Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          tzCJByOExGvm0hHUCcad9kPJ9ebvdoBRFl0GhQIg6gw=
Subject key identifier:   9F:D2:EF:40:B0:C3:0E:E9:94:9A:8A:7F:A5:94:D2:CF:8D:35:05:B5
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       09C3731C48769428E7D665930E1B1F7D3C2E66A2
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 05 Mar 2024 18:04:00 +0000
ROA not before:           Tue 05 Mar 2024 17:59:00 +0000
ROA not after:            Tue 04 Mar 2025 18:04:00 +0000
asID:                     20454
IP address blocks:        190.112.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:73:1c:48:76:94:28:e7:d6:65:93:0e:1b:1f:7d:3c:2e:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:59:00 2024 GMT
            Not After : Mar  4 18:04:00 2025 GMT
        Subject: CN=9FD2EF40B0C30EE9949A8A7FA594D2CF8D3505B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:ab:30:a3:00:c0:87:58:36:46:cd:51:f3:
                    18:6f:12:56:63:09:d7:f8:e4:4f:34:ee:d0:63:50:
                    fa:36:ee:5c:09:39:2d:69:b7:54:0c:30:25:3a:eb:
                    ff:4d:84:3b:53:c9:ea:11:c5:8e:75:6f:f7:31:e0:
                    42:19:a9:c6:8a:ce:94:52:06:67:65:aa:40:8e:9d:
                    43:62:fa:f5:8a:2a:cf:56:74:8d:ec:25:9f:03:26:
                    21:bf:a2:de:ac:89:a2:95:fc:73:19:af:57:96:d7:
                    45:9a:22:31:c0:77:1c:ab:b2:96:4d:6b:12:68:9b:
                    89:51:18:f3:77:10:77:cc:e1:02:d6:b0:d2:7c:6a:
                    6d:77:f5:c0:f8:0b:0b:c3:32:5a:3a:4a:0f:dd:c4:
                    6b:9e:34:a3:a3:2e:7f:4f:21:bd:a7:0d:20:9b:e4:
                    84:53:fa:da:92:14:54:da:19:3c:13:3c:b7:c6:69:
                    46:4f:1f:6b:05:ca:11:9a:e0:9d:6d:2b:98:ac:70:
                    6e:24:b2:48:29:d0:bb:b4:89:8a:8f:dd:fb:80:a5:
                    8d:0d:31:b2:bd:11:64:8c:96:f4:6a:68:d5:bd:ef:
                    64:ed:cb:97:fb:0c:74:86:c5:39:02:dd:56:d4:4c:
                    25:3a:88:9e:82:64:e7:a1:29:64:59:ba:84:00:1b:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:EF:40:B0:C3:0E:E9:94:9A:8A:7F:A5:94:D2:CF:8D:35:05:B5
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a5:04:35:8a:cb:c6:71:83:cc:fc:10:1b:60:08:28:d7:2d:
         3f:66:e0:a7:14:8f:4f:cd:b9:c0:de:b7:dc:c5:4c:e3:00:33:
         6f:fe:29:dc:9f:db:ab:74:d9:52:68:75:ec:bf:7d:eb:54:4b:
         ab:78:2f:f8:37:a0:ce:21:6a:58:e3:f8:3d:16:54:37:bb:b8:
         07:c7:ba:3b:b6:dc:d7:ab:6b:1d:3c:63:7c:0b:8e:2f:d0:17:
         03:2a:d1:cc:90:c9:2f:da:87:08:84:00:1c:e0:79:48:bd:91:
         1d:b2:41:da:2e:e8:12:2a:4c:c2:e5:07:c0:54:38:d5:cf:0c:
         2a:96:24:6b:85:23:33:5b:5b:34:08:14:2e:7b:57:1a:4c:b3:
         09:75:42:85:8e:62:af:9f:de:a5:87:2c:89:da:9f:12:1d:ae:
         25:ba:cf:52:19:f8:89:cc:d5:dd:c2:7f:fa:4f:f0:09:a8:0f:
         fa:df:43:e2:23:e0:3c:f2:97:9a:90:7c:fb:18:89:f7:e8:e7:
         4e:98:0a:13:25:a1:4d:3a:3d:39:ca:85:a4:b6:5b:de:ba:cc:
         26:8e:a5:2a:5f:dd:74:e0:fe:c0:32:31:c4:d9:85:22:e7:44:
         ac:65:36:d3:23:74:56:ca:8b:76:67:a9:c8:f0:bc:95:d5:87:
         e3:4e:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org