Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3139302e35352e302e302f31362d3234203d3e203237373437.roa
File:                     3139302e35352e302e302f31362d3234203d3e203237373437.roa (raw, json)
Hash identifier:          ENJV2F+0O7Dxff9zuqlWbnbRmCLSPs4RxTQrhdBUeg4=
Subject key identifier:   31:3C:EC:C1:C5:BF:87:04:97:9C:0F:44:AE:C0:5E:5B:5C:28:7B:1B
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       49FC82357DFDCC57227D075B7B4115147753EB7E
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3139302e35352e302e302f31362d3234203d3e203237373437.roa
Signing time:             Tue 05 Mar 2024 17:52:52 +0000
ROA not before:           Tue 05 Mar 2024 17:47:52 +0000
ROA not after:            Tue 04 Mar 2025 17:52:52 +0000
asID:                     27747
IP address blocks:        190.55.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fc:82:35:7d:fd:cc:57:22:7d:07:5b:7b:41:15:14:77:53:eb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Mar  5 17:47:52 2024 GMT
            Not After : Mar  4 17:52:52 2025 GMT
        Subject: CN=313CECC1C5BF8704979C0F44AEC05E5B5C287B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:16:38:14:9c:6e:1c:5f:a0:c6:23:e0:6d:
                    da:ed:d5:1c:a6:d0:ec:2d:6b:a0:17:48:b5:b2:3f:
                    a3:ac:9d:22:15:21:3f:c9:27:9f:63:80:fd:73:82:
                    2e:7a:d4:b7:b5:9b:c9:21:55:c7:f2:52:e2:4b:e8:
                    30:6c:27:37:4c:8f:84:80:cc:43:67:a0:0f:25:e8:
                    8e:b4:09:f2:a7:26:24:4a:f1:eb:cb:ad:30:e3:bd:
                    76:a8:9a:02:56:9a:f7:73:3d:de:92:8f:58:0a:32:
                    ee:85:03:b7:2a:0c:60:c3:21:ec:c9:c0:02:af:50:
                    7a:72:46:01:96:9b:92:be:34:93:cc:cf:53:6c:ec:
                    c6:4e:02:9f:12:84:19:b9:a1:08:6a:c8:7a:ca:08:
                    2c:bf:38:c3:f9:2c:a0:ca:17:ef:fe:8c:fc:bf:f8:
                    34:ea:ee:51:60:2a:51:22:8a:bf:64:96:87:ee:8f:
                    8e:d7:0d:d9:bc:f0:55:46:47:b4:3a:23:8a:8c:e3:
                    e2:94:2c:6f:32:89:f8:d6:16:3a:ab:ae:d1:fc:61:
                    a7:cc:a3:40:8c:1c:78:62:a6:1a:29:0c:74:cd:89:
                    01:3d:bb:ce:a5:16:5a:e1:73:2c:b8:25:cc:d5:0e:
                    cf:bd:80:8a:45:fd:a0:ac:bd:9a:a2:9c:b7:2f:ef:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:EC:C1:C5:BF:87:04:97:9C:0F:44:AE:C0:5E:5B:5C:28:7B:1B
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3139302e35352e302e302f31362d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:25:81:6c:eb:b1:9d:a5:a5:bb:59:77:6a:8b:93:8e:50:
         24:ba:9c:a5:64:18:0b:cc:ba:67:d8:76:1e:d8:92:77:34:92:
         fa:51:dc:90:c2:8c:bc:25:44:c7:df:58:76:73:fc:ea:7d:af:
         5a:1a:71:4a:41:d3:6b:20:60:3d:fb:7a:b9:ec:4f:9f:c4:15:
         01:f5:2f:aa:c1:df:d9:c6:8e:81:17:90:cc:85:7b:56:24:d5:
         27:f7:fb:28:5a:83:e8:48:8c:33:e0:89:84:c9:12:b4:13:79:
         69:1d:c9:bf:69:48:5f:d0:78:81:16:c4:55:93:78:30:34:7e:
         7c:d8:1f:86:f2:27:6f:1e:41:e7:44:d6:1c:e8:35:0a:9c:f3:
         93:04:5d:a9:40:81:9d:6c:78:d9:54:54:24:e5:13:d9:97:9d:
         69:fb:79:2a:6a:17:68:01:9c:fa:58:11:f2:2e:22:74:5a:59:
         45:ac:38:bf:63:aa:b9:b2:9f:b3:1a:d4:fd:c5:6b:b7:c5:5b:
         0d:6d:0a:22:76:1f:cc:46:92:b5:1c:da:bf:4f:1b:60:be:e8:
         72:bd:08:37:23:c1:fd:d0:5f:15:b9:74:fc:4b:8f:92:16:9c:
         52:b3:e0:34:cd:4a:a9:92:2d:1c:27:69:20:58:f6:21:55:04:
         10:39:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org