Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa
File:                     3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          JkjLUXEaunpdiNSVUAVaChiIM+Jisof34YO3YnxSEWg=
Subject key identifier:   74:19:3E:F4:59:20:93:67:6D:DC:00:BC:2D:B0:5A:B7:86:D5:B3:E5
Certificate issuer:       /CN=21FD9011B33FD9996D9085D654F9943A95C37269
Certificate serial:       3D51BE82888809602137532EDDEB61609BC84CA1
Authority key identifier: 21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 05 Mar 2024 17:47:10 +0000
ROA not before:           Tue 05 Mar 2024 17:42:10 +0000
ROA not after:            Tue 04 Mar 2025 17:47:10 +0000
asID:                     265523
IP address blocks:        190.123.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:51:be:82:88:88:09:60:21:37:53:2e:dd:eb:61:60:9b:c8:4c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21FD9011B33FD9996D9085D654F9943A95C37269
        Validity
            Not Before: Mar  5 17:42:10 2024 GMT
            Not After : Mar  4 17:47:10 2025 GMT
        Subject: CN=74193EF4592093676DDC00BC2DB05AB786D5B3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:f3:e0:db:89:88:ba:f2:a6:27:1f:58:7d:
                    a3:c1:18:07:68:85:9a:cb:81:52:83:ee:8b:5e:0c:
                    98:d8:b6:dc:58:cc:a5:f2:b7:c2:3d:47:ff:45:2b:
                    79:bd:ef:41:5e:8d:7d:b1:11:6a:e3:92:ca:f6:80:
                    a4:6d:6e:5f:ae:79:11:44:e6:23:48:f6:e2:fc:31:
                    9f:96:31:0b:6a:7a:48:35:59:01:c2:b2:c1:1f:c7:
                    14:06:01:1a:ef:35:29:ad:b2:33:4e:10:4f:8e:4c:
                    44:bd:df:99:50:c1:f7:16:20:b9:51:43:44:af:50:
                    0f:ce:ce:ed:0f:96:c0:63:60:6c:19:e9:56:87:7d:
                    42:8f:79:ff:56:eb:6b:92:b4:8e:64:f4:96:5c:48:
                    1f:c2:f1:f2:4d:fd:81:1d:79:fc:d1:2f:f7:05:6d:
                    2b:f8:50:46:40:f6:25:2f:a2:70:57:c1:a8:d7:1f:
                    5b:44:b9:18:e2:41:29:26:8d:5a:62:70:37:ac:a9:
                    5d:3f:28:9f:94:cd:b0:ee:38:cf:11:68:23:56:89:
                    63:88:72:de:0b:cb:24:9d:57:1f:af:25:5e:02:29:
                    98:80:92:e6:0e:73:27:f0:bd:1d:76:c6:54:64:73:
                    00:f7:91:48:33:61:11:d0:08:52:09:42:fa:c8:d6:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:19:3E:F4:59:20:93:67:6D:DC:00:BC:2D:B0:5A:B7:86:D5:B3:E5
            X509v3 Authority Key Identifier:
                keyid:21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:f0:13:cc:44:0a:76:5d:7c:66:59:86:d3:5f:eb:01:31:71:
         7f:e8:cb:d3:4a:9d:51:11:a4:e4:7d:ff:f4:5c:6e:d8:ad:31:
         d9:ed:41:36:07:19:59:ad:65:13:f7:00:ce:00:ce:43:8a:7c:
         a3:29:d5:d7:2c:60:03:21:c5:c8:b7:f9:f3:4a:08:2f:d5:99:
         a4:32:53:76:50:c1:4a:c1:31:de:48:0c:f6:d2:b7:bf:68:aa:
         25:3f:7a:48:2b:dc:5e:1e:a4:1e:72:2b:1f:bd:bc:f4:34:b4:
         b2:20:ce:34:92:84:f2:fa:d9:65:49:01:c5:9d:3c:59:fb:61:
         a2:27:ce:45:a5:d0:60:74:1e:4a:34:29:2d:50:1c:96:b6:ea:
         63:e0:6d:88:41:88:62:68:20:9f:93:8b:8b:3d:c9:0e:f9:fb:
         fa:f3:85:de:cd:02:05:60:60:8d:2e:ea:28:58:ee:b7:e8:34:
         a7:97:70:56:fe:f2:bc:45:5c:0a:64:23:4c:68:04:0d:a8:67:
         ba:84:7c:55:5b:09:1a:d0:e7:12:96:41:e4:13:ec:a7:b4:1e:
         01:79:be:85:8c:74:d9:a8:c6:8c:ba:b6:b3:7a:4f:d3:88:29:
         f0:72:1e:7b:65:b8:84:c9:9e:3b:02:be:fd:ee:a0:e4:1b:88:
         3c:b6:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:37:42 2024 by rpki-client on console-fra.rpki-client.org