Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139302e3130392e3136302e302f31392d3139203d3e203237363935.roa
File:                     3139302e3130392e3136302e302f31392d3139203d3e203237363935.roa (raw, json)
Hash identifier:          djWPOMENM3iGp4K06XeBbPYVAjgEV2DopwPx9dBUs1k=
Subject key identifier:   A6:BA:53:0F:7B:B1:4B:A3:FD:42:08:72:28:28:26:2F:C1:B9:D0:A4
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       146DB7B57A085122AC21E4078E74F9E1EABBD279
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139302e3130392e3136302e302f31392d3139203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:53 +0000
ROA not before:           Tue 05 Mar 2024 17:57:53 +0000
ROA not after:            Tue 04 Mar 2025 18:02:53 +0000
asID:                     27695
IP address blocks:        190.109.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:b7:b5:7a:08:51:22:ac:21:e4:07:8e:74:f9:e1:ea:bb:d2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:53 2024 GMT
            Not After : Mar  4 18:02:53 2025 GMT
        Subject: CN=A6BA530F7BB14BA3FD4208722828262FC1B9D0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:21:27:f4:f0:8f:46:11:59:7e:9d:f3:33:
                    3c:91:59:23:9e:42:05:3c:b7:c3:12:f7:0b:e1:84:
                    8c:f2:7f:92:dc:b8:6d:60:b6:ae:29:cc:79:7a:6c:
                    1e:b2:f3:55:dd:92:60:b8:d2:d4:22:f8:fa:8d:2e:
                    48:85:8a:79:91:e9:e5:7d:a7:e1:2b:a8:2b:05:30:
                    68:86:a2:0d:73:96:21:33:23:7e:f7:9f:bb:06:a8:
                    43:c1:57:7c:cd:26:ae:cb:05:96:b0:8f:12:0e:6c:
                    c3:86:b8:5f:69:31:b8:c4:a9:38:3a:e3:28:76:ca:
                    cb:84:12:f2:2e:07:c2:d5:14:60:c9:11:4a:9e:c6:
                    88:c5:09:f7:5f:d2:fe:9b:6f:a8:6a:3e:c4:2d:a7:
                    16:d6:bd:33:77:bc:23:9e:fa:b9:88:a1:c5:89:85:
                    b9:de:cf:20:72:42:0b:4b:8f:e8:eb:35:94:f6:ae:
                    d6:bb:8c:90:e2:24:01:db:3c:49:a7:67:38:0e:93:
                    97:b8:42:85:14:f5:7d:18:c1:41:c4:eb:c0:9b:9f:
                    3b:a0:bc:92:0c:21:c2:0d:5c:29:ba:45:5d:a0:1f:
                    1b:64:6d:27:62:ee:49:de:7e:b5:57:70:02:76:e2:
                    5e:a2:fe:f9:bf:3f:2e:45:8b:03:fc:02:7a:13:e1:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BA:53:0F:7B:B1:4B:A3:FD:42:08:72:28:28:26:2F:C1:B9:D0:A4
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3139302e3130392e3136302e302f31392d3139203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:1b:a9:8a:97:0c:b3:be:a4:3b:ad:59:a9:0d:c8:e5:9a:
         bb:c9:8a:6c:2c:15:58:b7:e8:31:fb:39:b7:b9:5a:42:d8:07:
         bf:bc:3b:c8:da:57:67:53:71:c4:c5:18:70:b3:f9:91:c5:39:
         e9:7b:80:16:e9:eb:21:a8:6e:a7:dd:f0:c6:ae:ed:32:a6:69:
         05:3b:2c:17:d4:90:6c:a6:23:51:d2:60:de:d4:69:50:3b:39:
         6a:dc:80:d2:b5:2c:9c:2d:34:d8:39:4e:be:e6:7a:25:ed:34:
         d9:2d:65:eb:63:15:0e:7d:65:56:c1:4b:63:79:2b:d8:5b:a0:
         24:af:c2:40:56:1e:c0:81:b9:1d:f8:de:1c:37:3f:ad:b9:79:
         06:b9:66:62:85:1c:9c:0f:f3:a5:16:4e:f3:8e:e3:31:7c:1c:
         a9:3d:62:1c:2c:a5:e6:9c:b9:20:d9:39:03:15:f9:c3:53:7a:
         93:2e:89:bf:b8:4f:5e:96:8e:73:e3:d3:ac:d4:a8:00:22:94:
         a2:c4:04:f3:3a:bf:60:1b:ac:36:53:ef:3f:25:79:d8:02:a7:
         8d:95:79:f9:4a:b6:54:60:e2:96:f1:ac:40:cf:29:12:4a:14:
         86:62:bd:58:9c:7d:dd:15:10:3b:81:25:52:bf:4a:c5:f6:38:
         6f:85:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:39 2024 by rpki-client on console-fra.rpki-client.org