Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa
File:                     3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa (raw, json)
Hash identifier:          IgXoe7ADYpJhJOcOGeBzNcdi7N3r66nssALFTQXvBJI=
Subject key identifier:   B8:00:41:F4:57:B9:61:96:08:C5:E9:C5:13:FE:49:D2:32:4D:FD:A2
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       1C5D02FB787D9687128BD1F3FB447702D750E00F
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa
Signing time:             Thu 23 May 2024 16:10:00 +0000
ROA not before:           Thu 23 May 2024 16:05:00 +0000
ROA not after:            Thu 22 May 2025 16:10:00 +0000
asID:                     271949
IP address blocks:        190.122.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5d:02:fb:78:7d:96:87:12:8b:d1:f3:fb:44:77:02:d7:50:e0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: May 23 16:05:00 2024 GMT
            Not After : May 22 16:10:00 2025 GMT
        Subject: CN=B80041F457B9619608C5E9C513FE49D2324DFDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:95:c8:11:b1:15:f1:1e:7b:fc:00:83:87:
                    40:29:5e:a9:07:a2:a3:56:9f:02:07:81:87:31:e3:
                    b8:89:34:56:de:a7:11:6e:62:be:f0:a6:6a:3a:45:
                    aa:10:79:ec:7d:99:3e:23:1e:34:b0:b2:ef:25:1a:
                    16:08:f4:19:40:8b:8b:68:55:0b:22:42:f5:91:56:
                    02:97:da:87:2c:9e:f5:b4:77:3b:2b:df:db:22:43:
                    c1:5b:ec:86:64:3c:86:d4:a4:2a:ac:a6:13:64:e2:
                    9f:1d:13:5a:b6:d7:fa:81:52:9b:28:b9:be:8b:aa:
                    d7:dc:a7:48:3d:4d:64:13:8e:9a:f1:74:6c:5d:30:
                    79:9a:23:bf:de:89:e3:63:56:90:30:70:9d:ad:ff:
                    05:2f:0d:8f:d4:03:6c:98:d9:c7:89:51:35:83:26:
                    c5:a5:81:04:92:25:fe:ff:a0:7e:4b:e5:f4:4e:28:
                    58:1e:5a:01:ea:c3:29:1b:c4:f2:96:49:6d:f0:a6:
                    fd:71:3d:63:93:f2:01:08:80:d5:fc:26:57:8e:9f:
                    05:06:5b:d0:fc:ab:5a:d2:3c:63:b7:1e:c4:75:1a:
                    6e:be:1d:4e:17:c9:9a:17:b6:00:10:9e:e7:f1:59:
                    7b:7d:fe:8c:37:34:9f:cd:91:44:32:b7:c7:ea:23:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:00:41:F4:57:B9:61:96:08:C5:E9:C5:13:FE:49:D2:32:4D:FD:A2
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e39302e302f32342d3234203d3e20323731393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:3a:2b:14:75:80:42:62:7c:7f:2e:e0:13:8c:b0:24:a6:
         a0:bf:e1:03:fc:15:a0:c4:30:6e:8f:ef:54:a8:90:5e:48:40:
         e7:97:3a:ca:c5:07:bc:7e:f9:b5:4e:a3:c3:a6:f6:75:25:80:
         c6:6e:98:dd:2b:7b:68:e6:be:45:6f:c0:57:ec:f8:66:cc:e7:
         f4:44:7c:d5:95:5e:c8:67:c6:b0:95:21:85:f0:a7:ed:c8:1b:
         dd:33:6b:ed:e7:0c:f1:04:43:c3:80:a5:d9:74:93:b3:8f:d4:
         ca:6d:a6:b1:10:fe:e0:d2:af:4e:ec:eb:0e:a8:af:c6:c5:29:
         a9:f7:0d:83:48:1c:b7:d8:c6:fc:32:75:36:8c:2b:f1:5a:35:
         d4:5a:17:f3:d2:a4:83:16:b7:26:f4:d4:81:47:e0:6c:49:20:
         a9:0a:a3:a0:5d:7d:ba:4a:45:49:d8:c8:b1:5e:fb:94:33:8e:
         79:b1:74:bc:61:7f:99:af:71:6f:88:9e:3b:96:4a:b7:69:5b:
         e6:a3:c7:22:8f:d7:69:0a:65:b1:09:e1:30:49:96:f0:41:0a:
         cf:a8:17:5f:c6:ba:54:12:82:19:f7:03:10:69:26:bc:06:31:
         c1:3b:87:e4:4a:06:ad:e3:e7:0c:2d:b5:2c:85:3f:ae:f5:3b:
         af:f4:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 18:29:48 2024 by rpki-client on console-fra.rpki-client.org