Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34302e302f32312d3231203d3e203532333437.roa
File:                     3139302e3131312e34302e302f32312d3231203d3e203532333437.roa (raw, json)
Hash identifier:          cBqmH2kh7Ja8uKPOSJC3C2Y21u2sdBe4MYBvIcv1nSw=
Subject key identifier:   9F:11:FD:6C:15:C7:84:A1:E5:65:3E:C9:A4:49:63:5D:42:28:D9:EF
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       626666A6F71F99C6715CA09C46C97DD5A9AF763B
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34302e302f32312d3231203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:29 +0000
ROA not before:           Tue 05 Mar 2024 17:36:29 +0000
ROA not after:            Tue 04 Mar 2025 17:41:29 +0000
asID:                     52347
IP address blocks:        190.111.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:66:66:a6:f7:1f:99:c6:71:5c:a0:9c:46:c9:7d:d5:a9:af:76:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:29 2024 GMT
            Not After : Mar  4 17:41:29 2025 GMT
        Subject: CN=9F11FD6C15C784A1E5653EC9A449635D4228D9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:ae:3c:20:0f:af:0a:3d:4f:a7:24:2c:b3:
                    1f:08:b8:0b:35:58:98:59:e0:65:91:55:42:ca:f3:
                    d0:ac:c2:d5:6a:2e:7b:5f:1f:0b:86:fa:94:97:9c:
                    41:b3:aa:02:9e:f5:a6:89:68:4b:b2:b4:1d:7a:cb:
                    8a:d9:42:6e:ba:dd:cf:c9:1f:ce:de:ef:79:d3:26:
                    b5:f0:f2:bf:c5:4f:64:5a:55:01:6b:62:65:7a:9e:
                    58:49:91:d9:7e:a9:95:f1:05:bc:7c:0d:96:cb:50:
                    56:c9:6d:71:99:2c:dc:13:85:8d:7c:de:c5:f6:fb:
                    e1:f1:3c:90:03:b5:6d:f7:8a:eb:67:ee:1b:ec:3b:
                    be:26:48:58:a0:37:66:61:74:29:e1:79:4d:ee:b9:
                    80:41:a9:ad:8a:6b:d7:b7:6f:d7:7e:9b:bf:d5:f4:
                    64:15:71:6a:ea:2d:ae:70:00:a9:f3:a9:b5:cd:20:
                    bc:a5:d3:11:0b:1d:1d:56:db:ef:13:d7:10:5c:4c:
                    cd:50:45:20:e4:20:0e:91:ce:41:dd:79:c7:27:89:
                    cf:3e:3c:79:0c:67:3b:bb:5c:4f:79:9c:6c:58:8b:
                    88:db:49:3f:b9:23:e5:ae:e2:7e:b5:4f:6d:5f:50:
                    00:28:c2:e1:6c:34:ec:bd:eb:cd:f3:dd:72:e3:00:
                    a0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:11:FD:6C:15:C7:84:A1:E5:65:3E:C9:A4:49:63:5D:42:28:D9:EF
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34302e302f32312d3231203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:75:00:6c:30:1e:29:64:e4:0c:2e:b7:36:57:a3:be:e6:
         ec:2f:a0:a6:68:45:36:13:cd:f8:d9:e6:d3:1f:f6:75:8d:95:
         a0:d0:fc:f8:ad:d9:f1:e1:15:98:6d:bf:b3:db:a7:95:b0:3a:
         9e:df:f3:fb:93:90:d8:57:2d:9f:06:d2:be:49:c7:23:f4:ce:
         1c:5a:d1:05:e6:8b:96:b9:b8:48:4b:6c:39:b4:b2:99:bd:d5:
         31:71:20:a8:6e:e1:39:ea:52:bf:ad:d9:8d:f7:5c:ef:d3:69:
         c1:83:df:82:74:14:a8:03:2f:ae:ca:61:0d:44:ab:3e:eb:a5:
         d7:70:9e:a1:81:b0:4b:e7:38:6a:4d:15:c7:33:a1:26:f6:4a:
         31:7c:3b:a4:2b:b7:6b:78:4e:04:4f:5a:db:cd:28:64:3e:01:
         ff:50:a1:71:3b:2c:e4:e2:8b:41:fe:f4:6d:69:14:3f:30:03:
         ea:42:62:5b:6f:0b:1e:a3:84:24:38:de:36:f4:20:c3:2c:5e:
         0e:e0:75:84:8a:0b:65:50:f5:3a:2d:1a:af:4c:e5:84:60:69:
         2f:8d:96:9f:7d:84:f6:74:9f:9e:ad:79:6c:4f:df:c9:79:28:
         42:6b:76:25:93:ec:11:c3:2d:0a:59:e1:b8:9d:3c:c2:fc:df:
         f4:8f:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org