Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e31362e302f32302d3234203d3e203532323333.roa
File:                     3139302e38382e31362e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          MJY4fyqIUMQJgNPNVf9QaJv9PEU/07kQzkPjGYqUGRk=
Subject key identifier:   4C:C5:A1:28:F9:E3:29:96:44:D7:88:F6:BC:E2:96:9B:FF:AD:85:F9
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       099FCB9252FC848672C343DFA04F512BD481348F
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e31362e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:03 +0000
ROA not before:           Tue 05 Mar 2024 17:37:03 +0000
ROA not after:            Tue 04 Mar 2025 17:42:03 +0000
asID:                     52233
IP address blocks:        190.88.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9f:cb:92:52:fc:84:86:72:c3:43:df:a0:4f:51:2b:d4:81:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:03 2024 GMT
            Not After : Mar  4 17:42:03 2025 GMT
        Subject: CN=4CC5A128F9E3299644D788F6BCE2969BFFAD85F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:34:ee:d9:9a:ef:76:05:1d:8a:18:b1:cb:
                    4d:9d:e7:90:31:5c:63:69:29:b9:b1:41:43:3f:62:
                    23:7e:5a:34:ec:72:03:31:1b:fd:ac:e9:ba:11:1b:
                    ed:ae:0e:f1:e2:04:7e:4d:3b:ea:7a:ad:cc:b0:43:
                    9e:f5:5c:29:fc:e9:35:00:b5:e3:9c:88:95:da:23:
                    0b:e0:9a:38:be:ca:3f:e8:ad:e2:8c:2c:7b:68:cb:
                    5a:7e:4f:8f:17:ab:fc:bc:53:49:a3:63:f0:8b:22:
                    d3:8d:b8:bf:d9:a2:e6:f6:b6:56:22:f3:2e:b5:8b:
                    ca:07:bf:f7:3c:91:6a:8a:67:30:26:0c:b5:50:73:
                    16:66:39:9a:e7:32:ee:32:d5:0e:ff:1e:17:45:5a:
                    aa:d0:ea:af:70:ec:d6:b6:ec:0b:35:68:12:a6:46:
                    25:95:50:2c:aa:12:ce:0b:8b:18:74:64:32:19:01:
                    65:27:e9:51:17:12:cb:0d:50:86:3b:a9:4d:15:34:
                    f3:80:4f:51:47:a7:e7:ab:4f:80:14:68:c9:7f:c8:
                    54:8b:08:7c:7c:c3:f0:7b:11:fb:36:b5:b8:66:63:
                    e5:a6:f2:7c:6d:8c:59:78:79:d9:e3:1f:71:f2:3e:
                    6c:a6:46:24:d4:7e:66:43:96:b1:13:45:0b:3f:e4:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:A1:28:F9:E3:29:96:44:D7:88:F6:BC:E2:96:9B:FF:AD:85:F9
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e31362e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:80:da:f5:a6:b0:45:e6:5a:2f:a5:c2:0f:50:cc:a3:2f:
         17:7b:fd:ff:17:1c:63:d5:74:42:84:52:8b:23:68:98:cd:c5:
         29:5f:b4:f8:a4:63:29:53:26:ca:2f:09:a1:64:0c:61:33:6f:
         dd:f3:03:92:92:bc:da:b5:6d:43:e1:ab:2e:c3:0e:e4:1f:93:
         ba:9c:17:9a:fb:bf:12:3a:a3:d0:65:0b:e6:3b:b8:1f:7a:27:
         4f:e2:5c:18:5e:d5:87:7b:89:21:f2:7b:d1:68:78:2f:3d:4f:
         9c:18:ee:2f:8a:39:15:d4:75:3c:32:6f:d9:e3:ac:a8:bd:9f:
         bf:11:4b:c1:85:09:1a:53:36:f4:8d:62:b1:7b:ba:b6:92:f5:
         b3:a3:52:f0:e6:1b:1b:0c:fa:52:b6:21:f9:02:29:58:a7:ff:
         12:11:90:62:f0:21:ff:7c:34:d7:3f:94:ac:6a:a5:07:c9:9b:
         3b:66:e7:af:f6:c3:7f:59:93:11:a7:95:37:6f:e1:18:fa:e5:
         1c:01:1d:07:3f:b7:13:a7:d0:cb:0b:47:8d:02:b3:54:26:54:
         16:6c:48:89:95:59:8e:bc:81:2b:76:61:79:2d:5f:72:c2:02:
         10:ad:cc:e4:ec:4c:09:e8:f1:04:2f:82:bb:5a:44:c7:d0:01:
         29:b4:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org