Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203132313839.roa
File:                     3139302e3131322e3139342e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          zpUl+F3zIbYZtQ4xdauFI5dzktVBjmu76UxaMdSaTv8=
Subject key identifier:   12:DA:89:BC:23:0D:C4:DB:27:17:1B:9D:E3:1D:1B:80:38:3D:3C:E2
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       65792748BF575909186F2A9AB2A2B3B50F33B9A9
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203132313839.roa
Signing time:             Tue 05 Mar 2024 18:04:01 +0000
ROA not before:           Tue 05 Mar 2024 17:59:01 +0000
ROA not after:            Tue 04 Mar 2025 18:04:01 +0000
asID:                     12189
IP address blocks:        190.112.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:79:27:48:bf:57:59:09:18:6f:2a:9a:b2:a2:b3:b5:0f:33:b9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:59:01 2024 GMT
            Not After : Mar  4 18:04:01 2025 GMT
        Subject: CN=12DA89BC230DC4DB27171B9DE31D1B80383D3CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:a8:32:31:1a:43:ad:72:35:ba:4d:67:1b:
                    1f:f1:d0:fe:b9:1a:35:f8:d1:25:90:13:13:88:d1:
                    59:0b:c9:e4:42:be:23:9a:fd:93:6e:33:c7:d2:82:
                    7f:f8:6b:a5:bd:74:e8:1f:3d:f6:80:20:f5:40:fb:
                    5e:37:5a:c6:cb:51:81:0d:bc:e2:48:10:2e:7a:ea:
                    85:cb:98:ca:c9:05:56:0a:44:0f:08:9c:e8:01:4c:
                    80:c7:16:4b:36:e5:05:08:a1:02:27:90:fa:92:9a:
                    55:fd:a7:74:a6:97:65:10:42:aa:68:a4:1b:73:eb:
                    19:cc:ef:8c:6f:b2:e4:78:86:0c:18:97:10:19:69:
                    43:cf:73:94:a3:87:8e:03:27:70:48:22:c0:05:dd:
                    a0:1e:80:50:d2:b6:98:17:46:e2:ed:b6:a5:a6:ed:
                    d4:65:51:77:e4:4f:90:ad:bc:b3:9c:9f:36:f3:5e:
                    b8:9c:1a:ad:88:19:1b:0a:b0:02:05:a8:c1:22:26:
                    37:54:67:09:ad:2a:95:57:19:41:19:c0:c8:d7:7d:
                    2c:b0:7a:c6:9a:3d:82:9e:6c:95:8c:78:af:84:e1:
                    10:78:49:37:72:32:ba:34:0a:fd:30:ff:3e:01:42:
                    3e:e6:87:47:72:27:77:92:30:64:60:4a:57:84:55:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DA:89:BC:23:0D:C4:DB:27:17:1B:9D:E3:1D:1B:80:38:3D:3C:E2
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:91:b8:e0:fb:a3:fd:5d:f0:a9:8e:eb:c4:e1:e8:17:58:
         d4:08:17:d0:2d:c3:88:4a:4a:a2:d6:49:ca:f7:5f:0b:dc:3c:
         06:9d:d4:ea:f1:d3:31:c6:98:17:93:2f:f4:8a:73:37:ff:9d:
         af:ba:bc:70:25:02:9e:00:63:44:86:29:76:82:1c:05:ec:a6:
         68:70:77:c6:36:c4:cb:40:f9:3d:cb:9f:1f:39:24:ca:b2:e7:
         34:72:3b:da:b0:02:72:9a:66:34:d5:ef:6d:f7:b6:e2:c0:eb:
         35:54:fc:c4:1a:90:be:be:db:27:91:fe:9a:55:b3:19:4e:31:
         a1:e8:db:99:02:c8:9d:c4:69:5f:49:f5:d5:f8:0f:13:ce:a1:
         68:65:be:18:97:77:f7:13:b3:96:19:0e:c9:4f:74:ca:a0:b4:
         e8:f8:1b:2a:1b:19:c4:95:92:5f:8a:e1:9f:f8:d1:72:46:f1:
         b6:5d:1f:c8:b1:eb:4a:20:11:35:cb:fc:3e:47:4f:3f:45:eb:
         2c:9d:64:db:c6:b6:7c:c7:d4:6f:de:08:2d:11:32:0c:e8:3e:
         d7:e2:5d:b5:51:fa:4e:4c:20:03:cd:b5:30:71:f3:06:d1:55:
         20:cd:44:27:de:0b:d4:47:97:a6:bb:c1:24:f9:13:a7:5f:c7:
         2f:2e:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 13:32:45 2024 by rpki-client on console-fra.rpki-client.org