Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33392e302f32342d3234203d3e203139383633.roa
File:                     3139302e39332e33392e302f32342d3234203d3e203139383633.roa (raw, json)
Hash identifier:          zTXfE49O1YJBOL1yqIrwVsM8xkZjipmu1ALEH9nh5k4=
Subject key identifier:   54:FF:5B:4E:4A:5D:24:6B:01:42:EE:9D:52:F4:DA:A1:C8:BE:D7:87
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       5165C02273E982335F2FEAE8926EFC8134A13E65
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33392e302f32342d3234203d3e203139383633.roa
Signing time:             Tue 05 Mar 2024 18:10:28 +0000
ROA not before:           Tue 05 Mar 2024 18:05:28 +0000
ROA not after:            Tue 04 Mar 2025 18:10:28 +0000
asID:                     19863
IP address blocks:        190.93.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:65:c0:22:73:e9:82:33:5f:2f:ea:e8:92:6e:fc:81:34:a1:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Mar  5 18:05:28 2024 GMT
            Not After : Mar  4 18:10:28 2025 GMT
        Subject: CN=54FF5B4E4A5D246B0142EE9D52F4DAA1C8BED787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:07:4d:2d:cc:15:2c:42:8e:49:0e:d5:c8:
                    f3:93:f6:2e:db:6a:5f:f9:f1:5e:12:23:3d:5c:9a:
                    f9:c5:27:4f:9b:41:4e:bc:fd:5d:06:1a:ea:86:0f:
                    e9:c9:79:96:24:f3:2f:f2:58:73:d5:77:3e:de:0e:
                    aa:7f:e8:0e:7b:be:6e:4f:80:8a:ae:48:00:77:9b:
                    25:6c:a0:58:fa:f3:ff:cc:af:06:91:9f:84:16:b5:
                    61:7c:d3:14:85:4c:2f:00:4b:b0:3f:59:b7:38:b4:
                    e1:0a:61:2c:fe:f5:5f:53:98:f5:53:e3:09:18:7b:
                    04:42:fb:f1:90:30:bf:18:90:e6:6c:d3:5e:d0:e8:
                    22:98:72:01:fd:0b:b2:3e:39:26:77:71:5f:06:5b:
                    d0:8f:2b:42:3c:3a:6b:92:02:76:ba:0c:31:43:4e:
                    bb:d6:b5:65:c0:ee:80:8c:b5:b5:be:a3:71:29:29:
                    da:30:1b:07:b7:5b:58:cf:6b:a2:33:d3:f9:22:98:
                    e3:90:54:fb:d2:ee:d3:51:77:46:db:13:e6:cd:a6:
                    26:54:bc:22:c4:76:05:fa:03:6c:2a:3f:54:72:95:
                    1a:3e:b2:44:4e:03:73:a9:4b:06:88:10:c6:b2:70:
                    f9:0b:16:3c:aa:08:df:d3:a0:5f:b0:1b:5e:19:06:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:5B:4E:4A:5D:24:6B:01:42:EE:9D:52:F4:DA:A1:C8:BE:D7:87
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33392e302f32342d3234203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:b4:99:08:af:5e:99:e0:ea:09:6b:4b:00:d0:c6:6d:e6:
         96:3b:6a:3b:90:a1:8c:8f:05:44:a3:63:9b:22:66:38:2c:61:
         c0:39:04:e7:9e:17:1a:44:c2:1d:b6:8f:a8:39:55:99:93:3d:
         2d:ef:c4:99:89:cb:50:80:f5:92:a0:ec:58:8c:1d:51:12:84:
         83:ec:b3:39:b2:ce:7a:91:12:b8:d3:65:59:18:dd:63:1b:6b:
         c6:c4:e4:bb:64:b8:26:0b:39:c2:03:41:29:5b:ce:fc:2d:6e:
         b2:ec:a2:6f:6a:e1:72:5e:3e:7b:21:49:bc:37:c6:52:90:ca:
         d3:8b:2d:b7:88:41:e7:49:a0:e1:3a:19:6a:18:7d:9a:e2:2a:
         09:b8:9d:4c:d1:13:ae:b3:52:93:b7:ae:d4:9b:a9:16:d7:37:
         bb:0c:3a:7b:96:2b:97:71:4c:82:95:ce:37:1f:e0:2e:2d:34:
         bc:e4:0d:b3:ad:64:cb:ef:4e:47:e4:21:cb:1f:81:d4:8c:90:
         a1:d0:fc:af:19:c1:fc:eb:0b:85:f4:9d:6a:60:f2:ff:7d:12:
         3a:75:8f:7d:2e:65:92:d2:3f:b3:4e:ab:f0:46:d4:ad:69:38:
         ae:57:b6:b1:90:8f:30:e2:ae:18:60:c0:f9:db:d4:30:6c:b4:
         5f:8d:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org