Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31342e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e31342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          eOCijI72JB/7lzAe3ihLN27msO4Oy1AIx7K44/ZDqdI=
Subject key identifier:   51:C3:65:28:F4:60:33:CC:94:9C:63:6C:17:9F:97:3C:B0:F0:05:5D
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       490519EF38FFEC949919FEEF490A5118EA92DC0D
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31342e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:47 +0000
ROA not before:           Tue 05 Mar 2024 18:03:47 +0000
ROA not after:            Tue 04 Mar 2025 18:08:47 +0000
asID:                     262191
IP address blocks:        190.109.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:05:19:ef:38:ff:ec:94:99:19:fe:ef:49:0a:51:18:ea:92:dc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:47 2024 GMT
            Not After : Mar  4 18:08:47 2025 GMT
        Subject: CN=51C36528F46033CC949C636C179F973CB0F0055D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:84:b3:29:19:58:1e:33:8a:f0:8d:86:e0:
                    93:50:cd:e0:d9:08:bd:51:fa:e3:85:2f:d9:cf:63:
                    69:0a:29:2d:97:4f:fc:b9:f1:c8:10:ee:65:a6:c5:
                    b6:10:59:e2:31:70:60:30:84:c4:1e:d9:71:54:3d:
                    eb:27:b6:80:fd:fb:8f:46:83:5e:b7:a5:ea:db:16:
                    30:b7:a8:36:ad:ad:4f:2d:f3:28:9d:15:83:25:51:
                    3d:41:01:ce:c3:67:41:6c:cb:21:10:82:b2:99:5d:
                    1c:ad:4d:23:59:c4:0e:3b:b1:ac:44:63:33:ec:c0:
                    b6:07:ee:9a:86:14:12:d3:ce:64:28:e3:5b:ea:5b:
                    b2:0a:07:29:b5:f8:68:c6:65:93:4e:4a:b0:35:8b:
                    84:7b:41:7f:1e:48:58:d7:6c:c0:52:42:bc:b5:25:
                    69:da:5e:b3:b4:c7:ea:fa:0c:d1:f3:34:db:c3:8e:
                    5b:b7:1c:55:72:73:1e:8c:91:72:ac:a0:72:6b:36:
                    1d:56:96:c9:a2:f3:e0:04:4e:9d:a3:fb:8a:7c:97:
                    43:bf:c6:b8:41:d2:b6:47:de:fc:7a:fe:8c:ec:a4:
                    6f:6c:d5:93:59:2f:2a:5b:62:b8:da:0d:16:0b:d0:
                    47:3c:f4:6e:cd:14:55:ca:07:60:28:ac:b3:45:62:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:65:28:F4:60:33:CC:94:9C:63:6C:17:9F:97:3C:B0:F0:05:5D
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:6a:c1:42:d2:c4:99:de:e8:96:19:53:30:98:8a:a6:4a:
         a2:7f:40:c4:83:5d:1a:da:37:48:96:00:97:c5:bb:6d:4e:c3:
         aa:d4:c3:3f:78:fe:3b:28:35:c4:ff:a6:cb:57:65:d3:57:69:
         9b:97:30:b1:c2:a2:48:2c:3e:25:3e:87:ae:83:5d:45:12:4e:
         d4:a0:71:77:c5:e8:50:48:17:43:13:d6:2e:4c:bc:85:7e:cf:
         f2:21:4c:60:e6:0d:70:d3:0b:97:43:90:41:8d:1f:3f:45:9a:
         e4:15:40:70:71:88:37:e0:1b:44:6a:8e:f8:24:36:17:2c:45:
         59:74:93:11:6c:0d:58:11:c0:d1:97:d7:3f:d7:96:19:2b:0a:
         fd:b8:6b:db:e0:65:98:d4:4f:c1:be:a3:f1:c8:f4:73:2f:42:
         8c:ac:c0:7f:a1:57:55:94:d5:01:2a:61:52:fb:79:2a:d3:38:
         4e:76:eb:1a:a5:cb:af:a7:ef:93:da:12:c8:e0:be:6e:1b:40:
         33:d3:f6:ec:9c:c9:04:e6:53:fe:31:c1:3d:37:59:bc:b1:74:
         a8:aa:4c:26:3c:b8:f8:5c:48:40:34:fa:e8:f6:8c:2b:fb:63:
         79:c4:ce:dc:3b:76:d9:25:7b:ee:53:eb:59:6a:fa:9e:7f:32:
         cf:1d:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:00:58 2024 by rpki-client on console-fra.rpki-client.org