Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3136352e302e302f31362d3136203d3e203133343839.roa
File:                     3139302e3136352e302e302f31362d3136203d3e203133343839.roa (raw, json)
Hash identifier:          Anp7iAM4VQPnLhl7A95SyEzMm6kkAnOXEzdGpjucOsg=
Subject key identifier:   45:3C:88:57:38:7E:59:DD:D6:3B:1C:C2:15:30:47:B5:6F:F1:CF:2C
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       5ABF22471CE3A28E4179B3E90B1E0DB0DCD9D8F7
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3136352e302e302f31362d3136203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:56 +0000
ROA not before:           Tue 05 Mar 2024 18:01:56 +0000
ROA not after:            Tue 04 Mar 2025 18:06:56 +0000
asID:                     13489
IP address blocks:        190.165.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bf:22:47:1c:e3:a2:8e:41:79:b3:e9:0b:1e:0d:b0:dc:d9:d8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:56 2024 GMT
            Not After : Mar  4 18:06:56 2025 GMT
        Subject: CN=453C8857387E59DDD63B1CC2153047B56FF1CF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:64:61:7d:41:14:53:bf:d5:91:fc:a3:95:
                    05:d2:9c:87:dc:a6:40:dc:22:0a:e6:8b:26:72:56:
                    4b:a9:81:67:f9:47:18:18:63:c8:55:76:2f:19:29:
                    e0:36:e2:a9:e5:cb:19:ae:56:cf:33:2b:d1:6f:40:
                    43:d7:02:4c:29:04:62:c0:96:62:2a:bc:99:82:da:
                    4a:e7:e8:f5:11:55:e2:34:88:c4:fd:dd:1e:d3:bd:
                    a5:c7:92:f6:f6:5f:fc:f4:6f:39:9a:d6:f8:a0:7f:
                    0e:af:a0:1c:19:ce:cc:8c:52:89:eb:d7:75:9b:9b:
                    cd:e4:43:0a:c1:11:56:9b:dd:f5:ff:2f:f4:14:64:
                    cd:8f:ae:5a:67:6a:26:e5:d5:a5:cc:79:92:3a:08:
                    fc:51:82:86:a5:59:5c:2f:6c:fd:06:e3:fc:a6:7a:
                    f1:df:88:7c:a7:09:4e:9d:ee:71:95:ad:97:33:fd:
                    16:26:3a:b4:ac:69:b3:4a:ef:fe:70:50:35:7e:81:
                    b2:4c:2b:25:4e:72:5b:95:4f:63:eb:2f:de:47:a9:
                    b2:74:f9:76:16:07:26:53:52:82:b6:f9:67:b2:4a:
                    48:43:e0:6e:9a:ca:ca:12:db:bd:18:ee:31:36:4a:
                    31:8b:6d:c0:a3:b4:64:f3:b8:d5:04:3c:dd:ae:77:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3C:88:57:38:7E:59:DD:D6:3B:1C:C2:15:30:47:B5:6F:F1:CF:2C
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3136352e302e302f31362d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:18:67:ba:81:0c:a7:91:ed:35:92:4d:44:96:19:ee:09:8a:
         cd:e4:f4:ff:14:a3:31:67:0b:a1:87:5f:cf:eb:7d:8e:09:90:
         b5:1b:b7:a2:03:86:b7:34:cc:02:2b:b0:4d:a4:c4:08:ca:1f:
         9c:36:fb:f3:13:16:2b:68:51:b6:28:50:60:b2:3e:7a:67:78:
         cb:7e:e0:2c:5b:4b:1d:0c:a3:e6:75:de:26:81:98:05:a8:b3:
         b5:c9:29:5c:a3:e0:84:f7:26:e8:05:ab:c1:2e:d6:fa:ab:cb:
         f9:7e:a1:b1:87:7a:88:8d:e7:8a:18:fd:b3:29:c1:cc:a4:ee:
         a6:18:e3:c3:4d:a6:5a:44:6a:22:2a:af:6a:ea:23:9d:d3:4c:
         cf:a6:7c:cd:79:8c:99:ca:d4:f8:00:9e:55:a1:56:f1:00:1c:
         e9:16:91:58:0d:cc:d6:93:fa:75:34:ae:69:3f:5b:8d:89:0a:
         6d:4d:37:fd:5c:ae:84:e7:65:34:37:2d:69:5a:7c:30:47:28:
         4e:bc:ae:68:f4:2e:04:8f:d7:97:6a:d0:a6:a6:49:ae:ae:91:
         4d:4b:39:ad:39:aa:24:51:7b:98:c5:1e:7c:8c:56:d1:96:ca:
         23:33:6b:dc:f1:55:25:87:01:db:3f:29:45:e7:a3:eb:20:d6:
         67:3f:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org