Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa
File:                     3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa (raw, json)
Hash identifier:          gXzO4rT7bthGIkqWMHIm+xjiC3KU+CMQTffnSmeNSdE=
Subject key identifier:   64:E0:B6:F8:14:78:75:B8:08:7C:76:53:6A:95:F3:9E:8F:87:61:8D
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       6A1C3F5720815F2969318F4923F5981A24FA6C23
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa
Signing time:             Tue 05 Mar 2024 18:09:59 +0000
ROA not before:           Tue 05 Mar 2024 18:04:59 +0000
ROA not after:            Tue 04 Mar 2025 18:09:59 +0000
asID:                     52354
IP address blocks:        190.122.158.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1c:3f:57:20:81:5f:29:69:31:8f:49:23:f5:98:1a:24:fa:6c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  5 18:04:59 2024 GMT
            Not After : Mar  4 18:09:59 2025 GMT
        Subject: CN=64E0B6F8147875B8087C76536A95F39E8F87618D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:93:ee:98:d6:27:7f:57:87:cd:d9:80:a7:
                    52:4f:a2:18:d3:1d:f4:7c:87:d9:33:91:a3:f8:e7:
                    6e:a4:73:56:d5:69:09:98:f9:7a:56:06:34:03:eb:
                    02:ae:97:28:55:a2:d7:5a:99:8f:f0:91:7c:18:65:
                    df:3a:0c:da:96:57:59:41:aa:18:1a:29:5c:02:6b:
                    7a:36:92:e9:59:1c:ee:50:3a:40:71:a3:27:49:37:
                    b6:a6:ad:0c:1f:01:0a:fe:ac:90:fe:8c:a0:5a:d3:
                    d7:c5:2c:a1:43:3f:81:5a:ba:ea:46:ac:4e:96:da:
                    69:3b:a8:ab:1d:be:b9:ab:12:31:cd:53:c8:0b:11:
                    0a:c1:60:34:00:c3:dc:5d:d7:57:89:d3:7d:9a:87:
                    74:ef:91:87:ff:40:2b:e0:69:bc:dd:e3:32:2e:43:
                    28:94:d8:8e:18:ab:df:3f:cb:1c:73:a3:9b:73:01:
                    33:32:6b:c4:46:0c:bf:06:d9:38:90:2f:6b:fc:26:
                    fa:c2:4f:31:65:5e:f1:27:98:5a:af:c6:f3:c7:51:
                    bd:c5:12:5a:57:06:43:09:db:6b:62:0f:4b:55:3c:
                    5b:ab:58:37:f3:5e:02:e7:71:7e:9d:bd:ee:c3:73:
                    73:40:e6:e2:8b:5d:f4:e1:38:79:b1:85:c1:ae:c3:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E0:B6:F8:14:78:75:B8:08:7C:76:53:6A:95:F3:9E:8F:87:61:8D
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:82:b1:e6:c5:26:0a:a3:76:7d:b9:7d:dc:e9:8a:15:a1:
         8f:e1:22:ae:cc:b7:b0:98:d9:16:3f:76:a6:9e:16:76:21:2f:
         5c:13:d0:58:26:87:f0:20:35:d5:f1:b6:ad:72:22:96:8f:55:
         42:1c:3b:fb:9b:bd:cb:ba:c0:e7:07:f8:df:8a:f6:3b:52:10:
         77:bb:31:98:19:9d:05:e0:d6:cb:f2:3d:b9:51:af:47:e9:2a:
         1a:0c:2a:41:ed:28:9c:71:14:25:5c:ab:40:a2:e3:ea:b5:23:
         6e:62:97:3d:91:45:0a:fb:bc:60:f0:45:c4:7f:42:e9:65:a6:
         b0:fd:74:8a:83:d2:fa:01:e7:20:de:8c:16:f5:57:81:58:d7:
         3c:01:60:75:21:19:0f:2b:13:6f:2c:ed:ff:98:44:e0:86:c3:
         5a:14:99:93:ff:a0:57:f1:17:bd:a6:7e:5f:a9:dd:a0:90:6f:
         2c:79:e5:90:34:86:83:09:b3:d6:d7:47:a2:6b:22:94:1a:78:
         ab:1e:b1:9c:d4:08:b9:00:52:bd:1a:14:5e:36:af:da:12:26:
         ba:b4:c1:16:31:06:df:ae:e7:8c:e1:5f:0d:d6:bc:2f:2b:b9:
         ce:f6:59:09:b2:51:9a:07:ab:f0:d6:d4:e2:e7:4f:15:3b:51:
         8d:c6:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:30 2024 by rpki-client on console-fra.rpki-client.org