Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e31392e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130372e31392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          ID0h5mshQ5Hz6v9unkxAJne2s4AMsCwQHfG5ZN7MhVc=
Subject key identifier:   2A:B9:24:F6:6E:72:9B:02:FE:67:5E:AA:A4:C3:EC:55:91:EB:A7:7D
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       781F1C99B88A7888FA2BBA9A40DCD87B45C6A5D6
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e31392e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:02:36 +0000
ROA not before:           Tue 05 Mar 2024 17:57:36 +0000
ROA not after:            Tue 04 Mar 2025 18:02:36 +0000
asID:                     18678
IP address blocks:        190.107.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:1c:99:b8:8a:78:88:fa:2b:ba:9a:40:dc:d8:7b:45:c6:a5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:36 2024 GMT
            Not After : Mar  4 18:02:36 2025 GMT
        Subject: CN=2AB924F66E729B02FE675EAAA4C3EC5591EBA77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:c1:f8:22:12:13:46:7d:3e:5d:9b:64:e7:
                    5f:c4:64:f3:7b:48:9d:12:43:41:9d:7c:70:15:4d:
                    d4:1a:2d:b1:84:d9:20:6d:fd:45:cd:f6:3f:92:1a:
                    bc:e5:c4:b0:fe:fb:70:61:fe:4f:c0:86:43:1d:2a:
                    22:ae:68:ed:c7:8d:6d:d6:71:61:4f:fa:6f:92:fe:
                    86:ea:0f:3a:ea:ba:ca:6c:5e:39:31:f9:50:8f:09:
                    09:ec:71:da:2f:da:dc:ef:af:43:5f:7a:a0:d8:99:
                    6a:ed:05:35:10:0a:ab:e1:84:2a:60:1a:c1:f3:fa:
                    a8:0c:56:b9:22:64:b4:b1:82:4e:c2:62:1a:9d:18:
                    a6:5d:3c:ef:59:e1:64:b1:94:23:5d:83:6f:79:09:
                    51:f0:0b:e6:06:b8:1e:68:76:2d:cf:00:5a:84:c3:
                    bd:1b:03:1a:e5:3e:f8:5f:04:c5:81:44:43:72:e9:
                    dd:35:15:07:bb:21:1f:ac:04:a0:61:79:85:24:a9:
                    6c:ba:20:0c:84:6f:20:75:a9:03:58:7b:ad:fd:48:
                    85:1f:c4:5d:26:d2:ca:98:4b:5d:08:af:c9:6e:b8:
                    a1:a6:09:2f:0a:7c:64:20:1c:56:e6:df:af:51:33:
                    e4:06:c9:a9:68:d8:6b:20:06:16:d1:b9:2b:34:a4:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B9:24:F6:6E:72:9B:02:FE:67:5E:AA:A4:C3:EC:55:91:EB:A7:7D
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e31392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:9e:2d:11:a0:08:c5:c7:25:1e:d2:c5:33:88:6e:6e:ad:af:
         e3:f8:b6:a8:02:ef:d7:dd:58:4c:ea:1d:3e:3a:5d:0e:e2:0c:
         f1:62:c4:66:74:47:10:e2:81:b2:85:8a:7d:32:07:47:65:ee:
         d8:3c:bf:67:8e:8b:73:a5:d3:26:60:8e:56:e4:be:8d:d6:bd:
         9d:b2:66:6f:a8:36:aa:91:73:45:f6:cf:b1:07:44:e6:2b:52:
         80:4c:5a:a4:21:49:62:90:2f:aa:a7:1a:f9:03:ac:fa:6d:2c:
         b2:87:25:06:b0:e9:f6:84:ae:42:b4:2f:bb:ef:a0:3e:81:32:
         f6:dc:7f:b9:d6:7e:ef:d5:d4:c3:0b:e4:02:42:44:0e:b7:c6:
         1a:db:56:d2:c5:75:62:6e:a2:d5:93:79:66:ee:96:74:81:ea:
         64:f7:f7:35:2d:fe:2b:a8:0c:1a:21:c5:e7:ea:ce:f5:fc:08:
         45:2f:d5:27:de:de:d4:2b:e2:e2:d4:68:b0:12:de:71:38:15:
         ce:ab:d7:1c:f3:c5:10:b5:7b:a8:1f:8e:07:55:0c:06:e9:30:
         80:53:15:15:8f:99:59:bf:f2:bb:3a:ed:bc:78:dd:1e:a0:da:
         76:22:5c:1f:5d:d4:42:61:08:cf:c5:e7:af:43:77:3f:36:d7:
         20:08:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org