Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e34342e302e302f31342d3234203d3e203232303437.roa
File:                     3139302e34342e302e302f31342d3234203d3e203232303437.roa (raw, json)
Hash identifier:          l+fQGcH5FqNwxILlRm88zvF+k95rJdqAPi/wN4AI2xY=
Subject key identifier:   40:47:5A:A1:C0:8B:DD:78:51:52:43:8A:6C:E9:DC:5E:5B:CA:1C:1B
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       434FC6317A0A3EBE1D6962231621C4FA89B17486
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e34342e302e302f31342d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:21 +0000
ROA not before:           Tue 05 Mar 2024 18:04:21 +0000
ROA not after:            Tue 04 Mar 2025 18:09:21 +0000
asID:                     22047
IP address blocks:        190.44.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 18:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:c6:31:7a:0a:3e:be:1d:69:62:23:16:21:c4:fa:89:b1:74:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:21 2024 GMT
            Not After : Mar  4 18:09:21 2025 GMT
        Subject: CN=40475AA1C08BDD785152438A6CE9DC5E5BCA1C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:35:74:42:92:d6:b4:61:e3:f1:47:68:6e:
                    a7:7f:0f:a9:13:a2:86:72:51:f2:83:b4:e8:8d:86:
                    62:8e:f8:ab:d7:f4:80:f7:8d:e2:10:62:54:6e:d5:
                    b3:17:dd:3a:87:14:df:52:43:4e:f1:dc:74:63:79:
                    c3:13:49:cc:69:a6:d2:61:0f:4a:a8:86:d2:41:ce:
                    79:93:94:ab:b9:a2:ff:aa:4c:a7:d0:f5:12:74:86:
                    69:e4:7d:60:30:b9:49:45:37:7b:57:28:de:2d:99:
                    12:b0:ae:38:93:f5:ba:de:92:88:b6:93:35:b5:93:
                    b1:56:99:23:18:75:1e:1d:3c:23:64:93:85:52:73:
                    e8:be:e9:54:5c:d4:01:74:22:97:8c:0b:85:5c:cf:
                    ae:3e:63:f6:72:7b:af:51:89:56:17:dc:09:27:b4:
                    f9:2e:97:2a:8b:f6:dd:c5:d6:1f:3a:43:2a:08:31:
                    49:35:a7:56:f9:a8:8e:36:d9:0f:8e:67:1d:95:e4:
                    21:48:95:95:64:4e:ff:ab:8f:aa:92:c6:de:b0:fa:
                    37:3d:2d:4d:a2:52:8e:44:b1:e9:03:ea:43:38:33:
                    87:fb:57:4d:7f:6e:81:d2:45:2f:9e:12:2b:04:5f:
                    43:7c:c2:ac:aa:f1:f8:a3:c6:23:75:75:87:8c:8a:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:5A:A1:C0:8B:DD:78:51:52:43:8A:6C:E9:DC:5E:5B:CA:1C:1B
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e34342e302e302f31342d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.44.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:d5:52:a8:5d:dd:4c:ff:0f:de:39:35:db:44:dc:9c:2c:
         d5:93:04:59:1f:fd:ec:23:d0:07:19:3d:f8:c2:de:73:ea:59:
         8e:3d:f0:50:bd:c3:1b:67:3e:bd:4b:fa:a2:7d:bf:17:b1:0d:
         94:40:3c:3b:37:bc:ad:9a:7f:b8:95:48:32:09:30:fb:31:d9:
         f3:f3:cb:e6:ac:e3:04:e5:d5:04:34:34:79:9c:86:d5:27:a4:
         13:b6:ef:92:f9:4e:7b:10:78:f6:f8:8b:3a:8d:45:aa:16:4c:
         60:17:19:bf:91:fa:50:c3:c3:07:6f:02:fc:32:8f:6d:2f:ab:
         d9:4a:ad:94:de:17:72:91:f4:79:fa:1a:94:32:f2:aa:f8:e0:
         e2:13:43:84:f6:69:dc:37:8b:92:e8:cf:e3:e9:0b:ac:47:10:
         ae:ae:d1:b1:2b:b3:e6:1b:a0:d6:a5:82:89:6d:6c:55:96:8d:
         6a:13:9a:04:cb:38:71:65:ea:63:1c:2f:a2:dc:f9:d6:08:17:
         be:b8:5b:54:42:d0:49:15:a0:52:87:1d:62:dd:da:1b:31:63:
         18:fd:f5:1c:a8:59:78:be:8e:81:44:fe:90:8d:fe:93:6f:82:
         c5:42:e5:a3:35:a7:03:a1:ed:06:d5:2c:31:66:ae:01:76:1b:
         3e:97:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org