Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31372e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e31372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          2qj+38o3/g4ppPqI4I4pHcXU6Qqm2Gu/G4Lf21XJp94=
Subject key identifier:   9C:0A:38:A4:A6:2E:DD:1B:3C:4F:A0:B8:95:0F:14:8A:7A:F3:9F:E7
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       4DA32D0C7E38EC21F8A1B39C79368DB72935CA92
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:49 +0000
ROA not before:           Tue 05 Mar 2024 18:03:49 +0000
ROA not after:            Tue 04 Mar 2025 18:08:49 +0000
asID:                     262191
IP address blocks:        190.109.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a3:2d:0c:7e:38:ec:21:f8:a1:b3:9c:79:36:8d:b7:29:35:ca:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:49 2024 GMT
            Not After : Mar  4 18:08:49 2025 GMT
        Subject: CN=9C0A38A4A62EDD1B3C4FA0B8950F148A7AF39FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:1c:31:e1:b1:85:2b:be:87:01:a8:8f:01:
                    a3:5b:2f:e7:65:d6:35:d0:2f:c1:c4:b5:9c:c8:97:
                    34:36:68:e4:42:b2:12:5d:04:77:13:df:59:3e:2d:
                    66:68:ad:18:ea:28:03:9c:6b:dd:a2:af:00:69:94:
                    12:14:51:ca:fd:e9:e9:12:b6:18:30:16:ed:a3:b2:
                    21:58:3b:4f:f1:28:8d:e3:78:74:ba:d2:2d:11:40:
                    4b:d1:13:b2:23:84:a8:de:36:29:95:06:f8:44:b9:
                    18:17:ae:0e:99:9d:9a:5c:15:9f:d8:64:ac:a3:a1:
                    5c:54:c5:2d:b8:56:b7:98:86:81:e6:c7:3f:84:a2:
                    40:56:70:6f:03:e7:3a:53:99:7c:21:ac:f0:b6:b7:
                    dd:e1:0f:ce:0b:3d:32:28:9d:54:ec:50:41:1e:80:
                    47:67:c8:07:ac:28:d1:3a:97:b4:6c:8c:11:32:63:
                    4a:06:f3:67:91:eb:62:4d:a4:c1:88:bb:89:25:8b:
                    e3:d6:80:f3:9f:1e:dd:25:7e:f6:f5:20:d6:31:e0:
                    a0:d8:84:79:f1:1c:15:0b:75:8e:30:ea:71:d7:b4:
                    58:44:c2:f5:13:24:db:a1:96:d6:cc:3c:dc:cb:c7:
                    a7:fb:97:b4:95:bb:28:1e:d4:c7:4e:b4:ba:e8:53:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0A:38:A4:A6:2E:DD:1B:3C:4F:A0:B8:95:0F:14:8A:7A:F3:9F:E7
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:20:ed:55:a1:a2:12:c1:bd:5b:6f:c2:70:e2:11:f3:18:35:
         39:99:e2:6d:58:d9:61:99:68:eb:67:41:c9:5d:79:5f:08:6f:
         54:a8:df:cd:b3:77:d3:d0:33:cf:70:a9:1e:f4:35:a8:ab:90:
         32:97:67:ea:0c:e1:da:33:f4:51:bd:a5:96:7d:3a:a1:7e:33:
         36:f1:0e:bd:28:b9:7a:68:46:50:4a:be:88:6a:6d:3b:98:bb:
         3b:27:1d:3e:73:51:f8:38:a5:36:31:e8:86:af:b8:05:81:ec:
         b5:e6:66:c4:79:11:03:8b:3f:e4:65:7a:7b:83:dd:37:63:36:
         b8:fc:e0:e3:2d:35:fd:ea:1c:ba:15:82:60:c5:84:1e:02:b4:
         4c:39:05:36:c1:8e:6d:85:f9:2b:12:12:57:b5:2e:b2:b1:a6:
         09:ed:f0:b0:be:22:be:9a:e4:c5:f5:0a:da:ee:c7:90:af:2b:
         1f:8a:66:35:92:17:c6:93:c9:0b:e1:20:39:25:a6:32:63:98:
         83:55:91:a5:a4:6f:d3:20:64:69:4a:ec:ef:93:b4:be:bd:a4:
         80:79:a1:3b:59:a5:93:2c:86:6a:67:e0:60:46:6a:30:ed:52:
         c8:90:32:10:40:74:9e:c3:d5:d4:d5:ea:0c:c5:b0:d0:57:b0:
         43:3a:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:41:44 2024 by rpki-client on console-ams.rpki-client.org