Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131342e33322e302f31392d3234203d3e203237393031.roa
File:                     3139302e3131342e33322e302f31392d3234203d3e203237393031.roa (raw, json)
Hash identifier:          X+BrnqP2W/XUgUfoT8blEY9g42kpeJTrgUJoWhFpwCs=
Subject key identifier:   8A:37:6A:CD:77:18:0E:2A:52:DF:66:6F:BF:62:57:1D:B7:8C:51:AB
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       511E938E4575423A99F833812FD8183A29B3DB27
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131342e33322e302f31392d3234203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:43 +0000
ROA not before:           Tue 05 Mar 2024 17:37:43 +0000
ROA not after:            Tue 04 Mar 2025 17:42:43 +0000
asID:                     27901
IP address blocks:        190.114.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1e:93:8e:45:75:42:3a:99:f8:33:81:2f:d8:18:3a:29:b3:db:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:43 2024 GMT
            Not After : Mar  4 17:42:43 2025 GMT
        Subject: CN=8A376ACD77180E2A52DF666FBF62571DB78C51AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:85:5e:34:cd:e3:6c:24:d8:01:7f:06:e4:
                    46:76:e6:81:fe:91:8d:f9:1f:82:72:39:96:9d:3d:
                    71:80:af:9b:fa:02:73:0e:12:24:d1:52:d8:38:db:
                    a4:79:48:d1:91:99:b6:56:cf:ac:89:d5:a0:0a:55:
                    df:39:19:a6:6c:03:23:ee:bd:7a:e6:0e:bf:72:9d:
                    ba:b6:ae:6d:a8:36:38:5a:47:3e:dd:30:f5:f2:43:
                    81:3d:00:4d:77:4d:16:11:65:69:c7:26:fb:6a:18:
                    c7:6c:95:8a:5c:5a:0d:6b:47:73:b6:ca:18:74:74:
                    c5:e4:67:2f:b4:10:7d:9a:0e:40:0f:a5:16:34:d3:
                    db:61:83:8b:eb:7e:13:fc:e7:05:02:6e:a9:34:9b:
                    4d:71:51:55:36:eb:db:c2:22:08:1a:af:16:30:27:
                    9f:75:6e:4b:72:7a:da:a5:0b:c6:29:45:6e:3e:f1:
                    27:3c:38:fe:75:c1:b8:9a:71:47:1a:21:4a:de:da:
                    1c:df:07:55:82:c5:fa:6c:a1:58:7a:f6:58:a2:d5:
                    64:c2:1a:7d:0e:ae:6c:fd:85:e5:b0:39:d9:83:b7:
                    0b:10:49:6b:7f:0e:ae:91:ea:44:b2:b9:64:b3:db:
                    a4:23:45:59:97:75:bf:41:10:29:f3:5c:c9:90:e7:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:37:6A:CD:77:18:0E:2A:52:DF:66:6F:BF:62:57:1D:B7:8C:51:AB
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3139302e3131342e33322e302f31392d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:b4:ef:c5:d6:d8:da:1c:0f:18:bd:25:52:29:91:93:3d:
         3e:85:34:06:30:46:3f:57:61:87:60:08:86:28:23:e4:1e:72:
         58:9d:9e:71:bd:7d:64:0f:6e:3b:e2:65:1c:8d:9f:76:25:93:
         a9:d2:be:c7:d3:4b:11:0a:08:e3:2d:62:1f:ca:94:56:d6:92:
         38:76:10:ab:07:c5:92:e4:f6:a9:40:9d:72:83:c9:a8:43:23:
         d8:0a:6d:c4:41:4e:79:85:f8:b1:c1:eb:6e:13:44:8c:cf:c0:
         bb:79:84:e5:2e:15:71:d6:c1:9a:e4:25:7c:66:80:7a:f7:d3:
         64:09:c6:da:5f:68:c7:66:27:08:4e:8e:7a:ca:62:8b:14:b1:
         b4:69:f3:56:f1:a0:01:63:78:0a:51:3e:7c:2b:f2:7d:ac:4c:
         e0:f0:dc:ce:0b:b1:cc:0f:16:cc:83:b1:46:c6:95:00:5c:d4:
         d4:a6:2b:8b:c2:d7:2b:85:0f:0b:23:68:54:c0:01:74:a9:8a:
         49:cd:14:f0:41:ee:be:31:81:49:79:7a:18:84:d6:b6:16:6c:
         7e:8a:52:a9:bd:a9:17:f6:1b:09:19:c8:7c:f3:c1:c3:70:14:
         38:58:61:2d:6d:66:9b:06:fb:86:71:0b:85:8a:91:b8:69:98:
         ff:fd:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:44 2024 by rpki-client on console-fra.rpki-client.org