Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32332d3233203d3e20323731383839.roa
File:                     3139302e392e3132342e302f32332d3233203d3e20323731383839.roa (raw, json)
Hash identifier:          oGV+4Xt7WnuCn9iNJHScrOYa6i+9kfJIumpTGQBxEEQ=
Subject key identifier:   E1:C6:9F:94:B3:F1:E3:34:0F:21:CD:BC:28:E4:B4:A8:5B:72:E7:BE
Certificate issuer:       /CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
Certificate serial:       4D21CBC1B3DDCFB71E0098C77BAFCE7EF3877831
Authority key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32332d3233203d3e20323731383839.roa
Signing time:             Wed 16 Oct 2024 17:05:00 +0000
ROA not before:           Wed 16 Oct 2024 17:00:00 +0000
ROA not after:            Wed 15 Oct 2025 17:05:00 +0000
asID:                     271889
IP address blocks:        190.9.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:cb:c1:b3:dd:cf:b7:1e:00:98:c7:7b:af:ce:7e:f3:87:78:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Validity
            Not Before: Oct 16 17:00:00 2024 GMT
            Not After : Oct 15 17:05:00 2025 GMT
        Subject: CN=E1C69F94B3F1E3340F21CDBC28E4B4A85B72E7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:e7:a1:14:7f:84:74:2f:24:84:a9:b3:45:
                    4b:88:4f:cb:65:e5:e0:27:4d:c9:49:80:c6:47:89:
                    7a:da:3a:d7:b0:48:c9:d4:79:1c:d9:41:ed:62:fe:
                    97:a8:09:15:4d:19:e5:b0:9a:a8:f5:21:36:f2:35:
                    7c:4a:37:8f:c0:73:20:ca:e1:67:65:80:db:31:66:
                    db:fc:10:17:dc:36:df:65:99:56:54:d7:64:41:b6:
                    90:a3:f7:47:36:6c:22:29:88:1f:32:fb:86:ac:8d:
                    be:02:19:34:42:7c:e0:7c:14:01:2a:a0:c7:eb:27:
                    9f:6c:c1:d5:dc:d3:a6:50:90:13:b6:52:ee:83:56:
                    50:39:c0:56:c4:d6:77:10:20:34:4f:bc:4f:90:f4:
                    1b:cc:42:d0:63:1b:ea:f4:2a:cc:6c:ab:f3:0f:0c:
                    07:8c:57:cf:22:4c:71:f7:f5:d6:6f:98:1c:58:3b:
                    e3:72:6e:8f:f2:37:31:ac:12:bd:d3:81:64:e6:48:
                    09:20:0d:7d:5b:6e:eb:2d:db:95:e8:e7:86:f4:e8:
                    82:f5:a9:d1:59:13:27:14:26:e7:86:50:88:09:92:
                    5a:4e:7e:ed:68:d5:4d:04:f6:68:a5:35:5b:96:4f:
                    53:1d:25:41:84:32:73:36:8a:c4:e7:15:f8:5d:bf:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C6:9F:94:B3:F1:E3:34:0F:21:CD:BC:28:E4:B4:A8:5B:72:E7:BE
            X509v3 Authority Key Identifier:
                keyid:E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/3139302e392e3132342e302f32332d3233203d3e20323731383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:cb:5a:87:00:8f:a6:ba:5d:39:f9:27:f8:32:f4:64:73:
         c6:11:d5:ff:10:8b:26:f5:24:e0:11:64:31:0c:66:55:77:f3:
         6a:40:b6:e4:36:36:da:34:30:2b:3d:c1:46:2a:36:a6:24:44:
         17:e0:f4:1b:f7:c4:3c:b7:d8:a4:78:fa:10:22:ec:a4:ff:4c:
         27:d1:cc:95:30:a7:76:d3:ba:d4:fa:c2:9b:b0:48:00:85:57:
         dc:4b:33:f6:e5:63:19:a9:4f:58:ff:31:d5:62:23:27:ec:83:
         bc:5e:16:f1:5f:54:4b:5e:2f:5d:38:a1:4a:6b:01:d2:cf:e7:
         70:14:16:dc:3c:88:ed:46:9b:51:14:d2:06:de:5e:12:c8:55:
         b7:f5:31:25:c1:92:18:9f:13:eb:3a:01:89:34:4c:1f:7a:fa:
         e1:0f:4e:93:9d:3f:26:00:ad:63:f1:c0:ab:74:94:90:1a:e1:
         0d:98:3b:9c:3e:68:c0:ab:a4:40:6f:ba:65:7c:fc:e2:47:2a:
         a5:06:75:65:e4:94:1b:80:f1:b4:40:4a:60:8d:b2:d7:ae:3b:
         3a:b6:f6:8d:a9:a6:c1:c8:a3:5e:34:8e:ed:f5:00:91:32:93:
         46:b1:ee:85:39:03:10:ec:a3:ba:57:c3:e9:db:ac:f3:3e:b9:
         d4:af:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org