Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/3139302e38392e3132382e302f32322d3234203d3e20323639393533.roa
File:                     3139302e38392e3132382e302f32322d3234203d3e20323639393533.roa (raw, json)
Hash identifier:          Zot0IVLoIn8o3geaBkQ0lHZIxUryLdF+/7+und6d+Gs=
Subject key identifier:   91:5C:7E:BC:2E:D7:64:52:6E:8F:82:03:4B:B9:EF:1F:48:59:50:5F
Certificate issuer:       /CN=0B115B92FA7732A4FC9A6189945AAD4A0EB79286
Certificate serial:       6A2862A82A6BC1C2B276D651CB7F5B26961A2AA3
Authority key identifier: 0B:11:5B:92:FA:77:32:A4:FC:9A:61:89:94:5A:AD:4A:0E:B7:92:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/3139302e38392e3132382e302f32322d3234203d3e20323639393533.roa
Signing time:             Tue 05 Mar 2024 18:12:41 +0000
ROA not before:           Tue 05 Mar 2024 18:07:41 +0000
ROA not after:            Tue 04 Mar 2025 18:12:41 +0000
asID:                     269953
IP address blocks:        190.89.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:28:62:a8:2a:6b:c1:c2:b2:76:d6:51:cb:7f:5b:26:96:1a:2a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B115B92FA7732A4FC9A6189945AAD4A0EB79286
        Validity
            Not Before: Mar  5 18:07:41 2024 GMT
            Not After : Mar  4 18:12:41 2025 GMT
        Subject: CN=915C7EBC2ED764526E8F82034BB9EF1F4859505F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:c1:9e:90:86:49:af:bd:2d:ba:cd:a6:13:
                    40:35:57:9d:b2:ad:be:36:45:4c:cf:50:9a:96:32:
                    b1:b5:78:f2:7c:d2:86:b8:4f:e0:2a:4c:84:7b:63:
                    03:e8:b9:6b:5f:1c:3c:7c:1d:5b:f2:72:cf:6d:e6:
                    0b:80:6b:3e:eb:bb:35:a5:a9:4d:db:d8:95:ca:d2:
                    7a:7a:e8:d3:85:46:75:89:14:cb:ee:e6:0b:06:0c:
                    08:5c:07:3c:44:75:70:23:d8:4c:72:45:a2:7a:1c:
                    c3:23:69:ce:1c:42:43:da:f6:1f:40:8d:23:14:c4:
                    99:3a:90:1c:75:95:38:92:ce:bd:58:3a:63:18:1d:
                    70:f9:97:25:9e:66:14:cb:f5:ef:3b:73:eb:60:e6:
                    10:46:f3:ad:bd:db:70:f3:29:3d:f2:34:96:83:f9:
                    ae:b8:e8:93:7e:5b:ff:3c:a5:00:b1:58:77:25:f0:
                    2e:96:e3:16:ea:cf:22:ff:52:38:c2:9e:e1:a1:32:
                    94:1a:8f:1b:60:32:ac:07:13:57:64:75:01:e6:9b:
                    8e:d2:d2:71:8d:69:84:f1:9b:30:1d:91:83:70:c0:
                    75:bc:d9:9a:bb:ec:7c:32:e8:e3:91:3c:23:e7:c3:
                    b7:91:20:a1:76:ac:8a:6d:0c:3a:b8:99:62:71:af:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:7E:BC:2E:D7:64:52:6E:8F:82:03:4B:B9:EF:1F:48:59:50:5F
            X509v3 Authority Key Identifier:
                keyid:0B:11:5B:92:FA:77:32:A4:FC:9A:61:89:94:5A:AD:4A:0E:B7:92:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/3139302e38392e3132382e302f32322d3234203d3e20323639393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:5d:b7:aa:01:b8:9f:64:25:80:1b:3b:37:d5:36:a9:d3:
         f4:de:d7:36:f6:c0:6c:3f:7f:77:bf:13:89:64:72:1f:8a:a4:
         17:a9:66:b1:20:67:f2:9d:01:36:1d:3e:8b:eb:7a:7e:a2:13:
         fb:af:d0:88:c9:04:25:42:ff:6e:f7:b5:37:4e:ec:69:30:2b:
         d7:77:58:21:d7:92:f5:01:e2:5b:5f:45:7f:62:61:0e:36:53:
         ee:a2:5c:9b:a2:08:98:07:76:6d:31:23:51:12:52:9c:c4:df:
         91:9d:db:8a:63:b4:e8:aa:79:04:9b:94:58:37:b8:27:a3:49:
         bf:53:a4:e4:40:15:b2:8f:97:c7:c1:89:39:51:f0:bc:44:49:
         9f:9c:d1:ba:6b:80:79:c5:48:ce:a5:bd:d8:63:21:68:7c:9b:
         89:f9:64:44:68:88:1d:80:91:e4:0a:20:78:6c:12:fe:c9:18:
         d8:a5:38:c9:c6:40:51:95:62:db:92:a0:98:fa:72:37:65:1c:
         a4:3a:13:a8:b0:b0:09:93:08:c4:70:ff:80:38:61:79:cd:86:
         34:6c:49:e5:6a:8d:c5:43:3d:6b:aa:ad:63:9e:5f:38:54:04:
         8d:df:2f:59:0f:49:5a:b8:bf:c9:1a:f5:8a:85:c4:b6:a0:3f:
         fb:a4:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org