Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS19905.roa
File:                     AS19905.roa (raw, json)
Hash identifier:          SzJjoil0jHY9+E+vbvrIcC8q08KOAjFnMHGqIzVlwDg=
Subject key identifier:   7E:9C:E6:AC:66:5E:25:31:D2:98:62:CC:C9:A7:38:46:2D:8C:FB:C7
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       64AED2E72FAB538AE1DADDA6AF22CB724C55572D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS19905.roa
Signing time:             Wed 29 May 2024 12:35:00 +0000
ROA not before:           Wed 29 May 2024 12:30:00 +0000
ROA not after:            Wed 28 May 2025 12:35:00 +0000
asID:                     19905
IP address blocks:        200.0.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ae:d2:e7:2f:ab:53:8a:e1:da:dd:a6:af:22:cb:72:4c:55:57:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: May 29 12:30:00 2024 GMT
            Not After : May 28 12:35:00 2025 GMT
        Subject: CN=7E9CE6AC665E2531D29862CCC9A738462D8CFBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:1d:73:a7:6f:cc:cc:2c:6e:14:53:8e:c6:
                    aa:51:23:59:bb:3c:56:15:bd:04:8a:e7:45:2f:0b:
                    e2:12:99:33:a8:41:a6:ff:57:9e:30:a8:04:30:81:
                    70:02:26:81:6f:cb:4a:46:a7:4d:7b:b5:48:30:ff:
                    9e:81:f1:c7:9f:64:39:73:72:c4:b2:9b:45:cd:07:
                    89:93:9d:73:15:3c:77:81:56:13:92:72:25:08:5a:
                    38:ab:4a:3d:8c:f5:05:4a:67:e9:b1:5a:16:3a:6e:
                    e0:94:54:ca:ba:b0:53:1e:9a:28:1f:63:7b:35:f3:
                    96:48:16:59:bf:01:05:d5:61:32:28:5c:b2:45:cc:
                    b1:bd:e7:d5:66:f8:e2:49:f6:f5:a7:30:1b:d7:3a:
                    78:db:df:25:a1:3a:c7:80:32:7b:64:07:d3:48:66:
                    48:f1:16:92:27:9b:f8:1b:1c:2a:ed:e3:dc:7b:b5:
                    14:fb:4d:0c:9a:66:c2:da:5f:28:04:96:ca:37:86:
                    22:e9:9e:27:0b:56:fa:65:5a:17:05:aa:3f:98:96:
                    23:ec:35:d3:dc:44:b4:ff:47:d3:9c:f2:18:5a:4d:
                    3f:1b:44:90:49:a3:81:a6:36:2d:ad:b2:8a:ad:c5:
                    2e:62:15:ee:12:72:4d:a5:8f:04:f7:90:2d:3f:37:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:E6:AC:66:5E:25:31:D2:98:62:CC:C9:A7:38:46:2D:8C:FB:C7
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS19905.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:3b:2f:80:2d:77:a8:c7:7d:63:d5:b7:f1:4e:45:11:b8:
         68:a6:85:1b:6e:65:15:58:b9:a6:27:f1:a0:cd:79:d5:6a:ff:
         9f:7d:85:d6:29:40:4c:36:14:cd:41:ef:dd:ab:8e:68:5a:74:
         82:38:36:cf:33:df:ae:d0:6e:27:5e:06:55:5a:67:aa:b2:4d:
         73:8d:d2:ff:e1:ce:c0:78:87:52:b1:65:48:3b:db:22:80:a3:
         41:8d:da:39:d6:e3:e8:63:8b:fe:4e:c9:30:6a:55:b6:50:bf:
         21:1c:ba:2d:05:0b:98:e8:ef:f2:d2:bd:d5:ea:1e:18:35:93:
         8b:09:a7:e6:e5:cb:88:cd:1d:9e:be:77:0a:26:8c:b1:e3:80:
         b1:c9:07:76:02:3e:ae:33:0d:a2:4a:4e:60:66:b8:4d:c3:b3:
         1a:08:5c:9b:00:a0:b1:97:09:59:58:36:70:9c:43:55:6d:db:
         e8:5c:dc:ae:1e:b3:33:d1:af:05:b7:5a:33:9b:b7:8e:83:35:
         88:98:92:16:84:49:e0:59:d8:a4:d0:98:1e:c4:de:1b:0b:a9:
         8b:99:f0:26:77:74:bd:1b:03:44:50:c9:55:4d:96:65:5e:1b:
         19:05:f6:66:e2:5f:50:3c:19:d7:8e:0f:9e:e7:42:a4:db:61:
         81:ed:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org