Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e352e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          L62MMoSaG5Z3LnNf416E7XBq6eeBS0f7ZYDekmRA/Uw=
Subject key identifier:   F4:0D:5A:FB:FE:C4:39:8A:C6:EB:70:83:CF:BB:F9:58:D9:6B:BA:AB
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       61DAA8F6D78B44E6E793F109DBBF3D24F1133584
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e352e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:45 +0000
ROA not before:           Tue 05 Mar 2024 18:03:45 +0000
ROA not after:            Tue 04 Mar 2025 18:08:45 +0000
asID:                     262191
IP address blocks:        190.109.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:a8:f6:d7:8b:44:e6:e7:93:f1:09:db:bf:3d:24:f1:13:35:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:45 2024 GMT
            Not After : Mar  4 18:08:45 2025 GMT
        Subject: CN=F40D5AFBFEC4398AC6EB7083CFBBF958D96BBAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:b9:ab:d7:a8:84:74:89:22:a0:1e:37:98:
                    53:36:39:54:81:cd:31:3f:4f:34:14:6c:26:80:01:
                    c3:95:d1:96:fa:89:3b:21:ca:d0:df:c9:1a:71:0e:
                    32:b9:d1:0f:b4:1b:c8:9c:db:94:e5:00:6e:7f:62:
                    33:c5:d5:20:0a:9f:f4:05:06:3a:b4:70:f0:b9:cf:
                    7a:0b:a9:f7:67:a0:0c:c5:5f:7a:c5:04:45:16:b4:
                    6e:9b:d8:3b:8e:25:9b:7a:fb:be:d2:d3:55:8f:1d:
                    85:9e:c2:50:d4:53:a4:56:31:b7:42:76:3c:3d:37:
                    0a:92:67:41:04:bc:73:57:64:92:50:bb:6f:0c:bf:
                    5c:d7:f6:9a:6c:3f:e5:50:7b:3a:80:1b:0a:2e:77:
                    09:85:21:c8:ee:1c:28:37:9e:5b:ca:d4:21:fa:4d:
                    a8:96:98:a9:f7:86:59:33:27:25:7c:40:81:88:8f:
                    ae:f1:bd:93:f5:4d:3c:4d:4e:9a:91:ac:df:bf:6c:
                    cb:33:81:14:51:91:f5:ee:7e:37:b9:d8:c9:ef:05:
                    57:a9:3c:4a:7e:c6:f1:3f:f7:57:b9:b7:70:f6:28:
                    31:98:ea:33:35:94:16:77:ef:9d:2c:7b:72:d4:67:
                    26:7b:24:cc:e0:f2:01:20:d9:7f:ce:a4:b4:5a:77:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0D:5A:FB:FE:C4:39:8A:C6:EB:70:83:CF:BB:F9:58:D9:6B:BA:AB
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:bf:19:7e:a8:21:83:6c:61:40:25:c4:f9:07:4c:30:0d:
         6f:cd:b2:39:41:a1:67:ab:c4:d6:60:76:2a:e3:b8:eb:70:1a:
         2c:53:c5:49:ef:2f:4d:3e:4e:5c:60:04:79:1c:0f:cb:0b:8f:
         a2:7a:8f:7a:4c:cb:10:a6:8e:66:38:8a:e2:3c:00:65:93:de:
         1b:37:41:86:02:1f:f4:05:75:9a:25:85:59:7c:b7:86:92:69:
         82:b5:a9:e3:81:55:84:ff:f5:e6:a4:cb:4d:1e:a6:b3:23:48:
         b0:6b:89:ac:88:f8:1a:43:f9:e3:13:74:53:f4:d8:6f:af:89:
         af:09:7c:36:b9:68:d0:c5:43:05:b2:a1:d2:84:55:ec:74:ed:
         71:91:d3:ad:92:2c:3d:b3:50:a8:7c:38:f6:1a:1a:1c:37:8c:
         5d:f5:63:e6:cf:ed:c7:37:2e:26:fb:89:09:11:5f:ee:c0:b3:
         66:cf:32:7d:56:9d:ba:5a:26:df:f9:5a:9b:99:7b:7b:4a:a1:
         e3:62:12:b6:6a:5f:ca:1e:76:cf:54:94:2a:17:31:2c:06:8b:
         ff:10:13:b1:f1:ba:9d:28:bf:7a:9e:63:30:a0:17:b6:63:ad:
         dc:35:57:21:af:c1:cd:b5:79:a4:23:d3:74:99:2d:72:3a:d2:
         5d:e5:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:41:44 2024 by rpki-client on console-ams.rpki-client.org