Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa
File:                     3139302e3138352e302e302f31382d3138203d3e20323635383235.roa (raw, json)
Hash identifier:          Bhk4a06P7oBqoMeyq5GFz0WW8icPCTBDWf9jXkrkXsg=
Subject key identifier:   1F:A1:01:5F:1F:54:1D:50:0C:A2:DF:C4:4C:99:0E:3B:57:ED:9A:F7
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       29D96DC58C41CD3240C3AA455303B24B62D6D4B8
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa
Signing time:             Tue 05 Mar 2024 17:45:53 +0000
ROA not before:           Tue 05 Mar 2024 17:40:53 +0000
ROA not after:            Tue 04 Mar 2025 17:45:53 +0000
asID:                     265825
IP address blocks:        190.185.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d9:6d:c5:8c:41:cd:32:40:c3:aa:45:53:03:b2:4b:62:d6:d4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Mar  5 17:40:53 2024 GMT
            Not After : Mar  4 17:45:53 2025 GMT
        Subject: CN=1FA1015F1F541D500CA2DFC44C990E3B57ED9AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dc:76:46:17:6b:8c:bd:66:ff:cc:5d:25:f0:
                    3c:de:92:93:f0:66:57:5f:82:35:f6:d5:1e:dd:af:
                    c5:fd:c1:26:82:e5:43:76:40:63:e4:d8:dc:c1:e9:
                    80:d1:c4:71:2e:d0:3e:07:e5:c7:24:1b:c4:49:f3:
                    96:9c:b0:2a:10:24:df:36:d1:e8:50:f4:8d:f5:86:
                    89:bc:d9:7b:9d:9d:ea:d8:ee:64:7f:f0:21:21:e8:
                    3d:0f:4d:a3:c4:49:cb:b1:3b:84:3d:98:38:0e:13:
                    7d:ed:79:fe:1f:79:f0:28:93:fe:4c:10:b5:1d:45:
                    34:ed:62:7a:e3:98:86:ab:38:10:30:72:b6:8d:ed:
                    d5:b3:fe:9d:06:d5:ec:5f:9a:c3:63:63:51:38:f5:
                    b6:27:03:5c:cf:d5:f3:14:04:49:03:22:2d:53:86:
                    e7:49:e9:34:10:77:35:2b:99:76:ad:56:55:75:73:
                    6a:0f:58:21:6f:7a:fc:a8:82:34:f0:2f:39:46:da:
                    61:61:c7:54:25:9f:cd:02:3a:7f:af:88:5e:d7:42:
                    71:6e:66:ad:b0:8c:c5:de:6b:6d:28:7b:8a:7d:68:
                    ce:18:ab:34:65:9e:14:60:af:25:a9:4b:4c:30:b5:
                    4f:08:72:14:dd:68:88:d0:9d:70:dc:ef:ec:7e:83:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:01:5F:1F:54:1D:50:0C:A2:DF:C4:4C:99:0E:3B:57:ED:9A:F7
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e3138352e302e302f31382d3138203d3e20323635383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:df:c3:d3:24:9b:c2:c5:73:63:dd:07:de:bd:ae:9d:4d:51:
         c2:5b:db:1f:82:24:49:7d:07:4a:02:63:cb:89:17:26:91:b5:
         cd:bf:9f:a0:f8:59:45:63:dc:82:0b:e6:58:97:95:a6:59:58:
         f0:84:c9:fb:ba:3d:3a:76:2a:7c:a6:08:be:3e:87:37:cb:04:
         74:46:30:f9:af:1a:74:7a:a3:3a:75:59:17:aa:81:ab:70:6f:
         97:77:48:fe:af:4d:88:ab:54:a7:63:34:d4:26:8a:01:a4:84:
         4d:c4:a2:92:a4:66:6a:75:ed:80:e2:80:a9:8e:09:d5:0d:b0:
         30:4c:4a:34:24:ed:93:92:9a:b4:d0:88:77:95:2a:9e:9d:52:
         f0:c4:1b:58:52:bd:17:d3:dd:b1:62:72:5c:69:60:5e:94:9a:
         2f:21:2c:4d:e8:29:b9:f7:88:3d:3e:2f:ca:42:10:9e:96:d0:
         29:d1:a2:09:39:94:2b:74:cd:4d:fe:22:0c:ad:e4:77:e5:d0:
         18:31:79:62:9d:e9:a6:35:91:81:16:03:01:a9:dc:45:aa:eb:
         76:44:3b:85:98:93:7b:98:74:93:b6:ef:89:c8:d7:96:6f:b8:
         83:42:36:e6:56:2d:44:7b:7e:86:ba:48:75:e5:ca:7a:07:16:
         3b:44:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:39 2024 by rpki-client on console-fra.rpki-client.org