Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3232342e302f32302d3234203d3e203237373531.roa
File:                     3139302e3130382e3232342e302f32302d3234203d3e203237373531.roa (raw, json)
Hash identifier:          k/JyHnedY/q5tlO7c+xLjjQI2dsHSDqhYNQG/rqj5R8=
Subject key identifier:   3D:60:88:0C:F5:C6:F6:74:D1:05:AC:A3:B3:77:C6:71:2C:E9:01:AE
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       2848240A8230D8B7152A3C9A75599F7683815204
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3232342e302f32302d3234203d3e203237373531.roa
Signing time:             Tue 05 Mar 2024 18:02:55 +0000
ROA not before:           Tue 05 Mar 2024 17:57:55 +0000
ROA not after:            Tue 04 Mar 2025 18:02:55 +0000
asID:                     27751
IP address blocks:        190.108.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 02:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:48:24:0a:82:30:d8:b7:15:2a:3c:9a:75:59:9f:76:83:81:52:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Mar  5 17:57:55 2024 GMT
            Not After : Mar  4 18:02:55 2025 GMT
        Subject: CN=3D60880CF5C6F674D105ACA3B377C6712CE901AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:aa:bf:e6:3a:a8:f4:a2:62:2c:be:e3:9e:
                    02:f6:b7:d1:7f:04:9e:07:24:04:98:1b:62:29:d1:
                    63:7b:5c:58:cb:74:fa:e3:30:63:17:d5:51:34:f0:
                    c2:75:28:e1:3b:63:d2:86:4e:d8:bf:8b:da:77:9d:
                    50:d2:0a:70:7d:e9:e2:62:b5:78:19:8c:99:f4:f4:
                    d1:3a:45:20:51:41:51:ef:99:9d:e2:5f:6c:b7:9b:
                    40:04:a5:d5:29:10:70:89:e1:bd:86:b6:74:c4:51:
                    66:00:b7:4b:63:18:8f:3e:77:d5:c0:e7:82:05:53:
                    5b:0e:35:57:ba:cf:87:20:af:20:97:66:fe:29:11:
                    79:bf:55:f1:eb:97:c1:3e:45:7b:81:54:79:47:cc:
                    63:7f:64:4c:e9:3c:ed:26:44:df:a4:29:17:3c:25:
                    e0:20:ac:cf:bd:12:e7:5d:27:af:18:f3:8f:4e:d9:
                    a4:c3:4d:8c:c0:ed:e9:e7:db:af:a6:a5:0f:e4:a7:
                    de:b1:19:fc:b5:6b:6f:34:c0:53:c5:7f:53:60:a0:
                    5e:dc:e2:65:7b:bc:b5:79:e1:7a:a2:14:ff:c6:c2:
                    f7:74:3a:c3:bb:05:84:41:8f:f1:a3:68:6c:3c:ea:
                    42:85:ba:dc:c3:0e:48:7f:7c:79:56:79:34:88:f5:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:88:0C:F5:C6:F6:74:D1:05:AC:A3:B3:77:C6:71:2C:E9:01:AE
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3232342e302f32302d3234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:04:c3:91:ff:45:4a:77:c1:59:88:a8:8c:97:38:44:05:
         a2:18:61:de:40:0c:7a:66:f5:24:c9:05:42:74:24:da:25:2f:
         c4:ff:d6:c4:11:df:47:b6:9f:84:c3:57:73:54:89:f7:d4:09:
         c1:6f:ca:1b:bb:1c:be:53:8d:92:bd:78:09:37:99:bc:15:0a:
         c8:1d:33:c5:06:e6:41:33:e9:76:17:5a:d6:fd:89:61:c2:d5:
         ee:71:92:59:50:6a:5a:ae:89:ef:10:3d:5b:ab:98:3c:8e:c0:
         19:78:0c:c0:b7:85:34:b4:61:4a:0f:d2:00:07:ce:cc:e0:e6:
         e7:84:5d:5b:98:ed:6e:fe:af:cb:76:a0:2f:78:4e:b7:88:65:
         a3:1b:05:f8:b7:cc:d7:30:1c:d2:04:db:d8:3f:a9:35:60:c4:
         22:cc:78:32:08:35:c1:e2:64:0b:06:1d:14:2c:d7:58:76:68:
         39:b6:00:c0:c3:af:3c:7c:55:22:5d:5e:3d:05:da:0a:f1:20:
         65:49:9e:26:fc:fe:b4:8f:31:85:a9:da:8b:0a:a2:af:3f:dd:
         d3:cb:47:3a:ea:b0:49:52:48:a2:60:38:b0:01:c5:94:a4:06:
         7c:69:53:4a:e1:3b:bb:9b:d5:a5:2c:4f:9f:0d:73:1e:0a:c7:
         8f:87:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 11:16:47 2024 by rpki-client on console-ams.rpki-client.org