Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/3139312e3130332e3131322e302f32302d3234203d3e203235363037.roa
File:                     3139312e3130332e3131322e302f32302d3234203d3e203235363037.roa (raw, json)
Hash identifier:          Uno/12yYDgprLrKiLds6KNemeCkwfp/47927MHNmAP4=
Subject key identifier:   CD:6E:BF:4D:6F:72:45:90:43:2B:1B:75:83:F5:2B:2C:72:A0:CE:F1
Certificate issuer:       /CN=EC5A33961AFB7D9D76A054078210FE8E741BDEA9
Certificate serial:       6A40C5F051A49D4D911D882D4DBC5F7DE829F4E5
Authority key identifier: EC:5A:33:96:1A:FB:7D:9D:76:A0:54:07:82:10:FE:8E:74:1B:DE:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/3139312e3130332e3131322e302f32302d3234203d3e203235363037.roa
Signing time:             Tue 05 Mar 2024 18:16:27 +0000
ROA not before:           Tue 05 Mar 2024 18:11:27 +0000
ROA not after:            Tue 04 Mar 2025 18:16:27 +0000
asID:                     25607
IP address blocks:        191.103.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:40:c5:f0:51:a4:9d:4d:91:1d:88:2d:4d:bc:5f:7d:e8:29:f4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5A33961AFB7D9D76A054078210FE8E741BDEA9
        Validity
            Not Before: Mar  5 18:11:27 2024 GMT
            Not After : Mar  4 18:16:27 2025 GMT
        Subject: CN=CD6EBF4D6F724590432B1B7583F52B2C72A0CEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:34:db:67:a2:a9:2c:59:55:21:9b:f4:8d:
                    10:38:04:f4:80:28:d8:cb:01:3f:96:99:b7:13:43:
                    ed:28:e8:fe:17:6b:75:79:8a:02:6e:49:e8:3b:80:
                    8f:a4:96:99:11:6d:b5:04:51:18:d1:e5:e8:c5:3a:
                    ab:1d:80:6b:0e:1f:d1:7c:3a:2c:fe:82:fd:42:51:
                    a5:41:4b:7c:eb:80:28:2f:f0:b6:98:87:d9:53:34:
                    a6:9e:8c:97:41:cb:32:55:df:8d:1e:f5:62:d3:bc:
                    f8:fd:ba:36:99:66:21:26:24:b6:5f:d8:73:37:88:
                    14:55:74:2c:8f:a0:a5:9a:f2:81:d0:01:09:0b:9f:
                    d7:0f:0e:84:96:b5:e6:30:84:01:03:34:35:dc:a2:
                    8c:f2:8a:ff:72:49:59:ec:9a:6f:85:19:1a:22:2e:
                    5b:26:e1:3a:e6:de:de:71:7a:99:3d:36:92:42:4d:
                    c6:0e:a9:8e:70:8c:a5:57:6d:13:76:9c:aa:3a:f9:
                    02:a7:bd:bf:c5:76:63:f4:2c:60:63:75:74:9e:57:
                    28:af:42:28:62:7c:f3:85:bd:5b:c7:d4:00:ea:8c:
                    91:85:ed:d0:72:bc:c4:e5:4f:f8:1b:f0:75:13:06:
                    20:d2:1b:3e:49:b0:ef:d2:de:81:b2:93:9c:12:66:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:BF:4D:6F:72:45:90:43:2B:1B:75:83:F5:2B:2C:72:A0:CE:F1
            X509v3 Authority Key Identifier:
                keyid:EC:5A:33:96:1A:FB:7D:9D:76:A0:54:07:82:10:FE:8E:74:1B:DE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/3139312e3130332e3131322e302f32302d3234203d3e203235363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:25:09:b3:57:ec:15:53:b3:0a:75:4a:83:52:43:62:ec:
         f9:db:38:b4:21:9c:90:5a:c3:2b:89:a8:a1:5d:01:12:4c:ad:
         0d:66:8d:12:1b:46:6f:f2:b1:88:46:1a:ac:44:50:92:05:aa:
         c9:0f:41:3e:5f:79:b3:6d:71:c0:62:5f:1e:10:7e:34:11:67:
         80:d4:53:ba:eb:bd:0e:8e:c4:b3:14:60:2b:76:09:71:5e:99:
         f9:d0:96:7d:ff:0b:e9:52:4e:0a:57:03:bb:ed:0f:4f:76:19:
         87:93:a7:10:f9:d6:06:c1:07:e8:92:39:d6:fb:6f:a0:0e:fd:
         9c:2e:d4:c9:3f:cb:25:55:6b:2c:22:ef:27:7f:12:4e:60:fc:
         a8:1e:23:72:51:78:20:f7:b8:5c:73:46:97:85:28:86:92:93:
         66:47:7f:5b:de:70:fa:1b:b3:05:20:ab:9a:18:d2:59:67:a7:
         66:e1:fe:f2:54:a0:f7:6f:46:1f:fa:9e:18:d0:da:11:78:b8:
         fe:25:38:70:69:d0:3f:6c:fe:fb:5a:1b:f5:3a:ff:49:4b:83:
         64:34:c3:d1:b6:1d:39:67:52:96:54:86:90:59:02:b9:a4:1c:
         d3:72:93:5d:c0:cd:09:d7:66:8e:49:f1:cb:4f:09:5f:a6:16:
         60:52:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:49 2024 by rpki-client on console-fra.rpki-client.org