Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3234203d3e203238313134.roa
File:                     3139302e31322e3136302e302f31392d3234203d3e203238313134.roa (raw, json)
Hash identifier:          4R0HhTi4WhTDSCMYL1QMvoG8WbK7VYK6TdBhmRv4byA=
Subject key identifier:   50:93:B0:4D:B4:27:67:BC:96:2A:4D:F6:E3:D7:A4:D4:65:91:1C:00
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       3EF939E61912702BF7F2EB935BE04426043367DD
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:13 +0000
ROA not before:           Tue 05 Mar 2024 17:53:13 +0000
ROA not after:            Tue 04 Mar 2025 17:58:13 +0000
asID:                     28114
IP address blocks:        190.12.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:39:e6:19:12:70:2b:f7:f2:eb:93:5b:e0:44:26:04:33:67:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:13 2024 GMT
            Not After : Mar  4 17:58:13 2025 GMT
        Subject: CN=5093B04DB42767BC962A4DF6E3D7A4D465911C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:e4:b2:19:bf:a7:8b:f0:c7:b8:4f:0e:0b:
                    95:4b:70:71:81:54:b5:37:4b:82:d5:ce:9d:30:9d:
                    e8:34:d1:cf:03:36:63:c9:e6:46:ad:c9:09:d3:a1:
                    c4:83:0b:68:ab:f4:24:60:cb:37:3b:4a:8e:dd:d5:
                    a1:15:1d:5a:82:bc:0f:77:54:bc:43:95:69:39:92:
                    49:b1:00:12:28:5f:bc:f6:ee:57:15:24:c6:e4:c4:
                    c7:13:fe:7e:e2:09:7b:ea:06:f8:44:b9:8a:bf:23:
                    fc:c0:4c:ad:b0:74:b4:b7:6c:75:9f:34:1e:d0:b5:
                    9b:88:2a:6b:81:ff:1c:33:a2:e3:ae:1e:1a:11:31:
                    2d:2c:86:f5:15:04:3f:be:19:33:d0:3a:16:e2:38:
                    fb:2b:24:96:b2:e0:44:5c:bb:bb:25:8d:9c:c9:2b:
                    13:ad:50:f8:4b:b6:9c:0e:a9:4b:4f:f0:70:7f:6f:
                    62:fe:46:62:02:ad:98:82:80:5e:6b:5f:1d:07:0d:
                    c3:1f:db:69:e8:4f:33:75:f3:f9:cf:9a:e4:ae:f6:
                    28:c3:6f:5f:3e:10:64:42:75:51:4c:94:bc:d3:30:
                    5d:2c:40:18:7f:db:7b:41:af:29:85:0e:0d:82:71:
                    1c:47:1b:b2:a7:99:15:03:57:b8:8b:81:36:d6:51:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:93:B0:4D:B4:27:67:BC:96:2A:4D:F6:E3:D7:A4:D4:65:91:1C:00
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136302e302f31392d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:f1:de:22:cb:a8:0a:22:87:27:7a:19:06:ae:60:74:cc:
         46:94:87:57:58:75:89:44:d0:5a:b0:0c:7c:8d:fe:a6:84:ec:
         6f:e8:29:82:f6:95:63:7e:94:07:0d:57:07:e7:d1:d3:36:31:
         d0:3f:2c:b3:b5:13:fd:2e:9d:e7:ff:aa:81:2a:dc:53:d5:1d:
         4f:81:5e:61:30:6a:22:42:37:89:16:e5:bb:81:30:ff:06:44:
         50:da:d6:6d:40:fc:ea:fb:27:39:f8:ad:06:a7:28:39:f9:2b:
         ac:10:4f:19:b6:2d:07:e2:74:9f:d2:f9:13:c3:f7:7d:98:2e:
         45:8f:72:52:5f:27:d5:66:b5:b2:b5:f7:d1:33:fc:9e:c4:9d:
         f0:9c:05:83:c5:b9:fb:10:79:2c:35:65:b1:e1:5a:04:8a:3a:
         31:1d:49:05:e4:47:45:f0:c5:dc:7a:59:81:f8:f8:43:ad:ca:
         e3:96:5e:c1:32:00:18:01:c3:a8:58:1a:72:2c:f8:30:5d:2b:
         14:81:f6:00:41:33:f1:28:73:c5:43:12:9d:14:18:00:d7:34:
         dd:e2:f2:59:9d:4e:92:13:d6:b6:29:6d:37:e9:36:40:c8:7a:
         f7:3f:b2:45:a2:28:d1:ba:ff:7e:62:48:a4:12:ff:43:a5:d2:
         35:78:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org