Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3235302e302f32332d3234203d3e203532333939.roa
File:                     3139302e3131302e3235302e302f32332d3234203d3e203532333939.roa (raw, json)
Hash identifier:          TRorHWmoUPIHEzLqBEiBLrOX1cKcrHnjXtWS8qPxG/I=
Subject key identifier:   A4:74:92:D1:2A:7E:22:4C:82:A4:8D:CA:7B:59:A7:D4:E5:09:85:3D
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1A913518D84EE06E11B2AB063C62EA26F5173F5D
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3235302e302f32332d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 18:21:58 +0000
ROA not before:           Tue 05 Mar 2024 18:16:58 +0000
ROA not after:            Tue 04 Mar 2025 18:21:58 +0000
asID:                     52399
IP address blocks:        190.110.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:91:35:18:d8:4e:e0:6e:11:b2:ab:06:3c:62:ea:26:f5:17:3f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:16:58 2024 GMT
            Not After : Mar  4 18:21:58 2025 GMT
        Subject: CN=A47492D12A7E224C82A48DCA7B59A7D4E509853D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:b2:88:86:77:78:f0:68:92:85:e7:14:d7:
                    8e:30:a3:58:7d:eb:aa:9d:86:9a:d3:24:77:84:9e:
                    5e:4f:4f:19:54:6f:0b:30:1d:5e:85:ee:f8:ae:44:
                    0d:5e:cc:bd:87:30:a0:53:93:c9:50:75:20:5e:d6:
                    a5:1f:51:5c:72:a5:5c:8a:f0:e7:56:6d:39:8c:59:
                    ef:5a:32:51:02:94:9d:b9:34:4f:e6:cd:23:7b:33:
                    33:23:f2:af:e9:64:9c:bf:08:57:1b:fd:4c:6f:0e:
                    95:04:6d:d1:0a:8c:c7:d6:76:d7:75:44:36:7a:80:
                    d8:56:1d:e3:88:18:40:08:85:99:41:77:e3:cb:8a:
                    fd:53:cd:68:9b:b4:38:b2:e3:de:9b:4f:ac:ed:41:
                    03:0a:6c:44:3f:7f:68:80:51:91:39:cf:9c:59:3c:
                    e5:12:13:c2:5d:6c:56:a8:29:e4:d2:7f:a4:50:05:
                    26:fe:12:fb:e0:6b:4b:01:c2:3b:69:90:a1:2f:c7:
                    56:be:da:a7:f9:bb:88:d3:2d:0d:48:68:9e:dd:ea:
                    85:f9:1e:36:e4:af:33:ce:57:57:2e:55:bd:ae:2f:
                    97:0d:38:bc:3f:08:de:89:53:36:6d:c1:a2:e5:7e:
                    f4:67:7f:75:eb:e1:fa:ed:9f:6b:2c:60:2c:6d:0d:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:92:D1:2A:7E:22:4C:82:A4:8D:CA:7B:59:A7:D4:E5:09:85:3D
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3235302e302f32332d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:bc:c9:59:0d:6d:88:59:4c:f9:9f:5f:de:e3:e5:c1:2e:
         11:bf:55:1a:63:d8:5e:59:22:98:1e:8e:b0:c4:be:2d:b8:15:
         32:6a:91:1f:35:1a:d2:a1:36:36:a6:c0:1b:23:6d:90:af:5b:
         f5:a7:7c:6c:50:14:4d:f9:be:a8:11:54:a8:d1:5b:bd:30:9c:
         20:24:45:73:e4:7b:db:05:86:fc:28:ab:41:a7:7a:34:af:ae:
         c0:d1:8b:58:a3:f9:98:ae:5b:24:14:4b:b6:6f:9b:2a:90:78:
         0e:c8:ed:58:30:8a:db:42:ce:23:9e:6f:db:d3:78:a9:86:e6:
         28:57:30:0a:0d:5c:4f:4b:b6:f2:a3:f8:2b:00:5e:d4:a0:21:
         5d:30:a1:af:d3:a2:ac:65:76:64:d8:5e:f1:e8:bc:9c:77:e2:
         a8:fe:00:32:cd:00:6e:c5:98:18:45:7e:08:30:16:f9:3d:ab:
         cd:c2:30:04:52:68:a0:75:87:65:e9:a1:5d:52:cc:8a:48:56:
         18:3e:52:5a:78:5a:ce:d5:47:99:ab:c8:34:10:c1:2e:1f:76:
         0d:12:02:da:2d:df:21:55:97:5e:ed:4d:c4:b1:dc:db:38:cb:
         f5:a4:44:99:d2:1d:1f:9d:ac:1b:6a:c7:0c:22:91:49:80:f1:
         09:79:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org