Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34382e302f32312d3231203d3e203532333437.roa
File:                     3139302e3131312e34382e302f32312d3231203d3e203532333437.roa (raw, json)
Hash identifier:          hkgqmCX9QRHZRFYI9FsTyeGjgfInUt+dHEfKFXlRO1w=
Subject key identifier:   F2:74:DC:01:1A:CE:32:57:D6:CF:2B:9E:77:A8:F0:9F:09:62:34:98
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       706EBA2FF3F34BFCB5D9A9373FEDEBE8EE160F87
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34382e302f32312d3231203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     52347
IP address blocks:        190.111.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6e:ba:2f:f3:f3:4b:fc:b5:d9:a9:37:3f:ed:eb:e8:ee:16:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=F274DC011ACE3257D6CF2B9E77A8F09F09623498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:2a:c6:95:9f:2e:b7:74:54:05:2d:e6:2c:
                    3a:47:db:a5:19:d1:41:14:ae:fb:db:f5:dc:cf:4a:
                    5d:8e:57:c8:fe:2d:34:4a:78:71:97:b3:6f:5c:c2:
                    4e:2b:54:00:8f:f6:7d:88:d8:b0:46:90:e4:83:fa:
                    7f:8f:2e:fe:1c:77:91:41:6c:aa:5e:ff:91:3b:6d:
                    08:7b:96:68:e5:ae:90:34:74:fd:91:71:44:a4:8e:
                    2a:1f:1d:f0:a5:70:e8:dc:48:4c:27:96:7c:78:c4:
                    fe:73:d6:b4:a9:78:83:aa:c1:d0:ec:7f:66:a1:4a:
                    d8:e9:a8:11:14:1f:81:4a:8b:ed:90:46:4d:ec:54:
                    24:35:c3:74:bb:64:a3:d2:11:17:99:a5:5c:1a:fa:
                    ed:bd:5a:be:23:ff:c8:84:2e:25:e5:aa:ce:13:ee:
                    a7:33:b1:a5:f5:79:fd:fd:00:8d:9c:62:34:1f:71:
                    69:ee:1a:52:97:26:c3:28:99:53:55:56:36:0c:eb:
                    ee:36:61:02:9d:ff:bc:d2:80:b2:0b:1d:f3:4f:23:
                    41:45:17:01:5b:c9:4c:40:6d:c4:52:a8:52:c6:2b:
                    32:16:61:19:95:7e:20:89:97:ad:e6:0f:c0:c8:67:
                    db:1f:16:14:84:bf:a7:00:36:ed:96:39:9e:d2:de:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:74:DC:01:1A:CE:32:57:D6:CF:2B:9E:77:A8:F0:9F:09:62:34:98
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34382e302f32312d3231203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:24:8d:88:df:1b:c9:bd:6d:bb:06:18:83:49:05:e4:71:d7:
         9d:b3:64:1e:e1:39:bf:0d:51:d4:fe:27:6f:93:7c:2f:eb:94:
         34:45:35:15:74:ac:8e:1e:a0:a3:c7:3c:34:14:8d:78:7a:fe:
         fc:2c:71:49:c8:5e:b5:22:37:48:20:38:f4:91:84:61:2f:b6:
         df:87:01:90:ab:79:60:c6:cf:cb:c7:41:cb:90:f7:a4:45:75:
         80:3c:e6:79:9e:77:c1:b7:75:80:69:aa:b6:1f:0c:05:0a:f4:
         aa:3c:e5:9c:ba:14:e8:af:ce:40:4f:d8:a2:5f:3a:50:98:dd:
         45:c1:07:f6:49:4d:bf:e5:68:ec:87:15:f4:d2:48:e7:7b:2e:
         bc:d0:21:e6:2a:6f:f4:91:29:fe:2b:79:5b:7c:c9:46:38:a4:
         f8:05:68:49:74:38:c4:4e:57:aa:79:e1:1c:13:8e:02:1c:0a:
         f9:71:17:90:d1:cf:9f:f4:5a:99:97:40:d7:46:19:d2:e9:5b:
         ed:6a:af:d0:8c:5e:5d:d2:c4:d8:0e:98:3c:9e:c4:6d:81:32:
         dd:9b:5a:7a:38:09:2d:9f:74:b8:c6:a3:68:b0:fd:b8:b3:61:
         56:d0:a2:3e:5f:7f:c2:13:bd:2f:d4:da:a7:d6:be:a8:f3:2d:
         5e:90:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org