Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35382e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e35382e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          d4n1DZEeTHOrnEssUgiEea6tGmddDYwdTveJBv0zPkk=
Subject key identifier:   B1:49:81:DE:BC:C9:9B:AC:02:36:E0:C5:EF:7F:57:21:FB:4E:23:62
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       21EC74CCE2CDCCA047D80160C2F812B9437863E4
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35382e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:23 +0000
ROA not before:           Tue 05 Mar 2024 17:36:23 +0000
ROA not after:            Tue 04 Mar 2025 17:41:23 +0000
asID:                     52347
IP address blocks:        190.111.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:74:cc:e2:cd:cc:a0:47:d8:01:60:c2:f8:12:b9:43:78:63:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:23 2024 GMT
            Not After : Mar  4 17:41:23 2025 GMT
        Subject: CN=B14981DEBCC99BAC0236E0C5EF7F5721FB4E2362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:3a:02:7c:02:9a:94:fa:8a:77:db:77:66:
                    c7:70:10:b4:cf:a8:cc:a4:0f:8a:4f:f0:88:79:99:
                    3e:b2:ec:0e:84:b1:9b:08:41:f3:57:a8:1e:62:cd:
                    97:bb:98:8c:af:b6:d7:38:c4:57:e3:82:2e:df:b6:
                    a9:77:94:cc:58:f2:46:67:0b:a2:2b:f9:ff:01:3b:
                    d0:50:c3:9a:7d:48:69:6b:fc:7d:32:4b:87:ec:3b:
                    34:e7:3c:e1:f2:2a:a1:70:4c:d8:0b:94:dd:67:94:
                    c6:02:63:54:1e:93:d7:ec:66:82:18:e1:e0:9c:27:
                    a7:bf:90:d0:87:d4:54:c7:7a:eb:a0:c2:f7:cc:1b:
                    29:72:af:60:14:1d:10:30:65:37:4c:9d:59:b7:c9:
                    c5:26:61:ad:d0:5a:9a:03:5e:4f:ad:07:34:12:34:
                    74:59:5c:ae:29:cd:00:90:be:a1:5f:cf:ca:ce:a2:
                    b0:56:79:76:f6:73:a0:a5:38:03:03:ae:b1:51:c7:
                    5b:8c:13:04:c2:e6:a2:71:b8:64:d6:46:04:2b:9c:
                    55:10:e8:88:81:88:91:c8:af:4b:e8:39:ff:cf:b9:
                    d8:3d:24:30:3e:a9:91:c4:e5:45:26:30:a2:3a:46:
                    c4:e0:27:36:ab:44:51:f9:6b:0a:f8:c6:88:5c:87:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:81:DE:BC:C9:9B:AC:02:36:E0:C5:EF:7F:57:21:FB:4E:23:62
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35382e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:49:f9:2b:ca:2b:51:cd:22:8e:f7:e9:0f:33:df:1b:3e:5b:
         53:f0:b4:fd:b5:e5:53:f0:2c:fe:8c:5d:1a:db:f1:b7:56:09:
         b1:7c:dc:fe:ec:79:39:19:a4:1e:37:68:74:fb:1c:80:ff:ab:
         54:4f:ae:6a:18:17:88:14:63:5b:fe:65:6a:00:22:b1:63:06:
         86:45:a1:a4:67:7a:7b:d8:d2:0b:df:05:91:48:20:27:d5:f4:
         95:35:31:73:53:3a:16:c0:8d:d2:bc:a2:57:27:a5:b4:94:15:
         ee:54:19:69:2b:a1:c4:83:59:1b:cd:b9:40:89:78:2c:87:b1:
         58:49:96:cb:00:e7:df:c7:46:cf:ca:9a:8f:dd:71:8f:4c:aa:
         8d:21:f6:de:fa:42:1a:ae:af:a8:d3:7a:4a:67:a1:ae:b4:96:
         81:0a:a2:e1:21:89:06:75:47:e7:4b:aa:2c:8a:5a:00:5e:1b:
         53:42:a1:c0:bf:b2:b0:8a:f6:00:66:06:f5:69:76:83:53:a6:
         5f:77:59:43:38:5b:1c:22:f7:b2:56:ee:23:bf:7f:83:8b:39:
         06:ca:f2:89:d9:0b:94:d0:39:7a:b1:71:8d:17:92:be:e0:6d:
         56:de:3d:b4:19:26:0f:55:c4:d9:fd:ba:71:40:f8:b0:ba:ef:
         8d:cd:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:10:25 2024 by rpki-client on console-fra.rpki-client.org