Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139302e3131322e36342e302f31382d3233203d3e203238303438.roa
File:                     3139302e3131322e36342e302f31382d3233203d3e203238303438.roa (raw, json)
Hash identifier:          gjTEM/mAmJBfoausqbTf5+5kgjCjYk+cOsvwk0rcO0o=
Subject key identifier:   20:B9:53:28:A8:37:88:B0:DB:73:6B:2C:9A:32:92:70:AE:3A:A2:22
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       1DEB5AE6375ED6C3D05156B85CD20026268873DC
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139302e3131322e36342e302f31382d3233203d3e203238303438.roa
Signing time:             Tue 05 Mar 2024 18:04:53 +0000
ROA not before:           Tue 05 Mar 2024 17:59:53 +0000
ROA not after:            Tue 04 Mar 2025 18:04:53 +0000
asID:                     28048
IP address blocks:        190.112.64.0/18 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:5a:e6:37:5e:d6:c3:d0:51:56:b8:5c:d2:00:26:26:88:73:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Mar  5 17:59:53 2024 GMT
            Not After : Mar  4 18:04:53 2025 GMT
        Subject: CN=20B95328A83788B0DB736B2C9A329270AE3AA222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:a3:c6:38:19:ab:5e:47:4d:6b:08:36:d7:
                    93:77:62:77:a4:16:44:15:0a:42:7b:bb:6a:8d:2e:
                    93:b1:39:c8:76:c2:79:de:49:94:cc:42:e5:36:21:
                    bf:af:54:7c:58:df:92:4c:9e:08:51:fa:d7:fc:8a:
                    8a:d4:55:07:e7:17:c3:4f:47:f4:0e:b2:d6:65:b1:
                    7f:d4:df:68:e4:f2:74:2f:a7:5d:d1:de:a3:cb:b7:
                    7c:5e:4d:9a:00:9c:58:4a:15:e5:5e:06:8d:54:35:
                    1b:0d:03:8f:aa:01:de:a1:b6:55:b5:17:4f:00:9e:
                    a0:c0:5d:38:ee:34:3c:75:11:ec:6a:d0:51:a8:dd:
                    be:13:84:42:49:bd:48:0c:a0:c1:a0:6a:67:2a:16:
                    78:86:a9:ee:e5:20:44:36:b3:cb:a3:e3:7b:08:e8:
                    5e:e8:6f:47:77:bf:66:85:37:ad:bd:db:6e:ea:04:
                    be:12:f6:63:77:21:55:69:7c:08:c1:db:ca:87:ae:
                    11:35:59:2a:dd:a0:c0:49:49:4d:9b:d1:e6:8c:14:
                    52:e0:ea:e2:51:2b:b8:dd:ed:67:fa:52:2a:94:8f:
                    68:d8:bd:01:79:04:74:72:bd:6c:14:18:e5:91:1e:
                    41:e0:36:34:f7:ca:2c:8a:87:a4:d2:26:e9:b0:56:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:53:28:A8:37:88:B0:DB:73:6B:2C:9A:32:92:70:AE:3A:A2:22
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139302e3131322e36342e302f31382d3233203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:15:13:6e:ea:02:eb:10:69:ac:3f:1f:6d:52:f1:38:19:b3:
         3d:75:88:7d:05:f0:a3:21:38:23:b4:5c:85:55:11:27:f8:18:
         a5:48:cd:77:0a:4b:2f:b7:96:82:2d:40:19:a4:20:a2:9f:87:
         aa:8c:39:bc:12:1b:f4:63:7a:61:48:17:30:b5:ba:01:1b:dc:
         be:ff:29:d8:56:fd:ed:87:e7:84:09:f2:83:a9:ea:60:ba:cd:
         b1:aa:dd:33:84:25:17:a6:58:40:24:86:f1:43:99:a6:2c:ef:
         ab:0f:46:e5:0d:e3:fb:62:56:ca:c4:51:ba:ee:c6:a6:ed:58:
         36:aa:6a:df:a5:3e:cc:02:51:3f:46:d4:5d:fd:9d:d1:a5:f4:
         e7:9f:11:47:62:0d:98:fa:72:04:c6:d3:2f:bd:26:d2:b7:4d:
         3c:33:47:3b:d5:72:2a:03:48:94:a7:09:bc:58:2b:01:84:6c:
         de:65:d4:bc:8d:24:34:a2:fb:ea:70:2a:2d:71:93:73:b2:d0:
         4a:fb:d7:6f:5c:99:eb:42:b3:31:25:05:e0:ea:f5:2d:44:2a:
         1b:8c:8b:6c:b4:51:5c:1b:8a:50:ca:10:5e:f0:44:41:99:b8:
         c8:a9:d9:50:b6:9f:a6:54:72:75:ab:aa:70:c5:c7:4d:3f:06:
         26:18:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org