Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32342e302e302f31342d3234203d3e203139343239.roa
File:                     3139302e32342e302e302f31342d3234203d3e203139343239.roa (raw, json)
Hash identifier:          oM65Puww9iBlWQMMO0VcjqgPHCkLZe/okqP704zXqkg=
Subject key identifier:   73:BD:D7:0A:8C:D9:B2:BD:21:45:40:97:C9:AF:90:9D:0B:27:18:25
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       67E220DB5736614F0FD92D23BD3F4A15588156
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32342e302e302f31342d3234203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:15:09 +0000
ROA not before:           Tue 05 Mar 2024 18:10:09 +0000
ROA not after:            Tue 04 Mar 2025 18:15:09 +0000
asID:                     19429
IP address blocks:        190.24.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:20:db:57:36:61:4f:0f:d9:2d:23:bd:3f:4a:15:58:81:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Mar  5 18:10:09 2024 GMT
            Not After : Mar  4 18:15:09 2025 GMT
        Subject: CN=73BDD70A8CD9B2BD21454097C9AF909D0B271825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:fc:ff:97:e8:fb:9d:7a:88:40:76:cb:ca:
                    b4:1c:80:df:3e:fa:37:aa:ae:49:8c:e9:0d:6a:68:
                    c0:76:4e:e9:39:03:16:42:2f:73:6e:eb:d4:cd:31:
                    1c:49:d6:3e:4e:28:50:2b:e6:ee:12:ab:ed:f3:60:
                    f9:2e:63:56:95:89:d1:db:8b:c7:42:5c:6c:ab:16:
                    32:84:42:4c:c8:26:a7:4d:95:48:57:33:00:2c:14:
                    dd:48:b6:14:ff:0b:47:d3:8d:ce:11:5f:10:ba:be:
                    10:7d:e5:eb:a1:58:d3:3a:2d:0f:b9:f8:de:49:9a:
                    bb:48:f9:8a:50:9d:f5:b9:4d:af:dc:c4:49:90:e2:
                    ef:b5:2b:0e:0c:85:18:55:dc:22:f3:a1:4a:4c:f3:
                    ac:f7:26:80:cf:bf:88:33:d9:b0:35:36:be:3a:3e:
                    c6:2a:8b:73:4c:21:02:1f:89:1a:27:25:70:e0:00:
                    db:74:ff:89:1c:31:3c:d7:ea:09:89:0a:ba:69:e6:
                    7d:03:26:af:33:63:4a:48:25:25:83:07:66:7c:7a:
                    8a:fa:9c:ef:1a:72:4c:6a:d2:19:b8:f2:b3:d4:5d:
                    7e:76:9a:4e:41:2a:83:5d:8a:33:73:a6:77:e3:de:
                    df:b5:8c:8c:5d:16:7f:85:20:1b:19:1f:6a:4d:d4:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:D7:0A:8C:D9:B2:BD:21:45:40:97:C9:AF:90:9D:0B:27:18:25
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e32342e302e302f31342d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:d4:58:04:40:c3:9c:d8:4b:bc:54:f6:7a:79:62:82:d5:
         74:b6:1c:29:d1:20:10:94:85:46:b6:02:34:73:a6:7a:20:8c:
         a0:61:99:92:0a:bd:fb:20:74:11:3e:a6:95:c9:e6:f2:c3:ea:
         0f:b6:90:da:be:04:be:af:f1:e2:38:64:6f:14:e8:25:f4:35:
         b2:e7:83:a0:42:a2:e8:ac:07:b3:2d:51:b8:fd:6f:82:8c:49:
         c1:1b:54:37:42:88:9d:41:57:da:d1:13:41:c8:29:ac:fa:76:
         29:ac:d4:fb:5b:d6:fa:31:94:cd:9e:e9:1a:b0:65:3d:1d:f9:
         8b:80:41:52:0b:4d:7f:3a:97:96:f1:89:97:f4:44:df:8b:9e:
         6d:ff:a1:4d:1a:a2:7d:23:14:1c:72:7d:67:bb:ef:f8:60:dd:
         40:42:3a:0e:8c:de:00:d5:e4:97:cd:ee:4f:ea:d3:40:82:41:
         91:d7:36:30:ae:10:4d:97:28:8d:6d:96:a4:bb:c6:d5:2d:4e:
         7e:9f:b2:6f:bb:ac:06:c6:81:e7:1c:45:85:f0:86:32:72:cd:
         b2:b8:e9:81:3e:43:bd:ae:c1:6b:e9:21:e9:8c:1c:1c:80:33:
         11:42:d3:f8:b8:74:e0:f5:15:bb:6a:1c:24:82:65:5f:84:ca:
         8b:7f:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:34 2024 by rpki-client on console-ams.rpki-client.org