Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e31322e302e302f31392d3234203d3e203232373234.roa
File:                     3139302e31322e302e302f31392d3234203d3e203232373234.roa (raw, json)
Hash identifier:          Ff5PrKU17gfrb0xgkQxefn85uM4b4cSngFemytQNpOc=
Subject key identifier:   D4:1E:CA:1E:9D:53:3E:78:07:44:2F:82:64:48:53:5C:17:13:BB:E3
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       1A11952871BBC2C381BB39CBD5584601513B0165
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e31322e302e302f31392d3234203d3e203232373234.roa
Signing time:             Tue 05 Mar 2024 18:16:31 +0000
ROA not before:           Tue 05 Mar 2024 18:11:31 +0000
ROA not after:            Tue 04 Mar 2025 18:16:31 +0000
asID:                     22724
IP address blocks:        190.12.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:11:95:28:71:bb:c2:c3:81:bb:39:cb:d5:58:46:01:51:3b:01:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Mar  5 18:11:31 2024 GMT
            Not After : Mar  4 18:16:31 2025 GMT
        Subject: CN=D41ECA1E9D533E7807442F826448535C1713BBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:cc:0b:d7:c4:f5:2f:af:00:80:b4:7e:97:
                    b8:07:19:1f:ad:6b:02:26:1b:d9:68:b5:7e:37:a3:
                    de:da:85:32:78:e6:5a:f3:6f:24:91:0d:54:46:77:
                    cc:68:10:ae:d3:31:89:eb:bd:be:48:31:7e:e9:85:
                    9c:16:e6:6b:09:56:62:e3:33:53:5e:29:1b:b3:4a:
                    e8:2d:34:35:30:a1:e0:45:26:43:7a:a1:6d:d1:53:
                    25:c9:30:53:92:ee:6b:79:d6:86:34:a6:21:27:fb:
                    b6:0d:eb:e1:76:56:b3:09:79:62:19:a4:1a:95:72:
                    eb:3e:8a:ba:fd:4a:84:1d:d4:8a:16:90:0b:f8:ed:
                    73:c0:3b:5f:72:3d:80:24:c0:b3:31:31:52:c8:ad:
                    74:83:87:f3:47:1d:e0:01:4a:08:ea:1b:cf:74:0b:
                    75:58:2f:56:74:33:f7:71:08:7b:0e:9c:2f:c8:01:
                    35:5a:76:c1:0c:67:1f:0d:d9:54:a6:87:c6:fb:67:
                    27:0d:bd:93:23:04:ec:d6:20:4d:a0:a5:20:1e:17:
                    5d:d6:ca:88:78:12:60:11:a0:a4:ab:23:ec:02:a2:
                    94:bf:e0:3e:38:48:c7:1a:39:3c:fb:d6:dd:af:7c:
                    01:53:91:2a:24:d3:47:5c:c5:53:33:07:32:00:a2:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:CA:1E:9D:53:3E:78:07:44:2F:82:64:48:53:5C:17:13:BB:E3
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e31322e302e302f31392d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:53:28:b0:2c:8e:aa:94:28:aa:e4:65:70:b5:1f:c0:43:
         39:62:8d:9d:14:62:f4:65:01:2d:0f:1a:11:80:0a:3f:a4:5c:
         c0:bd:2b:12:c2:ae:32:3e:8c:d4:21:f3:2c:c4:17:25:4e:33:
         ad:cb:8f:b7:73:86:19:81:73:61:f7:92:85:cf:db:08:e3:ed:
         11:27:a4:8a:d4:b8:ae:fb:e6:2e:38:19:f7:d7:77:c6:90:bf:
         07:ce:7d:ef:54:3e:bd:87:8b:a0:23:7c:e3:a7:27:08:23:96:
         39:68:eb:13:5c:d3:09:d0:fe:9d:7f:3b:be:23:54:f5:1b:72:
         48:5e:5a:46:18:e3:71:74:75:a6:91:70:b4:f1:ee:13:e7:da:
         6f:d6:8f:12:56:c8:8c:57:cb:76:41:ce:94:bd:b7:f4:1e:9b:
         45:ba:1a:78:a2:14:ce:cf:88:de:17:23:74:f4:67:7a:25:ea:
         4d:60:b4:cd:5b:f6:3b:b8:52:a2:42:49:a0:6e:5b:f1:c9:28:
         8d:9a:12:e1:e4:92:be:c0:1d:70:84:72:78:50:3a:e0:3d:b9:
         c2:60:db:c4:b7:40:56:bf:3c:6d:64:3d:40:c8:06:d3:78:ea:
         2c:0e:4d:49:90:db:fb:7b:ec:92:fa:ef:52:fc:b7:69:a6:c9:
         cf:4e:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:57 2024 by rpki-client on console-ams.rpki-client.org