Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36382e302f32342d3234203d3e20323633323339.roa
File:                     3139302e352e36382e302f32342d3234203d3e20323633323339.roa (raw, json)
Hash identifier:          SvlHJlzDM18OVgD8yVYTqpt8Tupy3hDdY6UdFq1cDb0=
Subject key identifier:   F7:6D:92:84:25:AF:4B:B1:0E:51:F2:9F:44:DF:8B:20:19:00:95:E5
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       4C61E316E5AD4E05C844BD5C6A7A20D0EBDF137C
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36382e302f32342d3234203d3e20323633323339.roa
Signing time:             Tue 05 Mar 2024 18:04:25 +0000
ROA not before:           Tue 05 Mar 2024 17:59:25 +0000
ROA not after:            Tue 04 Mar 2025 18:04:25 +0000
asID:                     263239
IP address blocks:        190.5.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:e3:16:e5:ad:4e:05:c8:44:bd:5c:6a:7a:20:d0:eb:df:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Mar  5 17:59:25 2024 GMT
            Not After : Mar  4 18:04:25 2025 GMT
        Subject: CN=F76D928425AF4BB10E51F29F44DF8B20190095E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:07:37:2a:38:a7:52:9b:b8:4d:a8:a3:f5:
                    cd:d9:5e:2f:99:d6:f8:d6:7d:c7:4a:de:3b:7f:bd:
                    2b:4a:3c:fc:aa:04:b5:cb:7f:10:b5:e4:65:fe:92:
                    ab:da:f0:a5:c3:cb:92:65:22:f3:f0:a3:96:5d:c4:
                    f2:46:d1:ff:86:a2:74:78:23:b4:39:07:46:1d:96:
                    f1:15:7c:1b:63:8d:c9:df:ff:57:4b:c6:9d:b2:30:
                    10:c6:54:b1:c9:7b:2f:03:3e:07:f3:a4:26:8f:f7:
                    54:3a:b5:f5:16:6c:6f:b3:09:28:d7:e5:07:da:8b:
                    c7:57:bf:fe:e0:b6:9d:78:d3:bc:f4:10:9f:d4:fa:
                    b0:e2:b4:f3:b0:96:10:ad:7b:56:f4:d7:e1:00:00:
                    8c:48:dc:c3:86:3a:83:aa:e6:2d:28:08:6a:eb:8c:
                    93:e7:aa:a7:39:a2:6d:87:73:b1:9e:42:80:13:ee:
                    7c:37:f9:78:92:16:99:89:e5:89:82:be:d9:13:06:
                    44:db:21:7d:91:17:7f:93:96:5c:fc:25:5c:3f:48:
                    f2:08:37:7a:18:76:01:f1:e2:88:8a:dd:ff:20:b9:
                    6f:c9:d3:b8:64:e3:08:27:4c:50:45:a0:d9:15:99:
                    38:66:d5:01:08:87:64:6e:2a:b3:c6:fa:0e:1a:f4:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6D:92:84:25:AF:4B:B1:0E:51:F2:9F:44:DF:8B:20:19:00:95:E5
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36382e302f32342d3234203d3e20323633323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:20:31:1d:68:45:88:63:dc:f0:a3:0b:53:f9:dc:a7:b9:
         3f:6c:65:96:5e:01:d5:58:1c:e9:b2:f4:ef:a3:7c:61:3c:e0:
         75:a1:c8:d3:37:81:22:a8:ad:31:2e:cf:34:b4:3c:3b:30:f8:
         49:aa:ce:39:eb:2d:42:75:b0:7c:d2:2d:e4:2b:85:74:29:28:
         ad:6b:c6:17:21:13:72:43:55:cf:31:73:c5:8e:c2:fd:c5:56:
         a0:f8:55:91:3d:e6:54:c2:dd:a2:f1:39:e2:7b:8c:75:9a:4b:
         a5:70:6e:53:7f:82:af:f5:81:83:cc:21:1c:66:8f:70:db:61:
         5e:95:2a:f6:75:09:f1:4b:2e:18:2c:f4:57:34:cd:ee:e1:56:
         a7:6e:c9:7c:37:90:a8:17:17:f6:de:c4:15:ff:06:c5:76:68:
         1a:ec:06:85:d0:35:5c:9a:8e:0a:b6:ce:24:ad:fe:38:2f:52:
         7a:e9:6f:fa:50:b9:89:61:2e:f5:dd:73:05:51:83:0b:fc:e6:
         1e:a6:77:c1:5e:5f:7c:12:14:52:1a:d2:b5:dc:fe:00:97:57:
         65:cc:bd:7d:33:1d:aa:c0:eb:86:cf:51:c6:5a:60:a7:08:4f:
         d6:ab:73:64:0e:5e:7d:44:f7:d7:16:e0:12:73:3b:04:2e:51:
         91:af:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:24:04 2024 by rpki-client on console-fra.rpki-client.org