Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa
File:                     3139302e3136302e302e302f31342d3234203d3e203232303437.roa (raw, json)
Hash identifier:          YqikbKatXkcnTVnTCPdyHbmERZS5+DuCp+8eOMHp+y8=
Subject key identifier:   EA:34:80:4F:1D:26:86:F8:8C:9A:01:DD:32:71:6A:A1:0B:91:1D:95
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       4D26875C507FADA560D409499B235035AE840B3C
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:20 +0000
ROA not before:           Tue 05 Mar 2024 18:04:20 +0000
ROA not after:            Tue 04 Mar 2025 18:09:20 +0000
asID:                     22047
IP address blocks:        190.160.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:26:87:5c:50:7f:ad:a5:60:d4:09:49:9b:23:50:35:ae:84:0b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:20 2024 GMT
            Not After : Mar  4 18:09:20 2025 GMT
        Subject: CN=EA34804F1D2686F88C9A01DD32716AA10B911D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:1a:8a:86:ff:e8:c5:a0:f6:2e:18:2c:0d:
                    df:06:ed:23:eb:e1:16:7e:09:d8:b2:47:3c:4f:08:
                    a3:78:b2:aa:b3:44:28:04:e8:5c:84:10:6f:6d:da:
                    c4:26:c6:3f:3c:e4:2f:d3:5a:74:7c:76:d4:e8:71:
                    a1:ef:fe:18:59:3d:11:21:a6:11:91:2a:10:e1:8c:
                    a4:ec:5c:be:ed:c4:46:5a:6c:09:3f:4d:d9:82:8c:
                    9a:f5:c7:35:f7:5a:2c:ee:cf:3a:07:00:03:98:fe:
                    18:3a:dc:67:55:2b:7f:e2:c3:86:05:4d:8b:07:5f:
                    e8:86:b6:07:b4:37:52:15:77:fc:e4:e4:6d:c0:30:
                    86:a3:be:ab:02:fb:72:93:81:71:53:c5:75:cc:4f:
                    33:5d:4b:d0:3b:8c:cd:8b:ba:e3:c6:cd:be:0c:77:
                    78:a3:25:76:a3:43:05:f5:46:f1:db:b7:39:0e:6d:
                    a4:06:86:9d:db:e2:96:97:28:42:94:a7:f2:df:87:
                    43:4f:23:b2:45:91:5c:25:4c:7a:8d:70:28:aa:76:
                    f8:a9:f5:5a:64:77:33:bb:ae:b2:f5:8f:e6:b3:5e:
                    60:03:e2:04:95:d5:fc:dd:5c:40:e4:c7:94:a7:8c:
                    53:ff:03:cd:37:7c:ee:db:da:02:aa:98:00:e7:8b:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:34:80:4F:1D:26:86:F8:8C:9A:01:DD:32:71:6A:A1:0B:91:1D:95
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c4:6a:21:59:5d:b1:b5:c9:e6:2b:c6:b6:88:41:5b:e2:be:71:
         e8:8f:e2:69:22:9e:50:06:43:6d:7e:59:33:23:5e:bd:9f:4c:
         02:d8:df:f6:dd:89:fc:41:33:f3:1f:46:66:84:bd:1a:45:cd:
         3c:28:2d:66:88:85:48:74:7e:77:8d:32:8a:ac:e6:06:95:5c:
         42:a1:3a:b5:65:fd:0f:f9:f2:53:b0:9e:27:75:ba:fc:01:8f:
         27:ef:59:81:63:49:68:13:6a:9d:99:ba:85:4c:86:38:f8:42:
         d0:13:6d:b4:3e:3d:b9:78:bd:5c:ef:1c:6c:5b:49:75:1e:20:
         ea:d6:1a:3b:6b:14:a4:1f:27:0b:86:4c:b1:9d:f9:81:a2:19:
         19:28:81:12:3a:29:6e:05:e6:c5:f7:34:b7:f7:f2:75:d5:d0:
         ee:b7:a9:01:75:3a:84:17:6c:c9:aa:6c:9f:75:bd:4f:b0:1b:
         b5:a6:c0:6b:56:42:2a:17:c1:b9:c7:8a:5f:8d:7c:68:9e:1f:
         a3:bf:05:06:5f:ed:d4:c8:56:06:db:75:d4:55:97:67:79:3f:
         40:10:ab:db:f5:19:3a:e8:b1:97:e8:3b:b5:2a:8e:dc:3a:f6:
         91:0e:d8:8c:b5:c9:13:75:75:ae:dc:7d:7d:3f:d0:1d:66:6d:
         2d:46:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org