Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa
File:                     3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa (raw, json)
Hash identifier:          4qAuGXjglBIVu0Ee2uOFmH1gHZZgl6VJHOaUagbu4uc=
Subject key identifier:   23:F9:CD:34:17:1E:86:E6:FA:9F:D0:47:54:7D:BD:A9:E2:56:81:93
Certificate issuer:       /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial:       5EE249C6F28EB606DFE425533D02F5827879683E
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa
Signing time:             Tue 05 Mar 2024 18:10:29 +0000
ROA not before:           Tue 05 Mar 2024 18:05:29 +0000
ROA not after:            Tue 04 Mar 2025 18:10:29 +0000
asID:                     28107
IP address blocks:        190.124.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e2:49:c6:f2:8e:b6:06:df:e4:25:53:3d:02:f5:82:78:79:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
        Validity
            Not Before: Mar  5 18:05:29 2024 GMT
            Not After : Mar  4 18:10:29 2025 GMT
        Subject: CN=23F9CD34171E86E6FA9FD047547DBDA9E2568193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:5b:08:a6:2d:d2:be:00:8b:d6:12:23:d5:
                    dd:3d:8e:11:3b:7d:bf:ed:fc:f0:e2:e4:bd:01:48:
                    36:ee:a4:08:3c:73:24:4b:56:f8:13:65:cc:44:86:
                    df:bd:8d:52:3d:42:cf:3e:7a:01:76:8d:cc:63:18:
                    61:18:f5:91:94:e2:47:9b:0d:33:88:b4:7d:0e:91:
                    fa:0f:1b:d1:3a:8e:6c:29:61:83:f3:84:03:a1:f9:
                    80:3b:74:c2:21:83:aa:2b:4c:2a:59:11:9e:d7:c1:
                    72:9a:08:a5:bc:a4:70:1a:b1:65:1a:9e:0a:45:b4:
                    0e:16:84:75:df:25:61:8f:0f:be:2b:b8:48:cd:2b:
                    86:1a:33:7d:51:41:b1:56:f0:e1:9c:c7:aa:a8:76:
                    8e:33:34:25:61:35:f8:04:f3:cf:76:b9:e5:9b:b1:
                    46:cd:3b:7f:68:15:de:06:14:68:f7:24:0a:90:5f:
                    51:89:2e:4d:d3:dc:68:df:ca:20:f3:91:9b:d7:54:
                    3d:6c:f7:87:13:e9:e0:0e:f8:4e:15:00:a7:be:f5:
                    1e:2a:09:ef:e7:77:da:79:67:a9:c8:07:ab:5c:2c:
                    1a:90:41:9d:96:da:12:aa:b4:b7:b9:88:b9:c0:e4:
                    c2:c7:cd:81:74:04:eb:be:6f:42:03:7e:03:89:bf:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:CD:34:17:1E:86:E6:FA:9F:D0:47:54:7D:BD:A9:E2:56:81:93
            X509v3 Authority Key Identifier:
                keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:75:96:db:26:6a:ce:c1:d2:3e:53:73:37:dc:bb:3d:24:
         51:4a:5f:9d:68:8c:c3:95:1d:55:e7:3c:53:f4:2b:d0:d2:c8:
         7b:ac:a4:42:e4:0a:0d:9c:01:f7:79:4d:61:65:24:e6:63:c2:
         bd:b7:de:87:0a:d3:0e:15:e7:c1:f1:32:db:a9:3e:61:d5:ab:
         9d:3f:65:37:3c:1e:68:d9:5a:a2:01:6d:2e:14:94:c2:c8:ed:
         8e:c4:7f:86:ec:ab:aa:c8:1b:b3:e1:a5:1b:da:ef:e9:05:79:
         f5:e0:2c:76:23:cd:b8:db:b5:92:5c:92:7a:3a:28:63:25:5e:
         9a:8e:73:e4:82:ae:ae:5b:00:44:87:49:f2:08:9a:97:47:fb:
         0c:87:4f:92:68:83:6d:39:e1:15:de:97:7c:3d:e0:d0:87:27:
         33:af:95:8c:d9:b1:3a:b2:30:ca:65:b7:08:84:b9:48:3e:51:
         ac:d5:4c:7c:24:85:2d:86:47:a5:c3:ac:2b:27:04:ef:b0:9f:
         b9:81:4f:bc:7b:06:2c:32:a3:49:b8:4c:ad:32:f1:f6:9a:1d:
         f6:2c:d1:01:6f:71:e4:a6:d5:6d:a8:d3:82:c6:ec:c1:dd:a1:
         a2:f1:45:55:ae:58:3b:07:56:73:56:45:a0:56:dc:dd:d1:9f:
         0c:80:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:53:07 2024 by rpki-client on console-ams.rpki-client.org