Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32342d3234203d3e203230343733.roa
File:                     3139302e3131322e3230322e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          AUyMtdsO/AIq95KmzIjsWHyIgBrMjOOzV1map9i2peM=
Subject key identifier:   02:51:C9:A7:51:1A:27:78:DA:DB:6C:D3:4E:04:54:53:CC:26:B2:9A
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       19D58149B75CF4EEF9882E75B2DFEB978C537A34
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32342d3234203d3e203230343733.roa
Signing time:             Tue 05 Mar 2024 18:03:55 +0000
ROA not before:           Tue 05 Mar 2024 17:58:55 +0000
ROA not after:            Tue 04 Mar 2025 18:03:55 +0000
asID:                     20473
IP address blocks:        190.112.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d5:81:49:b7:5c:f4:ee:f9:88:2e:75:b2:df:eb:97:8c:53:7a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:58:55 2024 GMT
            Not After : Mar  4 18:03:55 2025 GMT
        Subject: CN=0251C9A7511A2778DADB6CD34E045453CC26B29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:ed:43:61:f7:e6:6e:57:61:ae:ce:c2:1b:
                    cd:fa:93:e1:6d:fc:12:d6:82:9b:79:39:22:b1:6f:
                    af:0c:a5:54:40:d3:52:90:e8:53:fc:41:08:ff:2f:
                    c2:20:e8:69:9e:b9:22:0f:a7:61:e0:e1:7e:27:11:
                    74:bd:e7:43:7c:4e:07:4e:e7:18:2f:6b:a0:74:e1:
                    80:35:65:ad:e3:08:a5:0d:c1:2e:d5:75:74:23:92:
                    e3:13:eb:06:83:6a:60:0f:19:60:a5:9a:4b:33:1c:
                    65:38:95:96:88:a3:b9:b8:92:82:51:64:5e:a8:9f:
                    c9:e9:59:03:3d:73:a4:48:25:00:f7:4f:25:b3:5c:
                    9a:ed:9b:6f:e5:5b:59:35:a9:cb:05:c9:1c:14:54:
                    a9:47:0d:dc:4f:8a:79:e9:ef:28:d6:3c:f0:74:0c:
                    9b:4d:6d:3b:82:8b:1a:2f:d7:21:de:07:bd:4b:13:
                    f7:ff:29:76:86:3b:81:e9:04:98:6b:79:14:f7:d8:
                    84:9a:da:78:e7:5a:8d:a4:05:1a:0b:50:61:9e:1c:
                    be:20:ba:30:b4:3b:cd:9b:91:a9:8e:e0:1d:44:ab:
                    78:a4:4c:cf:ea:38:ba:e8:2b:e6:6d:27:43:b8:03:
                    f9:e3:93:99:a6:eb:1d:18:cb:a5:5f:42:0d:0e:ac:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:C9:A7:51:1A:27:78:DA:DB:6C:D3:4E:04:54:53:CC:26:B2:9A
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:58:35:b4:14:06:4e:dc:f9:4c:34:ac:31:66:f7:c8:92:
         8e:3d:c6:91:5e:25:5e:51:88:d0:a8:96:8e:af:c2:7a:d5:9a:
         f0:b7:f8:dd:71:7b:02:2c:9e:0e:1f:94:d0:8d:bf:6e:d8:e2:
         87:c2:c7:fa:75:0c:a1:0d:16:47:70:05:e7:f8:07:65:86:29:
         e5:18:cc:18:19:1e:0a:65:a4:ca:db:51:68:c6:96:a8:8b:f7:
         51:34:2b:5a:e8:85:9f:a2:af:b4:bd:e0:f3:9b:65:9f:dc:60:
         ba:85:52:1a:2b:b9:f6:32:47:48:6a:5e:67:a2:50:aa:97:10:
         19:58:74:77:a5:e4:e1:5b:9b:f5:f5:4c:06:fd:c8:37:17:2c:
         fa:3a:58:13:c5:15:e9:59:6a:3c:ff:77:bf:91:37:a8:fb:7b:
         50:a9:5a:e7:4f:3e:bb:25:54:42:54:6d:17:c3:cf:26:fe:55:
         f9:6d:fd:67:56:27:b8:bd:23:c1:61:22:50:5e:23:af:fa:87:
         9e:0b:c2:41:28:1e:b2:59:cf:b2:6b:d4:12:66:d6:5e:b4:b1:
         cc:24:33:a4:0d:7b:ce:e2:53:e7:0b:bf:51:dc:3e:3c:a9:9c:
         79:a4:1a:21:0f:a9:45:9c:fe:40:8c:2f:2e:2c:ad:cf:02:d1:
         a1:fa:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:36:38 2024 by rpki-client on console-ams.rpki-client.org