Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32372e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e32372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          LXNRt3Eg4VQIFvWAm+6hlIaOku2rie8BsonSuP8P9vY=
Subject key identifier:   6C:9A:97:B6:A3:B3:4F:B7:1C:C8:E6:57:B3:51:98:D6:DF:9B:43:A5
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       446B57A586EF90C8AFA7BC83593014ED2514A096
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:49 +0000
ROA not before:           Tue 05 Mar 2024 18:03:49 +0000
ROA not after:            Tue 04 Mar 2025 18:08:49 +0000
asID:                     262191
IP address blocks:        190.109.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6b:57:a5:86:ef:90:c8:af:a7:bc:83:59:30:14:ed:25:14:a0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:49 2024 GMT
            Not After : Mar  4 18:08:49 2025 GMT
        Subject: CN=6C9A97B6A3B34FB71CC8E657B35198D6DF9B43A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:95:65:1a:10:5f:dc:8a:b3:67:69:a8:66:
                    33:af:df:8f:e7:d1:a8:29:d0:fd:3c:12:91:e9:fd:
                    7b:f7:91:26:89:43:37:5e:d6:20:47:fa:49:98:60:
                    9e:9d:4c:a8:10:c2:bc:f8:83:11:d9:2a:e1:5f:2e:
                    4b:2a:33:3b:3c:b2:81:04:5d:2d:a7:47:37:61:25:
                    75:61:c5:9e:c1:e6:13:c5:55:e5:43:f3:3d:75:6e:
                    62:06:b2:b4:ec:fb:61:9d:3b:2c:75:a9:f9:47:96:
                    62:2a:64:2a:41:c7:ec:70:dc:be:e5:41:d5:1b:8e:
                    20:18:98:a9:b2:96:5f:b0:eb:4e:76:0f:f2:86:36:
                    72:fb:47:92:00:1c:00:7c:22:c1:09:be:46:56:9f:
                    80:42:17:75:c0:12:58:8f:a3:d6:d5:92:33:cd:50:
                    b9:33:d4:81:8a:06:e6:94:9c:64:e4:5a:b2:95:cc:
                    ec:d0:02:e9:b5:8b:a6:0e:e6:86:3f:f1:31:0d:58:
                    ac:b9:a8:60:46:3d:4a:9e:ce:4d:84:bf:45:3b:f9:
                    bc:56:ca:db:2b:60:f3:ab:4a:e7:95:1e:30:00:2b:
                    e5:26:23:05:c8:f4:30:18:3c:c4:0d:48:35:c6:02:
                    9a:9f:14:18:0a:07:3e:a3:01:b1:7c:5c:46:dc:61:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9A:97:B6:A3:B3:4F:B7:1C:C8:E6:57:B3:51:98:D6:DF:9B:43:A5
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:45:90:9d:45:1b:9f:7d:ac:e5:d2:93:8c:53:9f:5a:c1:
         71:e2:69:e0:37:e1:dd:0f:b4:cd:be:02:e5:05:bb:f7:7f:63:
         b5:43:47:88:c0:47:d5:d9:1c:16:c6:06:2e:bc:63:f3:da:07:
         8c:5f:74:ec:cf:39:83:23:5a:ef:98:53:9f:65:ee:8d:4d:bb:
         d9:e7:d9:e0:44:5e:cb:8f:5f:b3:0b:7f:76:94:27:aa:ea:a1:
         e4:ae:fc:e5:13:23:18:67:14:b4:62:fd:c5:c3:84:8c:4d:3d:
         4d:13:e8:ff:f1:df:fe:ce:71:84:f7:86:f0:32:27:d3:0d:75:
         a9:7c:01:73:24:e3:27:b8:b2:53:d6:8b:34:72:12:65:8e:78:
         62:45:a0:ba:56:cd:27:f8:e9:08:b2:34:42:c9:02:4d:b3:6a:
         a4:28:bf:09:61:ed:1d:04:37:51:ef:98:16:f6:7d:a1:22:70:
         c4:b1:0f:39:09:c8:3a:3a:66:f1:80:6f:52:88:50:50:f4:4d:
         e2:54:41:ae:18:3d:fd:19:d8:f9:a8:13:24:8f:64:bf:74:38:
         ba:7b:50:0c:19:29:df:e2:8f:0c:86:3c:53:7a:66:ad:cc:7e:
         15:e6:89:40:c9:aa:a8:6d:60:fa:7c:04:90:ee:80:78:ff:8f:
         5e:81:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:41:44 2024 by rpki-client on console-ams.rpki-client.org