Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          UzaYm7wTXfp/qXtTTPqiNK1ImkqQLX9YJWgbOpv/8tg=
Subject key identifier:   DD:C8:70:AF:81:DB:38:71:D6:3D:66:73:3F:D0:00:23:B8:06:D3:E9
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       073A445D97E886A85196E7142B1987178D41A0A2
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:50 +0000
ROA not before:           Tue 05 Mar 2024 18:03:50 +0000
ROA not after:            Tue 04 Mar 2025 18:08:50 +0000
asID:                     262191
IP address blocks:        190.109.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3a:44:5d:97:e8:86:a8:51:96:e7:14:2b:19:87:17:8d:41:a0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:50 2024 GMT
            Not After : Mar  4 18:08:50 2025 GMT
        Subject: CN=DDC870AF81DB3871D63D66733FD00023B806D3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:74:35:50:8b:a8:66:c0:b4:6e:14:58:7d:
                    17:fe:4c:f9:80:a1:6b:27:7f:ba:ec:9a:54:44:c7:
                    50:23:fa:39:69:9b:0b:e5:51:90:0a:ce:59:03:75:
                    e8:37:a5:76:42:6d:39:1c:fc:2b:6c:a8:c6:4d:a5:
                    9f:ea:f0:50:6b:86:67:68:dc:c4:49:06:77:a0:1b:
                    67:73:e1:c9:a8:fb:59:20:27:c5:23:e9:cb:79:86:
                    56:d3:8d:07:e3:6e:43:b1:e6:76:49:53:83:d0:87:
                    48:39:93:8a:0e:62:92:24:1e:17:11:d6:ba:f4:71:
                    d2:f1:be:1b:46:af:a2:f4:a5:73:64:14:b0:30:49:
                    b7:86:ee:4e:66:e7:55:d0:b2:7b:df:0d:bc:39:41:
                    a5:15:6c:c7:c0:ef:c0:72:31:6e:8e:30:dc:82:bd:
                    09:65:82:2b:31:b1:a9:44:a8:1a:55:11:5c:44:03:
                    22:f7:71:13:e1:1c:44:72:8c:25:04:83:fe:0c:19:
                    a4:da:d0:d7:c1:62:b2:6b:58:cf:f6:06:3a:c2:a6:
                    d5:f3:1d:f9:69:2e:15:cb:cf:57:b5:00:6c:d4:a9:
                    96:13:4c:ed:f8:87:85:ca:2f:15:5d:2c:50:a5:09:
                    6b:43:6c:37:c1:10:a9:46:74:54:e3:42:c2:5a:2d:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C8:70:AF:81:DB:38:71:D6:3D:66:73:3F:D0:00:23:B8:06:D3:E9
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:47:2c:e3:e4:e0:dd:80:17:47:ab:de:19:ed:5c:d6:1f:c3:
         3d:8f:e7:0d:2e:9c:23:e3:82:05:7f:cc:4e:4d:7c:50:f4:05:
         fc:15:24:2a:e5:0c:f1:10:75:64:da:77:bd:de:de:43:c8:58:
         05:1d:91:d2:c6:22:36:0b:0b:55:0b:59:28:d8:19:c6:4f:55:
         70:88:37:57:16:b8:b7:d2:22:e4:84:0e:75:c0:1b:d3:be:2a:
         4e:b6:2d:13:2b:f5:9f:09:c5:bd:5d:cd:2d:ef:fa:d3:f6:0e:
         d4:2f:7d:32:3f:71:c1:e7:29:0c:a1:29:03:98:d8:92:94:56:
         f1:da:bb:68:75:26:82:ab:8f:be:b3:51:9e:ab:ea:a9:95:03:
         4f:80:95:27:17:d3:9e:31:2e:14:15:ec:2b:2f:cf:15:23:8f:
         a9:93:c6:cf:f1:8c:79:7c:fc:8e:05:02:2f:da:b9:54:e2:6f:
         6f:d7:a0:50:3c:94:cf:02:17:78:fb:e7:5f:ed:5f:18:5b:8c:
         df:09:12:69:26:ed:6f:c9:84:c0:36:17:13:4a:49:9b:73:84:
         8e:0f:97:52:51:cf:de:2d:fe:22:d1:8e:a7:5a:cd:0e:d6:93:
         15:57:77:a4:3d:05:ec:35:44:1a:52:e6:f3:e6:85:ed:45:13:
         11:32:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:41:44 2024 by rpki-client on console-ams.rpki-client.org