Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e392e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          CSDH65YiJzQfjd/0UGgFg5BTWMjtY7O2ZfljHC/v51Y=
Subject key identifier:   F1:7E:41:9D:06:2F:89:F6:85:8F:9B:8A:3A:16:75:EE:B3:E5:A2:B8
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       3C9E1973E955060288439C23B687C3E561D5D7BB
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e392e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:50 +0000
ROA not before:           Tue 05 Mar 2024 18:03:50 +0000
ROA not after:            Tue 04 Mar 2025 18:08:50 +0000
asID:                     262191
IP address blocks:        190.109.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9e:19:73:e9:55:06:02:88:43:9c:23:b6:87:c3:e5:61:d5:d7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:50 2024 GMT
            Not After : Mar  4 18:08:50 2025 GMT
        Subject: CN=F17E419D062F89F6858F9B8A3A1675EEB3E5A2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:69:a2:59:5e:21:3d:87:74:87:49:f0:b7:
                    d5:f2:17:f6:2f:dd:33:61:ec:32:df:83:29:c4:9f:
                    19:53:0f:33:16:a5:0c:c8:0e:a0:4c:4e:85:a1:64:
                    8b:cb:a8:ad:42:71:e3:09:51:53:23:9e:21:2c:f1:
                    23:7d:d4:7f:f2:52:73:7b:bf:5b:97:af:4a:a0:a3:
                    c2:98:76:a4:3c:b1:10:88:be:78:5e:e5:77:2f:5f:
                    b6:90:e2:ac:a0:99:55:0f:0a:1e:11:0e:8a:4b:a5:
                    72:ce:7d:5f:61:14:20:c8:42:78:2a:b1:0f:4f:03:
                    b3:42:a2:c8:75:7b:84:78:74:01:eb:05:36:55:e1:
                    51:89:a0:57:72:84:f7:de:77:74:e2:31:2a:ab:9b:
                    db:4f:f1:d1:4f:c2:b9:ae:12:f1:2b:bc:63:73:c9:
                    4b:49:ac:25:54:78:50:c7:90:4e:c7:8f:19:aa:27:
                    24:dd:69:74:98:1e:0d:66:5e:25:b6:9d:2a:7b:b1:
                    81:68:93:98:dd:bf:06:a5:51:93:ea:a8:15:d8:a7:
                    67:d9:c8:39:8d:11:90:ff:67:63:8a:87:a2:25:8e:
                    a5:fa:78:7c:cc:16:53:83:fb:bf:75:ea:fe:03:18:
                    f0:33:60:84:32:de:ac:ca:86:8b:b4:cd:d8:68:80:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7E:41:9D:06:2F:89:F6:85:8F:9B:8A:3A:16:75:EE:B3:E5:A2:B8
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e392e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:44:f1:26:c1:56:2d:d2:ef:24:77:1b:bc:94:a7:07:87:85:
         a7:0c:ee:81:ab:8b:37:2d:d1:d5:04:ba:d9:b0:5b:c7:57:dd:
         f7:b6:ec:fa:27:2c:83:d3:d8:7e:04:28:cd:09:ee:d4:dd:bf:
         1f:77:1f:60:01:0b:38:c4:03:29:ff:0e:a8:a1:56:fb:bb:d6:
         c6:86:b8:ec:18:56:5f:56:dd:18:3e:86:f6:33:8d:7b:fb:45:
         ae:ae:d7:e9:e2:fa:14:a2:8f:a4:89:33:67:79:b2:2f:24:5d:
         9c:18:84:4f:23:fa:17:7f:4c:29:d9:87:f3:6d:bd:33:31:b2:
         74:9c:36:98:27:5d:a3:fa:81:7d:b6:97:f6:81:89:e4:a8:80:
         dd:39:27:ce:b0:09:27:d4:12:86:a0:cb:72:98:15:1b:54:0b:
         bf:a3:95:8e:28:8d:62:4d:4e:fc:8b:b2:38:43:24:9d:2f:03:
         58:49:5c:d9:ad:cb:b6:06:a0:03:7b:02:05:b0:ef:55:c5:3a:
         5e:40:24:79:10:bf:72:55:38:26:59:a5:85:ba:f4:a4:a1:5a:
         ac:2e:48:13:ae:16:1f:32:0b:ef:63:c0:8d:9b:ed:53:c0:9e:
         1a:39:a2:87:b3:ed:71:7a:09:02:40:29:cd:87:63:25:71:12:
         e1:03:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:00:58 2024 by rpki-client on console-fra.rpki-client.org