Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          HRPutDOp3knkezDZkdqFtm/SIJX6E4U/gZ61lWdIIBI=
Subject key identifier:   65:D1:DF:74:30:9C:33:F4:89:EF:C8:E4:B7:4E:67:BE:76:E9:E6:C6
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       3201AB1ABF85441AC4A7BDF86BEE5517E32EED8C
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:50 +0000
ROA not before:           Tue 05 Mar 2024 18:03:50 +0000
ROA not after:            Tue 04 Mar 2025 18:08:50 +0000
asID:                     262191
IP address blocks:        190.109.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:01:ab:1a:bf:85:44:1a:c4:a7:bd:f8:6b:ee:55:17:e3:2e:ed:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:50 2024 GMT
            Not After : Mar  4 18:08:50 2025 GMT
        Subject: CN=65D1DF74309C33F489EFC8E4B74E67BE76E9E6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:49:17:c1:6e:d6:4d:6f:03:d6:6d:c0:54:
                    23:33:45:45:25:10:6c:ca:dc:42:e3:18:1b:bd:58:
                    6a:06:c5:52:47:b2:d8:7c:b1:2d:2b:46:ca:b1:27:
                    3a:77:68:09:52:8b:8e:1b:78:37:66:3c:97:83:6c:
                    09:b4:11:3e:12:06:54:8b:60:60:82:1b:ea:05:75:
                    70:cb:55:c8:6a:66:61:9d:91:9e:c1:51:9c:da:75:
                    5a:6b:95:1a:69:43:f6:dd:dc:76:e5:71:8c:af:55:
                    a6:94:b7:36:3c:af:33:1a:c9:fe:87:04:ec:15:e2:
                    70:97:97:2a:d7:6c:a4:41:fb:0d:40:33:d6:b8:05:
                    fa:43:25:88:36:1e:9a:b3:7f:00:96:ff:9c:53:f8:
                    a8:e4:12:1c:64:cf:bc:3f:76:7a:64:ff:d5:91:9d:
                    43:ec:6d:a0:ec:cc:24:7a:3c:4d:aa:d3:93:a2:8d:
                    9d:c6:62:26:19:a2:a4:a5:b0:c0:94:4a:bf:ea:08:
                    d9:66:f7:4c:e4:19:4a:88:b2:7b:25:37:84:9a:ca:
                    bb:f2:4f:83:4e:c8:7a:3f:3a:33:cb:4f:80:56:02:
                    d3:04:8e:42:a6:da:d8:81:38:09:da:05:53:0d:65:
                    7a:69:71:32:af:ec:9f:81:9a:7d:c7:4b:a1:fb:19:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D1:DF:74:30:9C:33:F4:89:EF:C8:E4:B7:4E:67:BE:76:E9:E6:C6
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:98:36:19:04:e0:66:e7:e5:66:ed:1a:ea:09:c9:9c:aa:
         41:a4:21:af:02:b4:4a:b7:95:80:1b:4d:d7:5f:8d:51:05:d5:
         cf:62:e1:13:e6:f0:14:dc:3e:dd:01:ce:18:a8:44:a1:49:b1:
         8e:cc:37:78:a8:57:1c:12:1c:32:07:74:4e:a5:ab:22:ab:d5:
         af:5a:4b:e9:d3:d4:56:65:9b:ac:fb:40:38:6b:1d:01:28:d8:
         0b:c5:94:5b:5d:0a:8b:56:39:fe:40:0a:33:a0:be:29:04:c0:
         e4:34:67:a6:11:59:ee:0b:be:cd:a6:ce:40:e5:f5:c6:e1:cd:
         dd:b9:3d:a7:c9:79:68:82:82:2b:e3:69:30:aa:4a:5f:09:59:
         ba:27:1b:be:1a:7a:51:ed:f1:ca:b7:56:ad:e0:c9:6f:03:64:
         ad:09:59:b0:fc:c6:04:31:8b:76:b7:93:0b:6d:74:0f:9b:03:
         7c:22:90:32:4b:85:4c:53:3c:5e:f9:29:64:30:06:37:53:b4:
         df:23:77:da:3c:e2:6b:b0:da:35:a6:d3:8c:fd:97:c1:e4:89:
         6e:97:5f:e5:62:6b:8e:18:59:03:e2:c1:b3:75:f1:76:c8:a7:
         21:f2:a7:e4:b4:2c:52:48:fe:e4:02:de:50:9f:96:7d:c6:c1:
         07:d6:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:41:44 2024 by rpki-client on console-ams.rpki-client.org