Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31302e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e31302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          FenS+dd90QOaBiIaxkttmd6lDVTEWjahD4o3UyMtBSo=
Subject key identifier:   0B:99:A4:59:4B:6C:2F:C1:9C:46:09:F9:37:63:D2:BE:98:A2:D2:90
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       6C391B780E8E03A32C760A32DB144A586EBA7062
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:44 +0000
ROA not before:           Tue 05 Mar 2024 18:03:44 +0000
ROA not after:            Tue 04 Mar 2025 18:08:44 +0000
asID:                     262191
IP address blocks:        190.109.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:39:1b:78:0e:8e:03:a3:2c:76:0a:32:db:14:4a:58:6e:ba:70:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:44 2024 GMT
            Not After : Mar  4 18:08:44 2025 GMT
        Subject: CN=0B99A4594B6C2FC19C4609F93763D2BE98A2D290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:53:86:15:4b:f1:1f:b5:f0:e3:2f:4f:96:
                    94:6b:21:84:3e:64:10:3a:80:ab:80:7d:8a:d2:87:
                    5b:49:f1:9c:8a:df:ae:35:e3:72:87:c4:72:b0:d3:
                    05:ac:fd:16:7e:c0:20:cd:1c:92:73:30:e0:19:d6:
                    61:3f:b5:d2:01:a2:84:bd:47:d0:5d:4e:29:e2:40:
                    9a:4d:3e:63:80:39:99:52:19:78:93:97:5a:43:db:
                    df:da:c8:62:0d:ef:61:9d:a0:65:f3:b5:92:ad:14:
                    f0:e4:b7:f4:11:45:bc:7c:9a:2b:d7:e2:48:8c:d6:
                    65:9d:2d:81:2e:91:5b:83:70:ff:75:2b:cb:d8:07:
                    a1:5c:9e:bf:90:b6:04:17:78:6d:9e:89:94:c3:10:
                    0b:21:18:9b:92:9d:9f:c4:13:2d:d0:3d:41:a2:d4:
                    50:2d:7e:79:25:5c:f5:d9:a2:aa:e5:ba:7d:20:49:
                    ba:b0:5f:4f:42:0c:5e:80:cb:a8:07:f6:29:52:7a:
                    2d:f5:40:d7:df:9f:f4:49:92:96:4e:1d:5b:92:e4:
                    bf:84:bf:08:95:1e:2e:3b:82:b4:a9:b9:82:f2:b4:
                    12:c9:9c:8a:26:2c:52:41:93:51:d7:66:52:96:d4:
                    37:81:11:64:e5:e9:70:c7:73:7b:e8:2a:4b:e3:d7:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:A4:59:4B:6C:2F:C1:9C:46:09:F9:37:63:D2:BE:98:A2:D2:90
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:e0:eb:cd:4b:df:c1:8b:06:c9:c9:e2:08:ab:4e:ff:39:
         56:c1:1b:8f:8f:af:69:76:be:18:78:a6:d7:59:4f:8e:60:99:
         a5:2a:48:21:08:bb:bd:17:78:8a:1b:44:bb:f5:01:d3:b0:cd:
         be:2a:42:7f:69:1e:7a:d9:a7:08:54:69:1f:d6:ff:db:74:5b:
         14:14:d7:41:f8:be:26:d7:2e:b6:2f:87:c9:82:61:7e:3a:2a:
         a8:a0:6e:c0:99:2f:88:a8:97:0f:d9:a9:bc:91:48:c2:18:8b:
         05:3d:91:f0:57:e2:43:3b:13:9c:46:2d:e2:58:a4:e7:86:d0:
         c7:c3:9a:4e:c0:4c:5b:05:96:85:18:cd:e5:e8:f4:f1:d8:e8:
         92:61:ba:76:01:4b:e9:02:90:d2:40:5d:ad:68:52:cc:26:2e:
         d5:c6:f1:aa:c5:0e:fd:90:79:38:e0:dc:9b:f8:50:aa:52:a4:
         8e:6f:26:50:fe:0a:ee:0f:e5:3a:6a:71:c1:c2:63:cf:93:84:
         9e:95:0e:63:17:d9:8e:3c:24:79:92:f2:b1:58:a7:ec:6d:8a:
         9c:af:d7:74:85:44:9b:f0:c5:0b:ba:31:92:a4:1c:64:0a:62:
         ae:d7:24:10:63:21:f5:40:3f:d9:e3:9e:7b:a3:fb:a3:ce:02:
         70:1b:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:41:44 2024 by rpki-client on console-ams.rpki-client.org