Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234302e302f32312d3234203d3e203237393531.roa
File:                     3139302e302e3234302e302f32312d3234203d3e203237393531.roa (raw, json)
Hash identifier:          ongk+tEFc1UaE8zy0TYbnqxOyZRuyX85JLuIUFmpcuI=
Subject key identifier:   97:AE:32:6D:BE:FE:17:25:C2:26:D0:D1:19:37:4E:4D:59:AC:CB:8F
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       3108BE992AD23E5D5F89AA02BD4A92334487084E
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234302e302f32312d3234203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:02:32 +0000
ROA not before:           Tue 05 Mar 2024 17:57:32 +0000
ROA not after:            Tue 04 Mar 2025 18:02:32 +0000
asID:                     27951
IP address blocks:        190.0.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:08:be:99:2a:d2:3e:5d:5f:89:aa:02:bd:4a:92:33:44:87:08:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:32 2024 GMT
            Not After : Mar  4 18:02:32 2025 GMT
        Subject: CN=97AE326DBEFE1725C226D0D119374E4D59ACCB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:47:b8:56:53:1a:25:4b:f8:f9:64:0a:dd:
                    6e:dc:66:70:de:d4:7b:15:e1:2e:0f:d8:da:0f:6e:
                    33:29:81:09:2a:ba:32:ce:93:1a:06:60:2d:25:6b:
                    fc:2f:6d:f3:6a:79:14:e0:bb:8a:b9:22:bd:82:77:
                    ee:9d:fb:72:e3:45:3f:df:5f:e7:2a:04:eb:70:c8:
                    8f:d2:0a:fa:1c:67:56:31:03:75:dd:d8:f8:a3:2b:
                    d3:65:da:42:44:00:b5:42:d4:c6:12:e7:50:3e:52:
                    0f:65:5c:35:c0:f6:7c:10:33:15:60:ae:c8:66:46:
                    72:eb:7b:1e:c1:eb:cb:5b:ec:06:37:91:04:b1:f7:
                    63:a7:6c:2c:0e:28:df:8a:a1:7f:d2:7c:cd:1e:b1:
                    67:18:68:fa:31:dc:d1:d2:d3:5f:da:05:3f:59:f5:
                    50:b7:4b:b0:24:1d:22:21:9c:78:60:e8:c9:86:03:
                    e4:53:a9:ee:5f:54:2e:b0:be:17:14:12:a9:7b:7e:
                    28:29:76:20:73:bd:c3:c9:e5:08:1b:f1:c9:52:77:
                    18:ca:a4:cf:07:a4:01:90:af:02:73:df:ea:94:ba:
                    48:bf:61:ff:d5:ab:57:a6:41:b9:6f:b8:78:57:f6:
                    cd:50:22:aa:3c:d9:26:67:4f:97:a1:b5:a2:40:99:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:32:6D:BE:FE:17:25:C2:26:D0:D1:19:37:4E:4D:59:AC:CB:8F
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234302e302f32312d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:f2:e0:31:35:dd:57:61:44:3e:3e:ed:76:ac:fe:03:cd:
         bb:36:98:8f:d6:dc:d2:07:8c:75:53:ec:30:79:83:8b:a5:7a:
         8c:ea:2c:12:34:be:41:f7:b0:a6:5c:de:81:87:e8:19:d3:bd:
         4e:fd:1a:a0:d7:24:fc:5a:9d:6c:a1:79:71:e8:74:f8:c0:b3:
         7e:4c:3a:70:38:f1:3a:99:e0:09:c6:0a:17:c7:ad:61:98:37:
         3f:eb:0f:9b:0c:a0:4c:6b:09:e9:1d:4d:9d:a0:d6:8d:c2:5c:
         a6:dd:fc:df:89:8f:88:43:3b:03:e4:39:f0:0e:8e:56:e3:e4:
         6e:26:77:0f:96:4d:e0:e4:9c:cb:d9:82:b0:bf:68:4a:12:a4:
         4c:56:17:35:93:a5:31:82:45:88:17:64:ba:fb:22:26:7a:94:
         29:9c:8a:b7:f6:d8:00:30:71:57:c0:dc:b9:d8:45:23:a3:1b:
         17:36:cc:69:a7:cd:06:18:ca:3f:da:02:90:62:85:42:91:49:
         71:f7:58:ee:4d:11:f9:9d:4a:b5:13:38:8d:07:3f:9e:f4:2f:
         60:e0:eb:83:d3:a2:2d:7b:f4:7d:1a:ea:de:ba:a5:10:f9:e6:
         bc:a3:34:b7:40:68:e3:5e:0d:03:f5:ea:d6:da:78:2d:1a:07:
         f8:42:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:41:08 2024 by rpki-client on console-fra.rpki-client.org