5B:16:2A:0E:54:3E
            X509v3 Authority Key Identifier:
                keyid:F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3139302e3132322e3131322e302f32302d3234203d3e203237383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:e6:09:fb:d7:27:fc:c2:a1:bc:07:1f:63:c0:b3:66:bf:
         3f:86:05:da:31:3c:a4:f6:9b:40:a8:32:3c:ff:4b:ff:44:1a:
         25:a8:79:27:4f:77:d5:2a:93:65:59:60:b4:bf:02:82:fa:ab:
         0e:3a:ac:d0:14:95:10:d8:40:96:66:23:71:3b:8a:0c:4d:83:
         53:fc:d9:2b:4c:f3:80:ff:ec:f3:72:40:08:16:0a:f1:a1:e9:
         6d:63:23:e2:8c:a6:69:70:63:2b:c2:13:40:45:d0:59:11:7b:
         3c:55:e2:eb:a0:13:ce:41:c6:22:05:c6:d8:a4:22:36:fc:dc:
         8f:33:61:aa:f6:d4:08:60:03:62:58:98:bd:d5:27:4a:f4:92:
         4a:e8:dd:f6:63:39:31:41:80:0d:ed:84:f4:f9:3a:61:9f:1b:
         a9:eb:f6:de:16:73:53:b6:14:5c:b1:04:e4:1c:f0:2e:75:45:
         9d:08:78:f5:6f:8a:f3:63:5b:34:bc:f8:0b:e1:c9:b6:3c:1a:
         6b:23:db:07:5a:c7:7d:bc:74:b7:cd:d3:94:3b:09:c9:cf:c5:
         7c:9d:18:fb:c6:4c:4f:18:c0:2b:96:a7:8c:4f:c6:e1:2d:16:
         44:25:6d:94:61:7d:06:a4:2f:6b:3c:84:b9:d2:32:d8:d0:a7:
         96:17:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:00:21 2024 by rpki-client on console-fra.rpki-client.org