Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e36302e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e36302e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          E6Efg2x8T+m1ZmJoXULfAEtiB2o3PhYl7UKyXJswrU4=
Subject key identifier:   2E:94:7E:01:79:0F:36:46:E3:1E:74:6D:86:5C:DD:32:7F:92:54:11
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       16E8F3DB5955DAB08488225C8401382E7BD5A417
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e36302e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     52347
IP address blocks:        190.111.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e8:f3:db:59:55:da:b0:84:88:22:5c:84:01:38:2e:7b:d5:a4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=2E947E01790F3646E31E746D865CDD327F925411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:12:90:91:ae:d2:b7:6a:28:2f:8c:ed:0c:
                    91:c2:3f:38:d6:28:0d:91:4f:0f:4a:de:2a:4f:96:
                    c7:32:b2:0a:cb:36:30:b1:e5:b7:0e:2b:fa:e8:bf:
                    60:19:64:28:7a:03:da:1d:22:64:94:5a:61:55:90:
                    74:7d:f1:40:f0:c1:7a:b7:48:0d:7f:7b:3c:28:6b:
                    68:8b:34:c9:5b:98:3f:be:f7:1b:3f:4f:54:fd:47:
                    5e:d5:23:ad:a5:bd:9a:3b:8c:cc:65:62:43:ed:fc:
                    57:79:6e:b4:68:3b:79:dd:3e:e6:5e:7a:69:0a:23:
                    9e:85:54:84:c3:87:35:7f:6c:75:15:54:f7:28:a3:
                    67:bd:3a:2c:f2:c2:ad:fb:97:a4:89:51:8f:00:50:
                    55:09:79:a1:53:6a:49:3c:6c:26:29:f6:2d:dc:e2:
                    9e:7b:87:93:e9:98:4f:a5:8c:2b:72:79:59:2f:e2:
                    e3:bf:8a:15:03:a0:06:54:de:a7:db:6a:e6:16:b5:
                    a6:35:9c:b7:f1:7a:8c:a1:b9:84:ca:c8:59:f3:5b:
                    4b:3e:9c:b0:4e:92:8b:ad:b5:7d:b2:62:d8:46:63:
                    9d:4a:17:f4:bc:53:93:6f:e8:d2:3e:1a:0e:f0:c3:
                    f6:98:74:cd:f4:f6:60:94:fd:8b:aa:f3:19:94:8b:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:7E:01:79:0F:36:46:E3:1E:74:6D:86:5C:DD:32:7F:92:54:11
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e36302e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:52:f3:8c:bf:7c:a3:a1:4b:22:ed:ab:b8:bf:f2:e9:46:
         4d:4d:b2:11:35:84:4d:ec:50:8b:70:e4:a8:15:a6:af:72:58:
         f3:ab:3c:db:8e:52:6c:f0:91:a2:70:05:0d:0b:9a:4e:1b:4b:
         0e:90:a7:7f:10:aa:1d:68:d3:24:c8:4d:ec:b7:d8:47:29:a2:
         ce:93:c8:f1:c2:58:21:f0:e4:70:09:4e:d0:99:82:59:65:72:
         99:86:2b:86:f8:89:4d:84:3f:f0:c1:9f:77:5e:67:42:c8:ed:
         d0:3b:a4:47:a3:1c:cf:19:7e:2b:b1:3b:89:bd:4d:9d:a8:e6:
         f2:59:38:66:d2:8c:a0:16:65:07:4e:77:2a:76:95:43:1c:13:
         e2:d3:b4:c2:8b:0a:7f:03:84:03:fe:f4:0a:d0:6b:d7:0d:50:
         89:d2:ca:85:aa:f2:10:b6:74:96:aa:5b:c3:d4:da:d6:05:ca:
         d0:1c:9e:82:ea:42:07:e9:83:88:29:a8:16:b3:b9:30:e2:09:
         07:02:64:9c:0a:87:a3:4f:9a:0f:b1:99:96:e7:8b:01:2d:22:
         3d:86:b0:f5:0f:ea:49:28:b1:cd:30:d7:33:25:85:f4:8e:f1:
         4e:97:13:1c:61:12:7a:32:aa:6e:a3:15:08:b2:f1:4f:85:e5:
         a9:16:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org