Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3139302e3132332e3234302e302f32302d3234203d3e203532343836.roa
File:                     3139302e3132332e3234302e302f32302d3234203d3e203532343836.roa (raw, json)
Hash identifier:          HeIwzoBI1g+Nab+hCNLP+0bDXig3nA2hKdl8er3jmoc=
Subject key identifier:   71:2D:AD:49:0D:BB:00:42:35:59:0A:C4:27:E6:7B:E2:54:35:83:92
Certificate issuer:       /CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
Certificate serial:       5C7165DCF431A3147FE6D117D981660C2AF0125A
Authority key identifier: D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3139302e3132332e3234302e302f32302d3234203d3e203532343836.roa
Signing time:             Tue 05 Mar 2024 18:14:51 +0000
ROA not before:           Tue 05 Mar 2024 18:09:51 +0000
ROA not after:            Tue 04 Mar 2025 18:14:51 +0000
asID:                     52486
IP address blocks:        190.123.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:71:65:dc:f4:31:a3:14:7f:e6:d1:17:d9:81:66:0c:2a:f0:12:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2153B62E49F8ABC50BE582BB8297728599A91FD
        Validity
            Not Before: Mar  5 18:09:51 2024 GMT
            Not After : Mar  4 18:14:51 2025 GMT
        Subject: CN=712DAD490DBB004235590AC427E67BE254358392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:06:d0:5b:cf:81:b9:23:e6:7e:99:d3:cd:
                    92:41:94:a0:77:4d:ae:36:82:2b:a0:e1:66:80:1d:
                    9a:c7:27:f8:60:8b:76:67:83:c9:9d:d4:4b:a4:5e:
                    68:b8:b1:6f:21:51:82:41:98:52:6a:5c:f8:53:6e:
                    e5:71:16:c1:9d:1c:ca:80:d1:a5:a3:e3:43:b0:4c:
                    66:83:5d:be:ac:f9:78:bf:b1:8e:bd:35:72:6f:c6:
                    5d:59:1a:da:19:13:87:ce:be:9d:bc:0a:67:bf:81:
                    ca:fd:0f:01:c8:63:b1:2c:b0:20:7b:20:7d:c8:52:
                    f1:7e:24:aa:36:07:2a:36:b2:8e:0f:63:5a:88:63:
                    ed:61:24:c6:22:34:d4:86:0f:03:c3:88:72:04:dd:
                    23:77:a0:07:15:ae:40:c0:26:69:e1:02:76:e5:a3:
                    d4:19:8a:a7:3f:8a:8d:9f:06:3f:f9:c2:42:87:98:
                    b4:d6:88:4f:40:f7:8e:b3:a7:d9:3b:02:c8:6d:af:
                    c0:66:6b:1d:a0:a7:a2:2d:e5:c3:5c:d4:7d:19:1c:
                    f4:ac:e3:fc:c3:40:c0:96:3c:9d:c2:1d:07:18:19:
                    76:2d:8d:f2:85:95:e8:7a:67:c1:7b:7d:02:5c:f9:
                    19:02:9a:84:ab:04:5d:c5:17:18:76:c7:71:3e:c4:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2D:AD:49:0D:BB:00:42:35:59:0A:C4:27:E6:7B:E2:54:35:83:92
            X509v3 Authority Key Identifier:
                keyid:D2:15:3B:62:E4:9F:8A:BC:50:BE:58:2B:B8:29:77:28:59:9A:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2153B62E49F8ABC50BE582BB8297728599A91FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EDA414F342F11CF67E9733027D6DE98ACC0B35E8DD72DBF4868DA584B9E4375/0/3139302e3132332e3234302e302f32302d3234203d3e203532343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:04:b2:54:0d:5f:b9:13:18:c8:ac:9f:89:a3:62:8b:9d:
         38:b0:a7:e5:99:4d:e2:04:7c:1a:68:9a:cb:10:a7:cc:b7:f1:
         b7:27:cd:0c:7c:ea:d9:c5:73:ff:d1:07:5b:e0:f3:93:12:72:
         9b:4f:dc:58:93:2f:e8:97:b8:39:f7:a8:a6:0b:78:40:f9:26:
         65:d2:d7:45:ca:78:5a:b3:dc:62:30:75:7b:f0:3a:e8:e6:ad:
         d5:f8:4a:cb:7d:08:43:0f:69:ed:e0:3e:43:b4:63:5a:63:1e:
         43:44:f1:6c:96:2a:d0:ed:4b:2f:25:71:2d:76:79:c1:f4:20:
         0f:7b:e1:84:68:a2:a9:24:b6:01:25:9a:f7:7d:d1:54:1d:14:
         e4:39:49:24:5b:8a:6c:77:7c:ca:e9:fb:99:09:d3:2f:a6:92:
         27:ec:07:ad:3a:fe:a0:da:2f:50:cf:ad:d1:3b:83:92:f8:4d:
         14:43:52:ba:f2:61:59:92:18:58:b6:94:67:de:ec:58:7a:8e:
         1c:0a:9a:ea:e3:1d:5c:85:b2:07:94:0a:7c:63:61:2f:8d:9f:
         02:f5:cc:02:3c:f0:01:5c:9a:4b:26:51:9e:30:ae:b2:d3:be:
         18:07:4f:31:a0:18:c3:1a:e7:07:61:28:82:47:de:10:ec:18:
         10:26:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org