Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34332e302f32342d3234203d3e203532333437.roa
File:                     3139302e39332e34332e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          djbb3lJkZpHzevPnaVEiVWYY4p//rNfb01lp6jbGX5k=
Subject key identifier:   70:3D:77:04:3C:A5:2D:2D:1B:A9:1B:EC:7E:3C:67:E7:68:8E:63:09
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       53BA471009AE7AD1AF7223E5E8B9A308FA7D9E9C
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34332e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:23 +0000
ROA not before:           Tue 05 Mar 2024 17:36:23 +0000
ROA not after:            Tue 04 Mar 2025 17:41:23 +0000
asID:                     52347
IP address blocks:        190.93.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ba:47:10:09:ae:7a:d1:af:72:23:e5:e8:b9:a3:08:fa:7d:9e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:23 2024 GMT
            Not After : Mar  4 17:41:23 2025 GMT
        Subject: CN=703D77043CA52D2D1BA91BEC7E3C67E7688E6309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:67:50:cb:e2:4f:ca:b4:c9:2d:06:98:c9:
                    02:32:88:af:32:38:dd:44:65:cd:2f:6f:4a:14:dd:
                    09:d3:a3:df:a8:cb:bd:77:57:53:63:e9:bc:51:69:
                    de:87:60:df:e2:37:23:06:a8:19:ee:1c:c9:04:18:
                    59:42:e4:18:83:1c:e0:61:ea:d1:76:dc:1d:46:28:
                    0e:03:7a:9b:07:76:ae:91:d1:49:ce:38:fd:d7:d3:
                    55:b1:92:52:0b:77:f3:d0:ac:84:40:30:dc:ee:5d:
                    7f:5e:48:42:08:5c:52:db:23:25:41:61:db:bb:82:
                    69:52:15:45:ee:d6:e0:e3:66:39:67:e9:61:26:64:
                    a3:b6:87:df:df:ff:ad:2c:2c:73:e5:af:18:f9:74:
                    33:d2:29:d2:52:0c:f0:c7:36:a4:15:73:c0:9b:7d:
                    a4:a9:30:9e:5e:06:31:0a:cc:fc:2d:10:54:1b:76:
                    1c:80:90:40:56:e1:69:d0:7d:c2:08:0a:78:1c:83:
                    0f:39:55:9a:03:0a:78:c9:c9:ef:c1:8e:00:c5:98:
                    d9:29:f7:a2:28:45:86:c2:48:71:0a:5c:2c:42:40:
                    a8:6c:dc:20:8c:db:11:05:61:a6:b1:15:65:1c:6b:
                    1a:58:a0:cd:7b:eb:e2:d1:b7:d8:31:f2:32:73:17:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3D:77:04:3C:A5:2D:2D:1B:A9:1B:EC:7E:3C:67:E7:68:8E:63:09
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e39332e34332e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:7c:d1:86:31:87:3c:f4:b6:72:72:21:bd:aa:71:04:05:
         3e:1e:05:bd:d3:58:ec:3f:11:7d:86:46:41:f9:0f:bc:db:81:
         f2:03:25:1e:92:fa:b3:7f:8d:6e:d7:78:2a:a1:40:bc:4e:86:
         e8:9d:2f:28:43:42:2c:f1:03:45:2b:06:e1:88:8e:d4:95:1b:
         a0:02:3d:9b:f8:57:ee:21:3f:af:0a:c7:ed:18:fe:b0:62:78:
         12:0f:0e:e2:61:c5:8a:b6:e0:33:01:40:2e:e6:38:ba:19:86:
         97:8c:50:ce:1a:72:da:af:25:21:8d:a8:39:c8:3b:d3:07:ca:
         98:c7:68:af:12:23:0d:88:fd:78:72:0e:42:d5:61:6c:4a:73:
         57:34:e8:0f:23:15:76:49:1d:f8:d1:4d:c8:95:7c:d5:d1:13:
         2c:b3:3e:40:f5:dd:24:b6:84:02:a1:b1:31:3b:2f:48:4c:7a:
         5d:51:fd:97:4f:cf:20:5b:dd:1f:be:92:63:96:7f:91:b2:2c:
         63:55:fb:6a:e9:9a:36:74:65:c5:59:53:57:8c:18:4f:d4:e7:
         89:3f:a7:5a:c7:d7:3c:9b:87:9d:93:ae:66:f8:75:7e:43:22:
         92:ef:d3:0b:a7:06:09:19:bf:2b:ec:85:bb:63:37:15:02:a6:
         e7:57:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:10:25 2024 by rpki-client on console-fra.rpki-client.org