Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3230302e302f32312d3234203d3e203237363530.roa
File:                     3139302e352e3230302e302f32312d3234203d3e203237363530.roa (raw, json)
Hash identifier:          2N0WNwxuRStkRrB4bX2IhdW4Gq6aLHMj0m/m5O+A2+4=
Subject key identifier:   DB:5E:D3:AD:23:3B:AA:9B:24:38:81:6B:4F:C5:DB:F2:74:DB:2A:11
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       27E4D7C6FE938E100A10A872CEEFF80422C09428
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3230302e302f32312d3234203d3e203237363530.roa
Signing time:             Tue 05 Mar 2024 18:03:08 +0000
ROA not before:           Tue 05 Mar 2024 17:58:08 +0000
ROA not after:            Tue 04 Mar 2025 18:03:08 +0000
asID:                     27650
IP address blocks:        190.5.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:d7:c6:fe:93:8e:10:0a:10:a8:72:ce:ef:f8:04:22:c0:94:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Mar  5 17:58:08 2024 GMT
            Not After : Mar  4 18:03:08 2025 GMT
        Subject: CN=DB5ED3AD233BAA9B2438816B4FC5DBF274DB2A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:22:fa:9f:f4:a7:5f:f4:d7:c5:e7:06:d8:
                    bf:a5:3b:03:8e:3a:b4:cb:9f:7e:53:35:5c:cb:23:
                    17:ee:35:99:4b:e2:1c:5f:52:04:d2:e4:a7:59:43:
                    e2:18:50:f3:54:b8:51:90:ac:ad:80:37:32:36:91:
                    fc:fc:6e:92:d6:25:b7:68:6b:47:a6:88:2f:68:b6:
                    38:08:45:65:f5:6b:ce:c6:fe:ad:b1:e5:50:2c:c1:
                    2a:3e:47:59:99:ed:14:87:6a:74:c4:ac:0f:45:15:
                    f4:86:c7:82:ce:be:47:00:bc:7e:8c:7c:83:7c:ca:
                    cc:1c:4c:eb:ea:3e:db:9e:83:ca:71:01:51:b4:40:
                    ea:4d:ad:20:a5:65:35:5b:3f:89:b3:4a:d6:da:89:
                    c0:17:61:db:5c:db:67:66:99:8f:9a:61:d0:b7:2d:
                    d5:76:ef:56:a7:11:06:cd:63:9b:44:4c:b0:57:bb:
                    fb:0c:88:1b:90:55:f1:aa:e0:01:dd:c5:88:29:80:
                    d5:c1:3b:85:89:58:12:3b:9e:d8:29:b6:37:28:71:
                    03:7c:d7:f2:9a:03:e5:48:2d:e6:5c:27:89:6b:14:
                    b7:17:78:6f:c6:87:e3:4b:00:bb:49:ec:39:ad:16:
                    4d:cb:fc:47:54:b2:1e:ef:10:59:36:56:a9:16:3b:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5E:D3:AD:23:3B:AA:9B:24:38:81:6B:4F:C5:DB:F2:74:DB:2A:11
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3230302e302f32312d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:59:cb:75:38:31:e9:c8:c8:01:71:cb:70:51:2a:9b:38:35:
         83:d5:31:24:44:68:2a:7c:9a:82:d1:4f:fa:7b:72:6d:5a:09:
         8b:ae:4e:24:c5:10:aa:d9:d6:f1:25:ab:05:c8:5e:32:75:3c:
         7b:b8:12:66:8f:d5:a7:5a:01:b2:a8:db:a0:fd:fc:9b:48:c9:
         a5:ea:b9:20:be:86:8e:10:17:de:5a:99:41:1f:14:a7:48:8a:
         89:33:78:f9:8b:52:0f:ef:a7:01:92:2a:3c:72:f7:ff:a0:ef:
         83:b8:f9:5f:d2:66:9e:a8:e6:d6:a8:37:cc:cd:72:f9:47:55:
         5e:a5:7b:41:8b:9a:2f:c3:77:4c:0f:8a:3e:e9:e1:4a:f7:e6:
         64:82:a5:2b:eb:27:37:1f:96:39:bd:85:ef:f2:b4:5a:55:72:
         35:ad:34:fe:d2:43:87:da:c6:da:84:60:71:22:f1:89:c4:ba:
         75:44:4c:62:60:a3:44:ec:54:82:8e:1f:3c:af:b1:b7:d8:d7:
         ff:46:c4:fb:4e:2d:93:e9:c4:ba:8c:8d:57:aa:46:20:da:28:
         6d:59:c6:63:e0:a1:3f:d1:27:17:12:c2:b9:cf:a3:4c:5f:0c:
         a9:bf:60:bf:7c:5b:48:cb:11:fa:c5:32:85:11:a9:bc:33:6f:
         19:75:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org