Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35362e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e35362e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          WoiWZMBK2eINolxCHY07z3A6q6k05OqL//F3LdMJNW4=
Subject key identifier:   79:E4:16:8C:FF:7D:38:E2:24:6B:98:3B:73:AE:C6:46:7F:4F:8D:6A
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       2830BD426BD5092DE0B8848784E634F28BB8F769
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35362e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:25 +0000
ROA not before:           Tue 05 Mar 2024 17:36:25 +0000
ROA not after:            Tue 04 Mar 2025 17:41:25 +0000
asID:                     52347
IP address blocks:        190.111.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:30:bd:42:6b:d5:09:2d:e0:b8:84:87:84:e6:34:f2:8b:b8:f7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:25 2024 GMT
            Not After : Mar  4 17:41:25 2025 GMT
        Subject: CN=79E4168CFF7D38E2246B983B73AEC6467F4F8D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:1f:2d:8e:e3:80:05:85:cf:af:1b:e6:da:
                    60:32:9e:f9:be:51:ee:2b:9a:3d:60:dd:ca:39:bd:
                    4e:69:9f:d4:98:90:31:11:27:2d:24:ee:e3:42:b3:
                    ef:88:26:27:da:88:4d:15:e3:65:eb:bf:f1:fa:cf:
                    6e:b5:04:a0:3d:2d:aa:2c:72:77:ef:b4:07:50:dc:
                    12:fe:0d:5d:5c:96:a8:50:0a:2e:70:36:e1:f5:02:
                    7f:6b:c0:ad:c6:6c:91:6f:9a:f6:88:6d:20:85:f0:
                    0d:6c:a3:41:91:4a:14:83:a4:88:7f:b3:96:44:4f:
                    a7:26:de:a0:b5:67:74:7b:f3:56:80:5b:68:3d:63:
                    34:e0:36:65:43:21:29:c9:35:f3:69:70:8a:7a:8b:
                    2b:82:21:eb:49:00:53:24:eb:bf:ba:2a:d9:b5:9a:
                    12:2c:e6:80:7e:3f:b4:74:06:57:fc:8f:c7:d2:79:
                    ba:40:1c:b2:f0:26:8b:32:77:82:39:05:38:f9:ed:
                    97:5b:4e:02:86:9b:da:f9:95:ce:2e:d1:77:1b:25:
                    76:82:32:ee:8a:8f:22:57:06:e6:5c:0b:39:06:14:
                    af:84:0e:9b:7b:11:4d:f3:08:06:d5:b7:57:b7:d4:
                    49:3d:34:f5:bb:e0:51:fa:cf:da:2b:48:70:9f:62:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E4:16:8C:FF:7D:38:E2:24:6B:98:3B:73:AE:C6:46:7F:4F:8D:6A
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35362e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:4f:16:de:57:e8:7c:52:b4:d8:e7:a4:83:81:87:ed:86:
         ee:36:dc:6a:d6:a4:95:8f:32:7d:05:5f:20:07:d5:0b:22:b3:
         91:cd:89:42:72:0e:c2:e5:04:7a:1a:c7:f0:ac:82:8f:73:a1:
         e9:b3:4a:2e:10:a1:3b:0c:2e:27:f0:b7:7f:50:04:61:01:e1:
         bc:fc:d1:0d:c4:d8:5b:aa:b0:ae:d9:05:70:3a:f1:2f:e9:45:
         bf:76:02:12:0d:04:e4:76:e1:fd:8e:ac:d1:be:f7:24:be:76:
         c9:40:73:f8:e7:bb:c1:56:7d:f3:92:72:e0:71:11:8f:54:43:
         84:fd:c9:11:b5:2b:5b:6b:bf:d1:a9:a6:26:27:d1:60:57:87:
         4c:e2:d3:a0:d9:0f:cd:c4:ca:ca:9c:9c:a8:05:eb:14:75:95:
         e1:3b:55:7a:07:7d:25:49:0a:29:ad:d1:ca:2e:bf:6e:5b:e1:
         46:52:43:82:ce:03:c7:16:70:91:99:38:b4:d2:c1:3c:d1:df:
         1d:fc:2f:83:25:70:94:0b:b1:f0:1f:9b:09:0b:b8:fe:a4:bd:
         74:8f:f5:1d:cb:0b:09:60:57:0d:82:95:f7:08:54:76:91:2f:
         b6:29:ad:2c:96:6d:c0:c6:4c:30:b5:cb:07:9c:71:49:19:02:
         7f:66:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org