Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          uqBhsOqQdu66t07shU2vsSk8We4feVKxJayTsgIaIzM=
Subject key identifier:   C5:DE:53:BC:06:6E:CA:C0:EE:04:93:0F:1E:0F:43:BB:00:FA:79:56
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       2CC3394FCD4C5C5B2A62AA619DE0CD86D7EE9FEF
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     262234
IP address blocks:        190.185.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c3:39:4f:cd:4c:5c:5b:2a:62:aa:61:9d:e0:cd:86:d7:ee:9f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=C5DE53BC066ECAC0EE04930F1E0F43BB00FA7956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:3c:85:bb:41:54:9e:ac:e5:06:d1:28:29:
                    eb:96:3c:83:95:cf:a0:2b:ca:88:e2:17:ad:60:e6:
                    63:6c:f5:b6:1f:84:30:36:62:14:b5:1e:b3:34:90:
                    c4:4b:50:89:38:b3:ea:37:1e:e6:1b:f8:7a:30:00:
                    1a:cc:e9:e0:8f:0a:8a:2b:37:0c:fa:cf:76:28:96:
                    68:1b:94:a8:38:7b:b6:de:ef:db:33:87:ed:10:dc:
                    23:b2:cd:36:c7:32:d1:f8:13:bc:85:43:68:51:e9:
                    a5:d1:be:d3:c0:40:fe:1d:c9:44:46:19:a0:d9:e7:
                    dc:fb:c6:20:3d:74:ab:0d:13:05:53:ff:e4:41:5e:
                    2c:f9:64:29:91:c1:57:2b:1b:3b:9f:03:2e:bb:2f:
                    36:37:cc:15:57:ff:4b:bd:12:5f:49:09:46:51:18:
                    c6:23:ae:e3:81:61:f9:f0:c4:30:38:84:43:0a:9b:
                    1b:77:ea:b2:67:5c:47:2c:9b:5e:cd:04:7f:40:58:
                    a3:e2:c7:5d:f0:b9:a3:b4:1d:76:d8:f6:13:98:99:
                    30:2a:74:de:53:1d:97:bc:53:56:13:d8:31:a6:d1:
                    4e:ec:a5:6b:bd:9e:36:9d:30:80:82:0f:5d:e4:f5:
                    a5:82:f7:9e:5c:a4:74:7b:2c:30:4e:83:1e:66:e6:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DE:53:BC:06:6E:CA:C0:EE:04:93:0F:1E:0F:43:BB:00:FA:79:56
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:54:39:2e:ed:11:f1:ec:02:7d:2e:ed:e0:b1:14:b5:c8:
         6e:19:10:86:33:07:52:a0:a7:92:03:13:5b:49:f2:4e:a1:a7:
         d8:7b:a3:d2:ca:49:a6:de:fa:83:9e:3c:7c:04:a0:fd:b4:29:
         0d:6e:0b:7a:a1:8f:e2:6b:87:fd:85:1f:1f:5d:08:a7:de:e4:
         dc:1d:9f:5d:6a:e7:c2:59:da:0f:56:91:0e:b5:de:d7:e6:92:
         9c:e0:6b:9e:1a:aa:67:de:90:63:98:10:dd:9c:9d:55:c1:9b:
         6d:29:a6:87:b3:18:30:de:4f:92:e5:4a:67:6d:b0:6b:ee:39:
         67:1b:9e:fc:6b:c1:9a:d4:9b:85:1b:70:31:45:74:ff:16:48:
         c9:4a:3d:78:cb:8e:41:9f:73:c4:1c:b5:e4:9a:22:8c:3c:a5:
         d7:4a:19:73:0f:a9:d1:cc:eb:99:f5:60:9f:fd:4b:43:0a:ac:
         22:f0:96:e1:d6:1c:07:bd:5d:b2:92:01:e1:d9:5c:e6:30:18:
         93:28:4d:9d:02:18:9d:61:e7:2d:e5:3e:0f:ac:07:22:5b:8e:
         d7:86:37:ac:06:8a:f8:5c:b7:e1:96:8c:b7:80:ce:6e:7c:0f:
         ff:19:99:af:03:f2:25:e9:ea:3e:ac:d6:25:02:9e:00:88:0a:
         a4:c8:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org