Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139302e39342e3136302e302f32302d3234203d3e203532333634.roa
File:                     3139302e39342e3136302e302f32302d3234203d3e203532333634.roa (raw, json)
Hash identifier:          A8YOoJAAD7jum502zyudJ63yGcnXzi0zSmxTLCQCf2I=
Subject key identifier:   D5:DC:41:60:79:5A:55:97:5E:8F:E5:C1:39:D2:E8:17:E4:DF:34:34
Certificate issuer:       /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial:       03FCF50866D5EFE50DA6ECC39B973A9D5DA69EF8
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139302e39342e3136302e302f32302d3234203d3e203532333634.roa
Signing time:             Tue 05 Mar 2024 17:52:28 +0000
ROA not before:           Tue 05 Mar 2024 17:47:28 +0000
ROA not after:            Tue 04 Mar 2025 17:52:28 +0000
asID:                     52364
IP address blocks:        190.94.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:f5:08:66:d5:ef:e5:0d:a6:ec:c3:9b:97:3a:9d:5d:a6:9e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
        Validity
            Not Before: Mar  5 17:47:28 2024 GMT
            Not After : Mar  4 17:52:28 2025 GMT
        Subject: CN=D5DC4160795A55975E8FE5C139D2E817E4DF3434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:8b:ae:27:03:31:39:46:35:5b:b3:33:ae:
                    c2:fc:5c:1a:51:9b:a5:ac:6d:ce:14:f2:4e:8d:dd:
                    bb:8c:54:94:57:ba:a5:8a:b7:b5:80:68:fa:2a:7e:
                    38:52:82:ef:75:06:b6:20:60:ad:4a:a1:a5:41:e4:
                    d3:53:aa:dc:bf:72:1b:e8:6a:99:ad:29:44:99:12:
                    53:ae:c5:51:b8:04:9b:28:65:30:4f:71:aa:62:06:
                    9b:91:aa:93:fb:80:e1:f6:c9:85:45:b0:0a:72:c4:
                    e0:7e:bd:b0:79:eb:57:36:d5:06:b7:c9:95:9f:7e:
                    7c:11:95:4b:0d:ac:a5:51:d8:5b:10:d6:07:8b:30:
                    89:cc:3e:7d:db:5d:be:63:ee:e8:fb:29:22:7a:a1:
                    4b:4c:91:38:37:96:78:b1:59:51:1a:76:28:36:4d:
                    f2:ce:07:55:3a:a5:fa:30:dd:23:4c:52:89:8d:a6:
                    19:eb:46:81:e6:2a:42:c3:4e:d0:8e:8b:19:83:1f:
                    61:e8:5b:b8:b5:7d:6c:20:0a:0b:a8:a3:7d:6c:21:
                    d5:25:82:38:f0:bb:87:df:80:68:41:95:ae:e0:d8:
                    fd:77:2e:4b:ab:27:ab:e3:04:32:b4:7f:b3:cf:ae:
                    50:0d:76:62:2d:0b:c4:74:9f:de:73:93:c2:b8:80:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DC:41:60:79:5A:55:97:5E:8F:E5:C1:39:D2:E8:17:E4:DF:34:34
            X509v3 Authority Key Identifier:
                keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139302e39342e3136302e302f32302d3234203d3e203532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:b9:f2:b3:63:47:e4:fc:24:35:a4:6b:cf:ff:61:b1:7d:85:
         9b:68:f6:4e:6f:a8:6a:4b:e2:cf:c0:94:65:1c:4b:65:03:3f:
         aa:4c:e9:b3:26:b6:02:64:32:06:06:f9:21:0d:8a:89:c2:01:
         11:6c:54:43:99:96:64:86:2d:09:e5:d8:a2:9e:1b:6a:58:a8:
         4b:a1:34:32:ea:72:0b:2b:42:f7:22:b7:e0:0f:e6:3d:be:94:
         89:62:b5:d9:66:3c:e8:fa:33:fd:78:b4:a8:86:7d:26:89:d3:
         17:1a:46:56:cc:8c:37:59:8c:c3:25:02:82:a3:86:69:08:45:
         9f:e6:1f:7b:b8:59:cf:54:75:90:c7:50:68:4e:0c:37:24:9d:
         53:7c:c7:fc:c5:95:0c:2a:e0:33:04:38:df:4e:28:ad:c7:d2:
         7e:e2:26:51:94:0a:7b:1d:6d:05:70:44:44:8c:37:5c:7a:fa:
         59:81:bf:ca:b8:77:c3:b5:9f:59:0b:05:41:3a:51:dc:dc:64:
         08:82:fe:6e:fe:7b:b1:8f:20:e9:c5:4b:dd:93:d7:36:aa:ab:
         cd:e1:8e:32:97:30:94:de:86:69:65:29:d7:89:a5:16:08:fe:
         16:5e:a5:40:6a:6f:c5:95:5e:74:3a:26:fd:6a:9f:16:41:d4:
         35:c6:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org