Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35372e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e35372e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          pQd9eRCtHsfMRGetDYXGrR/lEBliN9keGxnBADhgJsU=
Subject key identifier:   63:8F:55:39:9A:22:35:EB:0E:80:5A:43:04:6F:CC:44:18:35:89:14
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       4CFA1B884DA89C20D87F48D10F3C0DF2A21B08F8
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35372e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:26 +0000
ROA not before:           Tue 05 Mar 2024 17:36:26 +0000
ROA not after:            Tue 04 Mar 2025 17:41:26 +0000
asID:                     52347
IP address blocks:        190.111.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fa:1b:88:4d:a8:9c:20:d8:7f:48:d1:0f:3c:0d:f2:a2:1b:08:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:26 2024 GMT
            Not After : Mar  4 17:41:26 2025 GMT
        Subject: CN=638F55399A2235EB0E805A43046FCC4418358914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:d9:96:ec:42:ee:1e:2a:0b:49:8d:96:6d:
                    b8:1a:a9:d2:c0:10:ae:c9:0d:0f:0a:17:d3:7d:17:
                    cf:de:a0:a3:78:8c:79:3f:2a:fc:8d:34:2c:d7:a5:
                    ab:1f:34:74:5c:f6:fe:18:f8:c4:e6:88:55:ef:07:
                    56:d7:36:a8:3b:3e:f0:33:dc:0f:f4:5b:d9:7c:97:
                    3c:1c:5b:ae:fe:07:28:78:bd:2f:b1:a7:df:e1:7b:
                    1c:a8:aa:a1:f9:f0:d9:f1:da:13:9c:dd:43:24:a6:
                    29:92:64:69:f9:b5:1f:9b:c5:8d:fe:72:ea:97:1c:
                    d3:47:8a:43:43:50:a0:f6:51:41:d3:03:10:43:f0:
                    5c:32:9a:61:32:57:a6:bc:9f:53:b2:9f:8f:72:f4:
                    aa:24:6c:f6:5c:58:17:74:55:77:22:57:f1:75:4f:
                    60:62:42:9f:85:b9:26:b0:c9:e3:88:c5:28:9b:79:
                    aa:54:6c:87:d5:1a:be:ec:ef:ed:b3:32:d6:77:e3:
                    db:aa:db:04:40:50:81:f5:e1:7c:a3:e0:22:2a:99:
                    d4:9b:6b:3b:d5:09:45:14:f0:4b:ed:b8:00:fa:da:
                    a6:9a:de:39:66:86:9c:17:15:5e:32:cd:31:cf:42:
                    94:9c:15:cf:f6:85:22:f6:43:45:21:02:57:44:af:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:55:39:9A:22:35:EB:0E:80:5A:43:04:6F:CC:44:18:35:89:14
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35372e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:30:7c:f6:58:78:ca:4e:26:72:71:70:b9:f6:ef:b2:bf:
         d3:96:58:46:93:bf:f6:58:7b:f8:92:e1:49:37:60:2a:fb:9b:
         70:be:c6:04:54:f3:fc:8c:c5:42:fe:74:8c:0c:45:11:d9:e3:
         4f:c5:fc:bb:4e:98:14:07:72:19:0c:5f:ff:9e:b4:e5:34:10:
         76:8a:1f:08:23:cd:1d:fc:34:e6:8b:29:7e:7f:3b:f4:61:80:
         6f:6d:79:4e:a3:38:0f:b8:a9:b7:5f:9c:ab:b5:65:54:73:dd:
         8c:af:dc:8c:5f:34:c4:d7:b2:8c:fb:53:fd:0a:82:32:86:50:
         43:74:bd:31:97:60:4b:98:3c:d2:70:33:aa:4f:f8:74:da:bb:
         65:d1:ae:6f:7a:a7:91:2b:b7:63:fc:9d:08:61:8c:fe:c7:77:
         44:aa:e5:d2:e4:17:9d:f3:e2:6c:49:0f:07:0c:ed:90:bb:ce:
         25:68:69:e2:15:37:6a:99:27:0c:27:2f:c2:6a:12:e8:3a:a1:
         4f:0b:b4:38:8f:d6:87:25:37:e8:af:2e:b7:98:ed:47:f9:af:
         ad:db:5d:8f:bc:f9:b4:3e:dc:b7:af:ce:cf:1a:a5:81:98:bb:
         a4:11:c5:48:6e:a9:be:74:63:00:ec:10:bf:8b:e8:e9:dd:e7:
         7f:7a:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org