Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130322e302f32342d3234203d3e203532333939.roa
File:                     3139302e3131342e3130322e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          rDNf9DxpBKnxCdzNgcZ/OJcmwSwdANPIAp4U3SEIPtI=
Subject key identifier:   F5:04:49:97:CE:81:25:FB:6F:A9:EF:98:90:45:9C:B7:A2:71:7E:37
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       7958B5D139B70097DB1E199F17AD477FC313CEBF
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130322e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 18:22:00 +0000
ROA not before:           Tue 05 Mar 2024 18:17:00 +0000
ROA not after:            Tue 04 Mar 2025 18:22:00 +0000
asID:                     52399
IP address blocks:        190.114.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:58:b5:d1:39:b7:00:97:db:1e:19:9f:17:ad:47:7f:c3:13:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:00 2024 GMT
            Not After : Mar  4 18:22:00 2025 GMT
        Subject: CN=F5044997CE8125FB6FA9EF9890459CB7A2717E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:c2:44:44:73:d5:ef:96:ec:f2:4b:d6:6f:
                    13:f9:af:0e:48:57:58:3a:59:c5:7e:01:43:0e:99:
                    93:9c:39:59:c2:aa:e0:76:44:59:c9:40:ac:2b:53:
                    b6:97:16:f1:c3:89:78:0d:ee:fc:01:85:1c:94:da:
                    59:dd:a5:20:40:70:b2:5b:4f:cb:d6:8c:5f:51:05:
                    06:cf:86:02:be:4a:49:ba:71:fd:60:d2:4a:bf:6a:
                    93:72:84:b6:59:06:87:b4:4c:a1:7d:00:5b:5f:71:
                    e2:3a:fa:72:cf:6a:6f:0b:b1:49:f7:94:43:73:03:
                    41:20:8b:e8:95:e9:50:6c:ca:02:58:07:5a:4a:7d:
                    29:d3:3d:db:6c:bb:1f:da:bc:1f:c5:66:d8:c4:be:
                    23:9a:fa:91:38:45:f7:3e:46:8d:07:42:8b:db:3c:
                    d4:8b:00:24:f6:7c:22:0a:47:ee:68:be:97:65:63:
                    53:26:cf:80:9a:66:a3:0e:a9:c0:0c:79:42:b3:bb:
                    cf:49:95:41:10:80:a2:93:52:03:01:ee:01:e8:d2:
                    e9:c6:89:82:70:44:89:fb:56:2a:a5:f8:f7:6e:95:
                    a3:4c:9a:db:ed:00:60:a9:7f:f9:68:9c:9d:f8:c5:
                    78:2b:40:83:49:86:78:c5:b0:0b:ca:a2:2c:d1:8f:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:04:49:97:CE:81:25:FB:6F:A9:EF:98:90:45:9C:B7:A2:71:7E:37
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130322e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:40:48:93:09:15:49:81:35:94:77:16:ec:7e:66:4c:05:
         b8:91:86:9b:ce:71:7b:96:08:fa:cc:d6:7a:54:7f:10:27:f5:
         ec:f9:2b:f3:7d:cc:eb:7a:f8:53:a4:71:9a:e0:10:c3:87:8d:
         1f:f8:ca:9b:3f:17:49:12:fd:d1:56:05:d6:2c:fc:17:5d:d8:
         7a:1d:0a:0a:8a:ba:9e:d3:fd:2e:8f:8d:d9:e4:ba:68:f5:29:
         b4:87:1f:b7:5d:04:54:81:3d:61:b7:d3:89:48:57:30:de:de:
         3f:e3:94:8f:d8:97:6c:1c:25:2f:fa:81:ed:cc:27:89:14:7b:
         c6:d8:46:bb:6f:b2:b4:34:b6:39:e7:e1:6c:ee:06:6d:7b:d9:
         f3:3e:12:25:b9:1a:b3:82:9a:2c:89:1b:15:58:e9:24:25:ca:
         69:00:1e:74:7c:ee:4a:84:c8:9c:60:35:c3:8c:aa:19:3b:77:
         23:04:05:39:98:ad:92:f2:3e:07:4d:d6:1d:1b:a1:29:0d:4a:
         77:63:d6:09:d4:2c:e4:93:8c:d3:b0:61:cc:c1:a7:78:49:a1:
         7b:69:ba:cf:eb:de:76:92:fc:d0:2e:0b:b8:90:9e:8e:12:8b:
         16:46:76:2f:bf:70:43:bf:e3:8b:43:fc:7a:07:08:ac:e4:ea:
         3c:8f:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org