Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e36322e302e302f31362d3234203d3e203134373534.roa
File:                     3139302e36322e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          KfmBvPhyTe6D8P/7UcvBRoYf03c3eAKkaIaszjxJ2W4=
Subject key identifier:   D6:94:C4:BB:D9:33:69:BC:76:08:2D:36:7F:E1:E6:C7:35:53:EA:54
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       725BEB3B3C58B96E40DEE1010C39E90904413F7A
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e36322e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:44:14 +0000
ROA not before:           Tue 05 Mar 2024 17:39:14 +0000
ROA not after:            Tue 04 Mar 2025 17:44:14 +0000
asID:                     14754
IP address blocks:        190.62.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Jul 2024 13:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:eb:3b:3c:58:b9:6e:40:de:e1:01:0c:39:e9:09:04:41:3f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Mar  5 17:39:14 2024 GMT
            Not After : Mar  4 17:44:14 2025 GMT
        Subject: CN=D694C4BBD93369BC76082D367FE1E6C73553EA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:0d:bd:43:53:1e:dc:23:17:93:ad:17:35:
                    49:2e:2d:25:7b:66:0f:00:93:99:5f:a8:d8:51:0e:
                    c6:03:10:25:cc:0b:47:29:aa:f5:2c:ec:f6:e8:88:
                    ce:34:c3:6b:3c:48:2e:ee:06:c2:8e:09:1e:e3:3b:
                    0a:ec:3c:25:6c:ed:8e:dc:2c:6f:3d:e2:51:ec:c0:
                    2d:54:f8:32:c6:ff:67:1a:26:80:e6:f9:0e:f8:c6:
                    7a:07:9c:8f:37:18:c9:bc:8b:93:23:e4:1b:d9:43:
                    99:a6:82:92:cf:57:fa:b0:ce:3e:73:30:ec:67:38:
                    18:a4:d0:87:87:64:2d:c2:17:89:f1:c4:86:56:c2:
                    2b:f8:9d:c1:5e:1a:63:67:c4:79:a5:f4:31:01:ad:
                    81:57:21:87:49:49:f6:3d:0e:85:72:e9:a9:0d:3d:
                    ee:a6:f3:a7:31:b3:59:e5:c7:d9:74:c7:80:1e:2c:
                    d8:6d:8e:74:17:7c:f8:92:aa:90:5b:01:db:dc:30:
                    ce:6d:fb:62:56:d4:ad:92:cc:f5:f5:da:4d:58:b0:
                    9a:08:e1:ff:6c:24:48:26:86:44:0b:0b:da:b1:eb:
                    34:10:e0:50:57:85:94:1a:4f:a9:cf:63:f6:aa:74:
                    08:c1:f6:f1:55:d7:3f:84:e9:e1:5c:b8:f4:e2:60:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:94:C4:BB:D9:33:69:BC:76:08:2D:36:7F:E1:E6:C7:35:53:EA:54
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e36322e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:48:e4:d4:ff:b4:69:3e:a5:84:2b:37:a1:77:aa:d2:d8:
         f7:c5:f2:7f:46:7e:d6:ff:38:89:56:5b:9e:e4:8b:91:3e:84:
         5f:01:7d:2e:df:0e:46:80:6e:75:e1:14:45:74:90:1b:c6:78:
         cd:01:7a:e0:7b:65:4f:27:3d:5c:71:39:1a:7e:c8:50:d9:2f:
         b7:fb:26:8c:93:d2:d9:80:7e:d1:14:93:d1:35:c0:89:46:10:
         78:e3:6f:33:ac:65:31:1a:a8:33:3d:66:fb:9e:61:38:e1:34:
         52:72:96:9e:5c:8a:7f:44:21:01:72:03:4e:bd:97:03:1e:06:
         33:d9:1e:4e:84:43:ef:ae:98:03:45:6c:ef:10:fd:e1:dd:f2:
         d3:47:90:c9:f2:18:24:97:9c:a0:a8:dd:76:73:d7:9d:87:86:
         65:d6:5a:4b:96:4e:f1:ad:cc:7d:d2:db:2a:2a:c8:95:02:b3:
         54:d3:9e:73:0b:f6:18:7f:c7:f7:0d:a0:5a:5e:30:a1:54:fd:
         aa:3a:6d:69:be:bc:7f:a4:d0:0a:48:45:c1:a8:0f:29:fb:e2:
         db:b0:73:88:63:f2:0f:92:0b:54:bc:10:ac:a9:c9:eb:19:aa:
         64:01:59:5f:e0:b1:54:ac:7c:4e:4b:de:0d:2f:f9:a5:e8:8d:
         fd:dd:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 11:52:06 2024 by rpki-client on console-fra.rpki-client.org