Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34312e302f32342d3234203d3e203532333437.roa
File:                     3139302e39332e34312e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          mqykPwqPg8Wxuzz61WUAJMbqtDjBsPId5NHSdxhhiMk=
Subject key identifier:   02:97:AB:C8:CF:AB:24:B0:53:66:12:FD:32:B1:97:31:37:2A:48:26
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       18FE769AD800BDEF80DE03533010D2F186EBE7DA
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34312e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:24 +0000
ROA not before:           Tue 05 Mar 2024 17:36:24 +0000
ROA not after:            Tue 04 Mar 2025 17:41:24 +0000
asID:                     52347
IP address blocks:        190.93.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fe:76:9a:d8:00:bd:ef:80:de:03:53:30:10:d2:f1:86:eb:e7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:24 2024 GMT
            Not After : Mar  4 17:41:24 2025 GMT
        Subject: CN=0297ABC8CFAB24B0536612FD32B19731372A4826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:cf:ef:9e:22:fc:1f:f4:a6:a3:64:1a:fd:
                    68:8b:5c:ee:e3:70:18:6b:d0:e6:17:b7:6f:99:70:
                    4a:ed:a2:19:90:10:08:e1:a8:29:6f:34:6e:2b:5c:
                    ec:d8:65:df:bd:4c:91:07:a2:d8:e2:e7:25:f9:a5:
                    59:ed:d2:51:62:58:76:13:e5:99:58:c0:49:f1:cb:
                    30:29:62:b4:24:cc:1c:61:7b:29:b9:30:f7:3e:c8:
                    06:ac:ca:34:37:64:7e:d1:ea:5a:99:01:cc:73:13:
                    dd:0a:da:cd:06:5e:ca:42:a4:52:47:b2:93:80:5b:
                    a0:8d:13:a8:55:16:8d:f7:46:23:4b:f0:cd:83:bd:
                    3b:3f:f1:f2:ee:7d:5f:c4:b1:a2:be:4c:bd:02:6e:
                    17:35:a2:eb:9b:2e:82:33:87:89:ce:1c:86:3e:33:
                    88:1f:24:44:4e:d5:38:f5:ee:02:73:91:c0:1e:f3:
                    6c:c2:d7:5f:f5:4d:60:81:72:f3:57:b9:e5:a7:79:
                    9b:74:e7:57:5d:dd:66:07:e3:31:6e:22:15:ba:d8:
                    d3:44:19:7c:00:2d:8c:34:64:ec:f4:89:28:85:dc:
                    b1:04:0f:cf:6a:7c:39:63:3a:c2:32:23:50:ae:a8:
                    d5:7f:a7:cd:2e:ac:15:cd:bd:01:52:55:d0:70:6c:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:AB:C8:CF:AB:24:B0:53:66:12:FD:32:B1:97:31:37:2A:48:26
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34312e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:49:74:b2:34:bf:04:1e:47:f1:20:1d:c1:d8:cb:64:93:b4:
         0e:cc:fa:ef:76:62:84:ac:4c:5a:c7:52:50:4a:78:61:cb:f2:
         83:dc:e9:c4:fe:30:06:36:02:0b:85:46:d1:e5:67:58:24:79:
         60:bf:ad:c2:1f:1b:02:1a:41:8a:1e:54:fd:c2:05:34:78:1d:
         48:48:c7:4a:59:4e:52:45:90:2b:8c:54:bf:65:e1:58:30:6b:
         ec:0a:a2:d3:72:61:32:39:81:7d:b0:de:6c:20:b2:43:59:34:
         86:97:09:a7:c3:95:e3:d8:b0:6e:90:0d:da:db:5a:6a:32:b3:
         ed:0b:a6:e3:24:fd:6a:93:2c:55:ca:bd:90:e4:a6:9a:a5:d5:
         57:6f:a5:f9:b4:ad:ce:59:40:33:de:a0:c2:c9:23:b9:5f:71:
         0b:48:dd:1b:7f:c5:08:68:4e:c9:27:a5:e6:fa:5b:0c:c6:36:
         90:d9:37:c1:8a:58:9e:92:8e:21:bf:2f:53:81:da:65:65:83:
         49:0a:42:26:8e:53:6e:d1:ba:34:0c:31:56:7d:9f:cc:14:0e:
         ce:21:e5:d4:87:bd:4a:f8:17:b4:7b:04:45:6a:3d:e5:35:e3:
         2d:73:33:4f:da:73:d2:e5:fb:f0:ff:4d:4b:22:7a:c5:90:10:
         77:c2:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:10:25 2024 by rpki-client on console-fra.rpki-client.org