Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33362e302f32332d3234203d3e20313734.roa
File:                     3139302e39332e33362e302f32332d3234203d3e20313734.roa (raw, json)
Hash identifier:          fnjWTLcCmRRwYVqIaHIoAA7wmBOEc06ZHOpKKkb4zOg=
Subject key identifier:   51:6B:BA:4B:7E:5A:5E:F5:15:EC:F7:78:0D:CB:36:EA:1C:21:BE:8F
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       72ACD32D734197787C39A4FA3D6A3E45911A3862
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33362e302f32332d3234203d3e20313734.roa
Signing time:             Tue 05 Mar 2024 18:10:28 +0000
ROA not before:           Tue 05 Mar 2024 18:05:28 +0000
ROA not after:            Tue 04 Mar 2025 18:10:28 +0000
asID:                     174
IP address blocks:        190.93.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ac:d3:2d:73:41:97:78:7c:39:a4:fa:3d:6a:3e:45:91:1a:38:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Mar  5 18:05:28 2024 GMT
            Not After : Mar  4 18:10:28 2025 GMT
        Subject: CN=516BBA4B7E5A5EF515ECF7780DCB36EA1C21BE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:b2:ae:ba:18:46:11:01:3d:c1:2d:df:d5:
                    f8:d8:46:6f:fb:32:29:d3:3b:54:37:22:f4:7a:7c:
                    ac:aa:00:9c:98:54:70:06:42:11:c7:1c:2f:78:46:
                    c2:36:70:75:6f:fa:b0:ef:c5:61:2b:84:34:0a:ae:
                    e8:3e:a6:61:a2:da:00:bb:79:bd:80:94:c0:22:74:
                    d3:0f:ff:e5:d4:f4:b5:0a:25:4f:c2:95:1f:66:8f:
                    1e:6e:0f:a9:15:a9:cb:0a:41:b4:1e:75:97:6b:70:
                    d5:dd:74:ac:31:1a:57:12:08:60:04:5e:cd:e4:fa:
                    73:05:18:29:93:b3:f2:9e:a6:f0:df:d7:3f:88:9f:
                    df:9d:98:90:33:b8:83:f8:81:fa:7e:e3:31:45:61:
                    5c:77:82:c0:4e:04:c4:30:6d:63:38:34:bf:ad:f6:
                    fa:61:c5:8c:6c:11:84:15:04:24:bc:77:7e:c5:2c:
                    6f:ca:72:31:80:25:18:3e:f1:28:bf:2c:2b:01:eb:
                    a3:84:c6:cc:d9:97:94:c1:21:0f:df:5b:ba:f3:33:
                    17:88:2d:7f:74:34:dc:0b:e6:8e:15:01:a7:71:17:
                    d5:18:04:8d:1b:06:0d:f2:0a:a1:d9:9c:1d:15:2c:
                    27:f3:d3:21:f8:0e:ed:53:b7:1a:06:3b:a2:4b:28:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6B:BA:4B:7E:5A:5E:F5:15:EC:F7:78:0D:CB:36:EA:1C:21:BE:8F
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33362e302f32332d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:e8:b7:bd:11:fc:44:b8:13:a4:54:7c:bc:2f:a7:48:a1:
         f0:ed:ea:ca:55:91:6a:9d:63:dc:9c:51:f6:11:74:53:2c:94:
         b9:b8:3f:15:1c:00:f5:d5:da:e1:cb:3b:57:df:68:93:54:95:
         bc:18:74:2f:62:2d:31:85:57:b0:da:80:21:8d:76:b3:44:c1:
         ca:78:00:0b:ea:19:25:23:33:70:db:8d:e2:c0:dd:42:8c:80:
         36:d8:d0:85:22:c3:56:5d:c9:5a:d1:c6:3c:50:26:e2:7d:f7:
         07:61:08:21:fe:14:92:1d:d0:b0:8e:84:4c:a0:3a:8d:9e:b7:
         f4:16:e0:f2:d5:34:bd:2a:10:2f:72:bd:b1:fb:2a:8e:d2:d3:
         98:13:e4:e7:ae:e9:12:74:15:8d:8c:39:9f:b9:8b:f4:80:9c:
         74:17:ff:1c:34:21:d1:c7:38:49:52:73:20:c1:ae:c2:86:44:
         81:e6:a9:d2:dc:67:7d:e6:04:4d:a7:2a:94:ed:26:bb:41:f9:
         fe:b0:0a:e6:7e:39:32:e3:98:ba:04:76:c3:43:19:c5:cc:b6:
         bd:be:92:1e:16:2a:cd:7e:26:47:31:a4:64:67:0d:0c:de:f5:
         d9:22:fa:ac:f5:68:8f:4f:30:66:e5:f9:29:a2:5c:44:09:5f:
         cd:81:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:45 2024 by rpki-client on console-fra.rpki-client.org