Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e322e3136302e302f31392d3139203d3e20323635383235.roa
File:                     3139302e322e3136302e302f31392d3139203d3e20323635383235.roa (raw, json)
Hash identifier:          p9YDco+uanBYypNncZWv++tmQyOq9qQa9jydPBSf+NY=
Subject key identifier:   B3:74:1B:77:B7:D8:82:54:60:66:A7:9B:F2:B0:96:4E:F7:89:FE:D1
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       4D74E78E9F22524E7A2F4C539FAC84786A88553E
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e322e3136302e302f31392d3139203d3e20323635383235.roa
Signing time:             Tue 05 Mar 2024 17:45:52 +0000
ROA not before:           Tue 05 Mar 2024 17:40:52 +0000
ROA not after:            Tue 04 Mar 2025 17:45:52 +0000
asID:                     265825
IP address blocks:        190.2.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:74:e7:8e:9f:22:52:4e:7a:2f:4c:53:9f:ac:84:78:6a:88:55:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Mar  5 17:40:52 2024 GMT
            Not After : Mar  4 17:45:52 2025 GMT
        Subject: CN=B3741B77B7D882546066A79BF2B0964EF789FED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:9c:9b:38:dd:49:ad:71:5e:35:0f:ba:c8:
                    2f:b0:f3:43:1e:84:19:d0:4b:b9:e0:90:1b:b0:c7:
                    78:7a:64:0c:1a:c1:99:ca:b9:9c:42:c9:53:c1:18:
                    b9:16:7d:a4:43:1c:67:f9:84:01:b8:eb:35:5a:83:
                    46:00:4e:c7:40:01:31:c2:61:89:8b:32:49:1f:a2:
                    82:d4:f8:ac:08:5f:2b:ac:c4:d8:07:0a:0b:0d:24:
                    96:8d:0a:8d:58:7d:30:d2:24:57:47:a7:5f:f8:12:
                    e4:7b:17:4a:92:04:a8:69:b4:8b:ef:8a:62:c0:cc:
                    df:2b:95:fb:aa:f1:8f:5e:b0:bd:e8:0e:43:f2:72:
                    3d:7e:6b:51:c4:d1:ff:ac:72:53:14:0c:da:28:32:
                    77:ca:72:31:7f:c9:dc:ae:48:7d:31:64:7d:e9:fd:
                    c2:57:03:6f:56:7d:18:f9:43:ff:bc:f5:32:66:16:
                    1f:6e:5e:b8:3d:ba:be:fe:c9:f3:8c:9f:9c:46:63:
                    25:18:a9:1f:8e:d4:c4:90:ba:ae:ff:52:c9:84:53:
                    42:e3:e8:7c:89:57:ef:ca:5c:09:a9:32:0b:92:9c:
                    9c:47:4f:18:7c:75:36:81:67:ab:96:c1:2f:de:7b:
                    f4:fe:23:df:a9:a0:d1:c0:1f:45:19:5d:55:de:15:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:74:1B:77:B7:D8:82:54:60:66:A7:9B:F2:B0:96:4E:F7:89:FE:D1
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/3139302e322e3136302e302f31392d3139203d3e20323635383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:41:5c:5a:3a:0d:95:a8:79:40:0d:f0:39:42:45:f3:84:
         74:07:87:7a:85:fe:a0:19:c4:bc:4f:3e:9b:d5:0f:ce:33:ef:
         9c:02:4e:c5:d4:b8:bd:4d:b2:63:1b:5c:b0:e7:0f:12:8f:cb:
         8c:fc:ee:b8:78:0c:b7:db:45:d0:77:b8:3c:c6:38:bb:2c:bb:
         a5:17:7b:04:70:fa:f2:4f:fc:b2:bb:26:42:d2:2b:01:4f:ec:
         00:70:99:4e:ea:df:57:d4:bd:88:1f:3a:59:8e:71:2f:1a:1e:
         cb:8a:b5:cf:e2:d6:d1:20:60:ff:19:4d:83:0d:d4:eb:36:06:
         21:39:1e:a5:ae:cf:d6:c9:79:e3:f1:46:1c:52:62:9e:41:31:
         73:93:ab:af:0e:19:0b:c2:b4:6b:26:0f:de:dc:7b:4a:70:cc:
         17:bd:e6:e8:d7:5b:21:00:29:80:63:6f:86:2b:14:e7:53:d6:
         6f:b0:af:94:70:65:cb:71:73:3f:ad:ed:b2:46:01:50:05:bd:
         26:31:4c:e8:5b:6f:55:e3:a0:b7:47:8e:8e:34:90:bd:64:61:
         38:cf:4f:d4:77:d6:dc:bc:45:be:a8:00:a6:c8:4d:52:ff:49:
         1a:cb:bf:01:1c:fa:3d:70:97:ea:7b:16:9a:2e:26:fd:b3:da:
         f9:77:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:39 2024 by rpki-client on console-fra.rpki-client.org