Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33322e302f32322d3234203d3e203532333534.roa
File:                     3139302e31342e33322e302f32322d3234203d3e203532333534.roa (raw, json)
Hash identifier:          7/O74S60FTcIaKuZN1db1b2yjCzdcfsB45BWfL5/ST4=
Subject key identifier:   A0:8A:F3:4A:AD:61:B8:ED:11:A3:3F:4C:74:7A:93:83:4E:C3:1F:20
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       4FB57E910C79286F0F824772F1071CE5A4ECBA4E
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33322e302f32322d3234203d3e203532333534.roa
Signing time:             Tue 05 Mar 2024 18:09:58 +0000
ROA not before:           Tue 05 Mar 2024 18:04:58 +0000
ROA not after:            Tue 04 Mar 2025 18:09:58 +0000
asID:                     52354
IP address blocks:        190.14.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b5:7e:91:0c:79:28:6f:0f:82:47:72:f1:07:1c:e5:a4:ec:ba:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Mar  5 18:04:58 2024 GMT
            Not After : Mar  4 18:09:58 2025 GMT
        Subject: CN=A08AF34AAD61B8ED11A33F4C747A93834EC31F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:e4:ed:b4:45:10:7c:3a:6e:94:8e:35:d6:
                    1f:94:82:cd:97:8e:20:4f:fc:2c:d6:22:cc:13:dc:
                    1b:67:fb:30:8b:16:7a:17:42:45:95:e6:06:dd:b5:
                    d1:a3:69:64:37:71:68:bc:82:8d:54:50:11:ed:2d:
                    b0:03:22:e0:be:7e:75:2b:2a:85:3a:6e:f0:54:40:
                    59:31:7d:c8:ec:2f:36:23:5b:20:25:3d:1e:92:43:
                    a5:71:ce:ca:d4:fa:b8:a5:68:e2:96:9a:e6:ef:c1:
                    3b:99:18:a5:6a:86:1e:a2:a2:22:a2:da:a4:dd:62:
                    67:ca:75:03:cc:79:12:14:76:cc:05:13:96:3a:76:
                    f6:df:06:a5:ab:0e:02:04:46:13:4a:4c:36:a2:da:
                    dd:f0:c9:56:1a:b4:f8:37:07:fb:b7:1a:7a:aa:68:
                    82:5c:b4:3f:53:b1:e2:4b:06:08:e6:88:1e:d8:21:
                    b2:b0:a0:d8:0b:7d:38:d9:57:04:af:f2:fe:03:f3:
                    c7:9a:de:0e:46:86:7f:84:e3:3f:6d:56:ce:30:37:
                    a9:2b:7f:b4:5d:65:cb:70:b0:59:3b:08:de:f2:ef:
                    85:77:29:02:79:5c:37:47:2f:4d:90:64:4d:f9:7e:
                    5b:79:c0:98:55:f4:18:5f:4d:8f:22:a6:70:db:f7:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8A:F3:4A:AD:61:B8:ED:11:A3:3F:4C:74:7A:93:83:4E:C3:1F:20
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33322e302f32322d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:03:cf:2a:e5:51:b1:e2:c8:1b:06:7f:37:ab:2a:97:65:7d:
         59:9b:0a:98:d2:e3:93:fd:f4:71:b4:c0:f8:be:2e:44:6e:ab:
         4b:8d:42:19:a5:a9:ab:bc:14:81:be:5d:5c:eb:02:03:3d:6b:
         98:e0:ee:26:e2:f9:2f:e3:2f:b9:57:4f:c2:dd:0e:75:ba:6b:
         c2:c7:cd:4c:3f:3a:52:68:f0:21:33:4d:f1:b7:fb:64:e0:f5:
         95:ab:6d:35:1a:f8:bc:42:19:e5:23:a3:4f:86:fe:d4:36:fb:
         9d:1d:bc:bc:62:ca:aa:fc:21:ac:ab:6d:2d:a5:a9:3e:e0:db:
         63:34:5b:f9:0e:36:ba:00:f9:c4:c4:2d:4a:11:c9:92:fb:36:
         80:2e:61:9d:41:16:45:b0:ab:bd:72:2a:da:cc:96:b8:79:e6:
         d8:52:11:6e:15:7e:fe:9b:29:0c:60:50:a7:86:77:61:f4:7c:
         24:b1:b7:b5:40:d1:f6:c2:43:e6:e4:db:34:2f:e0:39:a3:8c:
         f7:7b:b9:24:ce:03:bc:8a:ac:4f:b2:70:01:78:0f:40:28:4c:
         e0:98:61:23:32:60:f8:b5:5e:14:34:e5:e5:b0:1b:b5:83:ef:
         be:c2:ec:9c:4a:c3:9f:e0:1d:da:d8:c3:2a:d7:22:10:22:0d:
         a9:64:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org