Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3136302e302f32312d3234203d3e203532323333.roa
File:                     3139302e342e3136302e302f32312d3234203d3e203532323333.roa (raw, json)
Hash identifier:          5dcBOvNawBFLTtqP2kF70SpcJZprwWKLnocTQczDtGc=
Subject key identifier:   5E:CD:61:34:05:C0:CF:41:13:B1:B2:FD:E4:E6:5E:26:38:B5:49:86
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       6DE4241F833DE5A43CD57821FD1895D44ED62DFC
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3136302e302f32312d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:09 +0000
ROA not before:           Tue 05 Mar 2024 17:37:09 +0000
ROA not after:            Tue 04 Mar 2025 17:42:09 +0000
asID:                     52233
IP address blocks:        190.4.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e4:24:1f:83:3d:e5:a4:3c:d5:78:21:fd:18:95:d4:4e:d6:2d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:09 2024 GMT
            Not After : Mar  4 17:42:09 2025 GMT
        Subject: CN=5ECD613405C0CF4113B1B2FDE4E65E2638B54986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:b4:08:55:1d:f6:7f:c3:6f:6a:cc:5b:a0:
                    af:4a:a9:d2:eb:cd:6a:6a:85:b4:f5:60:21:50:03:
                    3b:19:fc:6a:4b:a3:2c:bc:ae:fd:61:ee:7e:b6:f4:
                    0f:5f:15:2d:d9:83:66:4e:0d:6d:b5:57:d3:d3:43:
                    0a:d7:82:9b:cc:47:28:2f:c1:47:d5:cd:73:d9:69:
                    a9:5b:fc:d1:66:1a:bf:01:2b:d5:a2:95:bc:90:f0:
                    aa:32:1a:e1:22:2d:61:8c:cb:0a:67:ed:c6:6f:67:
                    59:2f:b0:22:21:71:61:53:08:87:ff:c5:b1:e7:46:
                    fd:03:92:87:95:a0:c5:55:57:df:d9:e4:31:41:3c:
                    07:25:0e:9c:73:5e:2d:4c:44:ed:46:ac:4b:d9:0c:
                    2a:bb:f8:28:f1:ef:00:27:91:1c:e4:5b:15:71:ed:
                    29:80:00:72:60:e7:ee:7b:0c:3b:c3:c2:d2:d1:52:
                    0c:fe:59:2c:c6:ca:42:64:59:61:97:cc:96:03:b2:
                    58:14:44:62:7f:26:61:c6:26:54:54:12:1b:5b:28:
                    67:16:27:64:4a:e2:5d:19:f6:ad:43:e0:b1:9c:57:
                    00:d2:e8:f5:f9:3b:66:21:c0:b9:be:0a:e0:79:a5:
                    d4:4f:76:e4:a6:9c:a2:10:77:24:5e:78:25:07:0c:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CD:61:34:05:C0:CF:41:13:B1:B2:FD:E4:E6:5E:26:38:B5:49:86
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3136302e302f32312d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:14:fe:20:e0:81:2e:6f:9f:ff:89:7c:28:ec:86:a3:cd:
         d5:8d:26:7b:8e:60:c7:20:5b:b2:2c:9d:c3:10:5d:c7:53:0d:
         74:a4:22:59:2f:af:c7:be:0a:35:01:3f:56:3c:6d:8d:20:e6:
         4a:78:07:e2:80:8e:50:d4:f3:e0:99:55:41:3f:6a:20:ab:5f:
         8f:8c:26:2a:01:b2:77:dd:8c:a2:5b:8c:e8:04:a1:90:8e:76:
         e2:00:93:32:79:18:4e:73:5f:cd:66:a0:da:5e:a8:df:7d:c9:
         5e:93:e5:d0:d7:32:4f:1a:c1:bc:88:a6:d3:a3:80:85:ca:54:
         ca:a3:7a:bf:7b:1c:0f:7a:1b:1d:c5:46:28:9b:39:ab:db:6a:
         ef:a8:94:f3:f6:27:b7:ee:63:20:cf:50:a2:fb:06:4d:be:ef:
         10:11:1c:5d:75:5b:b2:02:ce:62:da:6a:72:e2:7e:b8:a7:a5:
         6c:0a:cb:0b:d4:2f:ce:1d:86:6e:6b:e3:b5:84:32:ca:62:ee:
         cc:5f:bd:5b:db:5f:00:77:aa:48:8f:78:d5:de:92:43:1c:33:
         ab:66:69:28:79:65:71:08:d1:8c:42:26:e0:f3:4c:20:be:cc:
         c0:e0:d0:3a:ee:26:95:2a:67:46:0a:71:41:1e:a8:ae:85:7a:
         b1:b5:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org