Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138302e302f32342d3234203d3e2036343239.roa
File:                     3139302e35342e3138302e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          YhGgjKzpvlJoSVMurdDCLkIvfOeLMsZ6NwagTljFPxw=
Subject key identifier:   21:42:A8:AA:C9:03:33:03:F7:9D:E8:1A:AE:16:22:52:DB:7D:CE:18
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       21BB0C2DA28BA404441872B355E71EAA3AE4D678
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138302e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     6429
IP address blocks:        190.54.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bb:0c:2d:a2:8b:a4:04:44:18:72:b3:55:e7:1e:aa:3a:e4:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=2142A8AAC9033303F79DE81AAE162252DB7DCE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:ab:5f:e6:c4:fd:fb:6c:8b:cd:86:f1:58:
                    10:a3:1e:3f:65:0e:bd:77:7e:38:c3:21:bf:a6:f9:
                    fe:33:41:f0:ae:34:59:c5:2b:ac:d0:f2:3d:20:63:
                    34:4b:bf:46:d6:7c:6b:f1:19:c7:6a:92:6d:fc:d6:
                    ff:41:2b:67:d8:c0:3b:c7:ef:be:c0:56:77:d4:2c:
                    17:a1:82:a2:8d:3f:77:ab:00:0d:4e:51:10:46:0b:
                    f1:ff:ef:e6:78:4d:4e:83:6a:00:9b:8b:d1:8d:30:
                    68:00:45:43:1b:9a:91:3f:ca:72:9a:10:53:f6:09:
                    fe:b1:50:73:88:e6:05:80:f7:b8:c0:ff:67:95:3a:
                    30:b7:09:ab:5f:30:ef:bb:e7:4d:20:33:56:ea:2a:
                    4f:5e:ca:12:e6:e4:9a:27:7e:b1:cc:3d:6c:e4:58:
                    1f:18:da:ed:19:04:c5:61:ff:73:8d:18:fb:b8:b0:
                    9a:f1:64:2b:c8:bf:62:3d:90:0e:cd:a6:75:d7:ef:
                    6f:29:d1:c8:5b:74:82:fe:9a:ee:eb:0e:91:f2:57:
                    95:08:02:f5:b0:f3:b8:98:cf:5f:4c:bd:91:e7:0f:
                    9a:70:d5:07:52:90:0b:a1:a5:19:19:14:fc:7a:d9:
                    c7:e9:de:06:50:dc:13:5e:4b:f8:db:8e:39:bc:b7:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:A8:AA:C9:03:33:03:F7:9D:E8:1A:AE:16:22:52:DB:7D:CE:18
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138302e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:5e:9a:73:00:04:8f:3c:37:30:92:8c:1c:93:31:7e:51:
         5a:c6:b3:42:c8:eb:c6:79:56:16:e1:5b:0f:85:4b:5f:46:c6:
         18:95:52:8d:a3:4c:35:82:1b:4f:f2:2b:9b:98:74:60:05:d2:
         2a:38:ff:32:d9:ae:4f:a4:e2:f0:43:81:c0:5d:ea:b3:47:a8:
         20:52:68:ca:46:2a:05:bb:78:e1:fe:c3:51:4f:fb:d1:10:b6:
         97:d5:6c:0a:8b:54:83:75:d7:00:27:65:a2:5b:69:12:63:b1:
         5d:44:62:08:71:10:83:75:29:99:cd:9b:e0:c8:c6:25:ba:33:
         89:57:83:ba:c4:71:fd:1b:cf:c2:4a:39:bb:bf:5b:e0:f9:a7:
         b8:06:7f:b7:11:ad:65:f8:a1:a2:08:42:20:66:05:db:d0:97:
         e9:0a:fd:19:b0:bd:ab:6a:d3:16:59:a6:66:89:f3:50:2e:80:
         12:e1:3f:5b:e9:87:77:cf:73:e5:e5:9c:30:88:dc:c0:07:24:
         11:03:2f:8a:75:3e:43:62:5d:fc:72:9b:86:76:64:55:a1:b2:
         8f:97:25:4b:91:aa:61:d6:da:12:f5:18:2c:d1:16:03:39:73:
         ae:73:e6:a5:ad:07:80:60:f8:f7:54:3c:7b:e9:94:8e:bb:86:
         e7:1e:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org