Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa
File:                     3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          QhURQrmZTE3Gu9bMBfyoJ1iaK5obj9tKOemG+owe7Nc=
Subject key identifier:   A5:E3:A4:44:5A:5F:8D:19:73:9F:75:74:E0:47:BB:54:04:C1:3C:F1
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       050536DB374342149A60F8D89AFDFF2D33E11E96
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa
Signing time:             Tue 05 Mar 2024 18:15:04 +0000
ROA not before:           Tue 05 Mar 2024 18:10:04 +0000
ROA not after:            Tue 04 Mar 2025 18:15:04 +0000
asID:                     28110
IP address blocks:        190.124.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:05:36:db:37:43:42:14:9a:60:f8:d8:9a:fd:ff:2d:33:e1:1e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Mar  5 18:10:04 2024 GMT
            Not After : Mar  4 18:15:04 2025 GMT
        Subject: CN=A5E3A4445A5F8D19739F7574E047BB5404C13CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:1d:52:c0:86:c5:66:fc:0c:62:22:7e:74:
                    5d:38:2b:f0:8a:8b:6c:03:cd:70:44:63:49:21:cd:
                    ea:1f:79:da:3d:4f:cf:99:c2:2d:75:9b:ca:0c:ce:
                    64:57:da:18:c2:2f:8d:04:58:6f:51:91:aa:02:e9:
                    6e:2a:c9:ed:21:97:f3:0c:bd:c4:91:ba:84:3a:28:
                    d9:90:5f:12:c8:96:6b:03:41:aa:f3:06:2b:80:42:
                    b1:b7:8a:41:1a:9a:fe:5f:4c:9f:11:bf:50:1d:ff:
                    82:e9:a2:99:33:fa:85:bd:71:3e:58:2c:34:8e:08:
                    b7:1d:7b:7f:26:9e:dc:ed:f9:6f:ce:0e:17:1b:12:
                    3f:dc:04:8f:3a:b7:69:c7:8c:be:05:a7:bc:3a:48:
                    84:04:ad:3f:a2:6b:ef:b5:96:cb:dd:c9:d5:31:90:
                    a9:7d:47:9f:a2:4d:52:df:43:ac:3a:0e:ba:bf:8d:
                    57:b6:7f:0d:22:4a:a4:01:5f:95:f3:c9:55:fd:f7:
                    f3:c1:30:a1:dd:4d:bf:1c:46:77:35:af:a8:e2:ad:
                    83:fe:10:43:4c:70:af:41:1c:73:00:ee:4c:7c:22:
                    2d:fb:13:42:cd:d2:77:79:4a:12:ef:e5:08:52:79:
                    76:c5:31:e9:b7:5f:e3:af:87:5d:d4:05:8c:78:93:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:A4:44:5A:5F:8D:19:73:9F:75:74:E0:47:BB:54:04:C1:3C:F1
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139302e3132342e3234382e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:20:59:5c:7a:45:97:b1:a8:2d:e6:f8:4c:86:c5:9b:28:f8:
         9f:c8:8e:69:7a:f7:69:17:65:de:66:0e:1a:9a:1f:58:37:36:
         6f:df:b9:fc:d2:35:75:a0:dd:79:fb:5d:88:64:0c:5d:5a:06:
         43:bc:7b:ba:58:28:7f:90:8d:75:b3:6c:57:32:76:68:b6:ca:
         4c:bc:ee:51:d5:4a:7e:53:59:f3:56:e0:11:17:19:35:c8:23:
         99:99:d9:95:25:05:7e:3c:69:4b:2c:0f:2d:1a:f1:89:ab:1f:
         9a:5a:fe:24:36:26:cf:e6:6c:85:7f:9d:9c:76:40:6c:47:0e:
         6f:b8:ba:7c:f1:8f:f2:1e:da:b3:bd:ec:ed:41:98:e9:52:17:
         cc:b4:cb:7e:73:ed:30:b5:97:d5:aa:da:7f:d5:81:8d:59:9a:
         9c:8d:ff:10:81:a6:11:03:7f:5b:8b:64:71:c8:28:03:2b:f5:
         99:24:34:78:7d:fe:67:27:91:97:10:f4:87:06:5e:ae:c6:78:
         25:91:0c:00:05:3e:ee:28:7b:76:04:5e:1f:8c:7e:1c:3e:64:
         16:7a:19:0a:46:84:34:4c:08:cf:76:c8:aa:03:87:e4:b7:ba:
         30:05:92:27:4f:6f:3f:29:e8:63:41:1a:ae:c8:7e:14:11:f7:
         6a:1b:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org