Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS19905.roa
File:                     AS19905.roa (raw, json)
Hash identifier:          0xoL21zPMlVzs5uBJ9T5LhoMmd1YEj+HQPROD4eB0u0=
Subject key identifier:   74:25:4E:DD:A6:CF:61:64:AA:8B:7A:5E:94:11:19:AD:9D:13:75:2F
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       06A0C9A7DD680DE79C093225AE76DA5B8C383951
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS19905.roa
Signing time:             Tue 05 Mar 2024 18:16:09 +0000
ROA not before:           Tue 05 Mar 2024 18:11:09 +0000
ROA not after:            Tue 04 Mar 2025 18:16:09 +0000
asID:                     19905
IP address blocks:        190.143.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a0:c9:a7:dd:68:0d:e7:9c:09:32:25:ae:76:da:5b:8c:38:39:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Mar  5 18:11:09 2024 GMT
            Not After : Mar  4 18:16:09 2025 GMT
        Subject: CN=74254EDDA6CF6164AA8B7A5E941119AD9D13752F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:10:f8:64:e1:00:ab:b3:ef:67:f3:6f:3a:
                    b1:41:02:1d:04:60:93:73:58:49:00:e6:74:b5:13:
                    78:30:6d:49:1a:47:7a:bc:2b:29:73:4e:1b:62:65:
                    98:1f:61:ae:12:4a:18:b9:de:14:6a:9f:74:af:21:
                    f8:74:d3:28:33:af:57:b2:af:8d:46:d4:35:ab:6e:
                    29:74:e0:a4:90:73:fe:dc:32:bd:7c:f3:dd:6e:63:
                    77:d0:69:ef:ad:39:8e:36:9e:c3:7e:5b:21:07:46:
                    63:87:b9:1b:a3:b4:65:bd:6a:24:a4:02:aa:25:9d:
                    c2:ad:54:e9:d6:0f:ab:6b:cc:08:30:b1:83:05:01:
                    f3:3b:05:54:5f:dc:ca:6b:b5:a9:f6:22:2d:0d:f7:
                    81:a2:40:67:58:38:7d:49:0c:79:ad:4e:15:27:2c:
                    f2:bb:c7:8d:67:e4:3e:c3:9f:0d:ca:26:5f:18:e4:
                    48:fc:cf:f5:29:ed:f1:c7:2f:6b:51:29:dd:73:54:
                    27:85:2d:1c:c6:04:52:78:d9:10:b3:59:8a:88:2b:
                    74:32:aa:34:57:46:d7:e6:d4:49:08:2d:1c:9e:d4:
                    7d:20:45:69:d2:ed:51:10:87:5d:d3:54:99:0d:06:
                    02:f7:60:f9:c9:35:c2:8b:5a:a9:c4:2c:ce:f1:42:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:4E:DD:A6:CF:61:64:AA:8B:7A:5E:94:11:19:AD:9D:13:75:2F
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS19905.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:65:b8:98:1c:21:b3:79:a7:27:fb:09:35:b1:2a:ca:83:f4:
         93:67:d8:49:d1:44:84:5a:48:d1:bd:0f:80:37:83:b6:ec:86:
         ae:e3:65:57:a1:0b:0d:e5:40:a1:7f:86:72:36:19:e2:ba:73:
         c8:3b:67:44:11:ac:06:18:7f:32:3e:d0:c4:c2:1e:62:06:b4:
         44:18:e1:59:43:90:e2:8c:77:d2:d4:76:1b:51:06:f9:d4:02:
         07:e3:63:af:58:65:91:f2:40:95:ea:32:6c:59:b7:6b:81:c6:
         6a:eb:19:87:a5:de:3c:e6:c9:88:a8:c6:26:4b:4c:e9:a4:14:
         5d:46:8e:1c:5f:40:2b:00:ba:eb:04:f9:7e:24:61:aa:02:0d:
         1c:82:1f:5c:6e:b5:b3:ef:ca:ce:57:99:e6:55:99:f1:25:ef:
         21:9c:1d:8e:4b:3c:66:48:30:f7:89:a5:7b:45:95:ec:62:89:
         38:91:7d:ca:57:5a:2e:ba:00:3a:a2:2d:6f:4c:7b:b4:f9:05:
         f1:dd:33:c6:77:25:45:1a:a5:09:84:11:57:e0:63:66:15:b3:
         98:82:0f:45:bc:c7:a7:3c:ef:30:7d:4f:15:ce:7b:4c:a6:3c:
         cc:d9:08:6e:3a:01:0b:02:b4:db:03:3c:50:58:a7:8b:01:f8:
         b1:23:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:58 2024 by rpki-client on console-ams.rpki-client.org