Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32322d3234203d3e203532343535.roa
File:                     3139302e3131332e39322e302f32322d3234203d3e203532343535.roa (raw, json)
Hash identifier:          vCnQXlsAvbyGPiuQzzEncZ8mb6BRJ8xRr79tPYhoMMo=
Subject key identifier:   AD:7B:5C:4E:DD:02:3D:49:7D:47:99:99:64:33:3D:8D:A2:2D:7A:75
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       22208B89BBF3863FF1C02F240384FDD246ECB18F
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32322d3234203d3e203532343535.roa
Signing time:             Tue 05 Mar 2024 18:19:41 +0000
ROA not before:           Tue 05 Mar 2024 18:14:41 +0000
ROA not after:            Tue 04 Mar 2025 18:19:41 +0000
asID:                     52455
IP address blocks:        190.113.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:20:8b:89:bb:f3:86:3f:f1:c0:2f:24:03:84:fd:d2:46:ec:b1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Mar  5 18:14:41 2024 GMT
            Not After : Mar  4 18:19:41 2025 GMT
        Subject: CN=AD7B5C4EDD023D497D47999964333D8DA22D7A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:6d:97:6c:a4:b1:78:9e:83:59:4f:53:b3:
                    0d:d7:eb:89:38:f0:fe:79:a2:bd:2c:d2:15:c0:a2:
                    3b:58:1a:f2:38:cc:d3:e9:de:2a:b7:6b:1b:fb:61:
                    5b:bf:56:b2:a4:50:b6:ec:3f:dd:87:42:79:27:70:
                    6e:46:03:20:55:74:6a:d0:49:5b:ff:30:72:94:53:
                    96:f1:bb:b1:4d:bf:98:31:fb:75:ba:f4:ec:0e:f7:
                    84:85:6b:b7:a2:f5:20:bb:17:3b:61:11:55:8a:71:
                    91:44:38:4f:af:8a:f1:94:6f:5b:22:95:fa:c2:02:
                    59:c6:47:43:6d:0c:62:d8:28:c0:25:d4:31:5b:c5:
                    94:d2:f7:34:ce:12:29:f5:52:d6:f3:88:6c:bc:54:
                    be:8a:fb:c7:44:1e:37:0d:9c:25:8f:a5:cf:b8:35:
                    99:f2:4a:7b:f6:d7:24:67:9a:0f:b6:c6:8f:6a:9e:
                    38:e5:d9:41:b9:4c:d1:37:5f:b5:4c:1b:87:73:ff:
                    46:fb:9b:97:b2:88:a6:6b:0b:cf:fc:3b:34:a8:fd:
                    1e:52:d8:37:89:6f:d5:42:a3:92:82:46:89:f2:60:
                    93:68:9d:17:4d:b6:6b:23:2d:95:e5:14:1d:f0:a9:
                    35:23:35:2f:91:e3:ba:bf:f9:ae:34:68:9c:35:f3:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:5C:4E:DD:02:3D:49:7D:47:99:99:64:33:3D:8D:A2:2D:7A:75
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3139302e3131332e39322e302f32322d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:de:ae:89:7c:37:42:60:9d:e6:4c:1a:1e:de:21:f0:1b:67:
         c6:a0:4f:17:12:b2:02:1a:7a:24:4f:92:fc:ea:0f:4d:ea:7e:
         a1:ab:21:03:4f:2f:a6:78:88:73:75:f9:44:7a:ae:f4:13:7b:
         72:a3:e7:7f:a6:6a:01:c3:63:cf:6c:83:ef:62:33:86:e4:ef:
         56:35:36:6d:f8:db:27:32:eb:8b:94:6a:0b:25:96:ce:28:ee:
         b3:d5:7a:51:e0:5b:e6:d5:c2:69:de:70:d1:25:05:ac:d1:a0:
         b7:98:d4:26:7b:e2:6d:61:94:72:aa:7f:c4:eb:77:fa:48:7e:
         8d:67:2d:4d:7f:8f:33:d0:87:e0:ff:dc:71:af:a2:2e:3d:d4:
         c4:3a:cd:af:77:66:5f:5c:96:86:e6:c4:fd:0b:6c:08:2d:68:
         c5:7f:f1:fd:a5:33:6e:06:cc:21:80:3c:e4:14:35:1e:23:4c:
         ec:6d:4b:2b:3e:7d:e0:cb:1a:fb:bb:d7:f1:c8:36:bf:b1:44:
         2a:58:d7:c1:0d:83:a2:c0:9e:b2:2b:0e:82:13:ad:a0:98:d7:
         35:4a:2c:ca:df:a5:c5:c2:ac:83:d8:18:1c:e6:01:4f:e0:f1:
         56:30:9a:47:3b:60:4b:70:2b:a1:fc:18:b7:e8:f2:28:4b:41:
         20:6c:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org