Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34362e302f32342d3234203d3e203237373432.roa
File:                     3139302e35332e34362e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          KJ22pW8GkCxcgNn1MgolhjGD+p7MwKD40j6c+DQ8V3Y=
Subject key identifier:   2A:5E:53:A1:3D:E7:53:C9:A4:05:C8:1C:11:E7:E4:25:C7:1F:0A:96
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       54E092E3E418FD0E8475B03B8F0A2A1D95501F2A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34362e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:10:38 +0000
ROA not before:           Tue 05 Mar 2024 18:05:38 +0000
ROA not after:            Tue 04 Mar 2025 18:10:38 +0000
asID:                     27742
IP address blocks:        190.53.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 16 May 2024 12:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e0:92:e3:e4:18:fd:0e:84:75:b0:3b:8f:0a:2a:1d:95:50:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:38 2024 GMT
            Not After : Mar  4 18:10:38 2025 GMT
        Subject: CN=2A5E53A13DE753C9A405C81C11E7E425C71F0A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:04:46:ce:03:c7:13:a1:1b:ff:28:fe:3c:
                    5e:10:c8:14:02:d2:f5:53:4e:25:15:63:f8:93:b0:
                    1d:cc:7e:9a:a9:68:9f:8c:9e:86:c0:bb:3e:00:08:
                    f2:11:5d:36:27:ed:cf:9f:43:6d:76:01:85:2a:74:
                    98:58:c5:c9:b5:bb:f4:4d:80:3e:21:87:78:81:be:
                    80:7a:5a:13:b5:9a:00:7e:3a:d8:71:25:fc:5b:57:
                    d6:34:ee:86:17:e3:32:fb:7b:5e:75:dd:82:4d:8e:
                    f9:36:60:c9:3e:1f:4e:0b:02:ba:ba:29:e8:67:e6:
                    e2:fd:fe:dc:51:7f:99:94:c2:34:cc:f7:26:30:3e:
                    a9:e0:48:0d:73:45:30:5f:4f:dc:e0:af:ca:4d:df:
                    ad:50:d4:21:41:95:c0:00:b4:1d:24:d3:45:eb:6a:
                    62:f1:e7:81:29:63:4a:9a:f1:05:aa:48:eb:77:e5:
                    d7:0f:da:86:f1:02:93:76:12:51:58:db:06:9d:99:
                    74:77:13:da:23:24:65:42:b0:d8:ae:59:ce:45:4a:
                    af:af:cb:bf:9e:23:43:45:ce:1d:2d:ab:03:df:cf:
                    3e:11:7f:fb:48:33:52:d1:67:7c:b4:ba:4d:ee:30:
                    f6:d8:46:6b:80:fb:48:03:2d:c7:8c:d3:c4:54:60:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5E:53:A1:3D:E7:53:C9:A4:05:C8:1C:11:E7:E4:25:C7:1F:0A:96
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34362e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:2c:68:65:80:c5:ef:4f:e3:17:0b:66:cb:de:c1:a6:c2:
         ab:12:a1:e3:b9:34:0d:cc:bb:f9:bf:2c:39:80:1f:cb:eb:67:
         83:07:2f:54:1e:b9:78:d6:64:e1:d8:a7:84:de:e2:75:73:f6:
         b1:08:35:c4:04:96:32:4a:4d:31:2b:1b:7f:77:7c:c0:c0:c9:
         6a:9c:b8:c0:2e:77:82:a3:79:ba:25:97:b1:ea:25:59:9d:51:
         f1:ef:71:56:a1:fd:f7:d1:0a:0c:c3:ed:3e:cc:2d:f5:40:d5:
         da:2e:8f:78:34:d4:40:57:6d:46:d9:6b:0c:b4:86:ed:6d:f6:
         d2:68:7a:16:6e:b5:08:d9:ab:35:e3:f6:ff:dc:59:9b:53:41:
         7a:74:fc:ff:b9:a2:b1:ea:2b:bf:3e:c9:a7:6e:4d:cc:ea:aa:
         a8:ac:1b:c2:ce:3d:eb:48:53:78:c8:82:49:a1:43:fd:a7:85:
         c7:69:46:8d:4d:3a:8c:81:dc:6c:f6:86:e6:f8:11:c1:1d:12:
         84:4e:ef:2b:b7:07:e6:d5:29:5d:57:15:ab:b3:b6:bd:0f:c8:
         1f:b7:77:a9:29:0d:89:cf:33:1e:36:cb:e9:58:96:2b:a2:b8:
         7f:b1:54:85:5f:c0:43:83:c8:97:49:44:09:30:fe:26:b5:91:
         64:47:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:28:25 2024 by rpki-client on console-ams.rpki-client.org