Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3235203d3e20323632313936.roa
File:                     3139302e342e3131322e302f32302d3235203d3e20323632313936.roa (raw, json)
Hash identifier:          LF4WBLjMZ1Cc9nwMcHS1zMx4t7I28Gh4t69DRVAjizI=
Subject key identifier:   5D:CD:E2:DB:73:02:D6:D9:84:95:1B:F8:88:E7:BC:CA:FE:96:98:C0
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       2FF734B4CCB5255629CD29B9C09BA0AC3BB8E9DC
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3235203d3e20323632313936.roa
Signing time:             Tue 05 Mar 2024 17:53:36 +0000
ROA not before:           Tue 05 Mar 2024 17:48:36 +0000
ROA not after:            Tue 04 Mar 2025 17:53:36 +0000
asID:                     262196
IP address blocks:        190.4.112.0/20 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:34:b4:cc:b5:25:56:29:cd:29:b9:c0:9b:a0:ac:3b:b8:e9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Mar  5 17:48:36 2024 GMT
            Not After : Mar  4 17:53:36 2025 GMT
        Subject: CN=5DCDE2DB7302D6D984951BF888E7BCCAFE9698C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:68:a8:54:7e:60:80:e5:c4:01:1f:20:3e:
                    f2:1d:06:18:96:f7:ba:3c:e5:3e:c2:55:52:78:1c:
                    4a:15:c6:0a:37:7a:0f:5e:cc:89:31:40:90:3d:d6:
                    a6:7d:e9:f9:16:53:0d:c9:28:1d:6f:36:e6:f9:a5:
                    79:5c:b2:d0:75:c2:42:99:cc:e0:1a:52:25:73:67:
                    1f:10:35:85:33:00:f7:00:5b:27:85:b8:86:dd:1e:
                    05:b8:74:f8:fc:df:b6:a6:6b:86:a7:11:05:b7:65:
                    1b:ba:c2:62:a8:c7:42:ab:d1:8b:cd:1f:fc:4e:87:
                    61:04:68:49:44:39:ee:79:e0:2f:f1:7d:32:f4:79:
                    61:ef:5c:b4:24:f4:a8:b1:17:9c:bf:d0:0a:6b:72:
                    49:38:30:ce:8a:9b:a3:47:98:1b:5c:32:b8:f3:35:
                    e4:54:0e:47:64:49:0d:08:7a:a6:58:92:9c:2d:85:
                    f8:01:bf:74:80:b8:cf:f1:60:67:70:eb:03:fe:28:
                    95:51:75:97:92:7f:ea:4d:fc:ba:74:71:b8:6e:bc:
                    ba:cd:96:b4:67:84:a0:6e:42:b1:99:03:7f:8f:12:
                    d2:1a:72:80:9c:2f:d3:85:00:99:f0:aa:2c:64:ee:
                    ae:51:52:14:34:a0:29:25:16:5c:09:d0:c7:87:9d:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:E2:DB:73:02:D6:D9:84:95:1B:F8:88:E7:BC:CA:FE:96:98:C0
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3235203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:c2:09:05:75:96:42:63:3b:34:34:97:fc:87:ac:0d:5d:
         7f:e1:c9:e8:51:6f:bf:b3:79:cb:ae:f6:1d:df:42:0e:f1:91:
         5d:fe:de:77:6f:5c:a2:87:4c:73:a2:6d:41:b2:9e:47:dd:da:
         d0:aa:01:22:2c:27:bb:d4:96:92:79:4e:a7:0c:0b:98:42:b2:
         c9:3e:78:4c:61:33:ca:5a:9c:83:52:91:14:d1:f0:ae:03:7d:
         28:af:b6:cc:0c:45:86:f5:3d:34:96:26:00:d0:be:f5:36:89:
         7a:50:d8:ed:44:1b:20:46:69:2e:33:f3:16:f1:8a:e4:2d:06:
         94:28:74:b6:8e:6e:ab:f2:63:55:93:dd:33:cb:67:a9:5f:f4:
         47:be:1a:0f:72:9e:97:7e:93:0f:8a:db:16:a9:48:74:91:7b:
         97:53:b7:1a:e5:c5:9a:97:a9:cb:37:71:7b:d7:cb:77:95:72:
         d8:46:94:04:ef:28:fa:3b:7d:91:40:69:19:7a:e1:86:e8:28:
         d6:47:b2:da:87:c5:28:be:a6:8c:57:8d:5c:62:32:ed:fa:05:
         22:09:d5:4f:c5:fc:e4:ab:cd:24:08:7d:ab:54:ed:c2:02:79:
         bc:51:83:39:13:29:4a:97:25:9a:6c:27:f6:17:c6:a8:55:5b:
         54:79:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org