Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134322e302f32332d3234203d3e203138363738.roa
File:                     3139302e3132312e3134322e302f32332d3234203d3e203138363738.roa (raw, json)
Hash identifier:          dG1yKlvCwdGkN5cwhJqHemjwYWLFRdzbY7fCYomx/BM=
Subject key identifier:   3B:80:0D:8D:98:F0:11:D8:C2:D9:54:CB:CB:96:5A:96:6B:17:39:03
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       10B7D7B07432ECCC8F446EE9EBDBACF7FE35BA1F
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134322e302f32332d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:02:38 +0000
ROA not before:           Tue 05 Mar 2024 17:57:38 +0000
ROA not after:            Tue 04 Mar 2025 18:02:38 +0000
asID:                     18678
IP address blocks:        190.121.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b7:d7:b0:74:32:ec:cc:8f:44:6e:e9:eb:db:ac:f7:fe:35:ba:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:38 2024 GMT
            Not After : Mar  4 18:02:38 2025 GMT
        Subject: CN=3B800D8D98F011D8C2D954CBCB965A966B173903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:1b:03:ed:ca:90:ee:8b:ea:92:65:1e:4d:
                    26:d1:34:0d:3e:cb:85:1e:d5:8d:52:1f:ce:04:21:
                    fc:53:46:88:6a:84:c9:b8:57:d1:4c:85:ad:16:91:
                    a0:d5:9a:7d:14:dc:0e:24:9c:72:e5:93:51:03:14:
                    2a:fd:07:e1:8b:f0:ce:71:74:39:d1:d4:ef:8b:19:
                    7f:09:35:15:6a:4c:d1:b6:7e:ea:83:59:b7:a6:37:
                    52:ba:6d:f7:03:54:eb:94:75:15:35:8f:c8:90:07:
                    f6:cc:fc:9c:c9:cf:ff:93:af:9d:9a:59:80:73:cf:
                    c7:8b:62:ec:ed:c1:25:84:f2:ee:9c:ad:4a:25:d4:
                    4e:c8:b7:42:b9:3e:44:a1:1c:86:60:0e:a7:cd:43:
                    15:7d:58:a0:a9:89:01:ee:07:15:31:f0:f9:0f:28:
                    c6:ad:59:ac:25:c1:27:0e:55:9d:85:b6:ce:54:91:
                    97:70:b8:ee:8a:c9:af:78:70:ce:94:e5:16:b6:b2:
                    bf:fc:5d:90:bd:11:b7:04:6b:4d:ae:48:cd:e1:7d:
                    ff:17:a0:5a:02:3a:af:0a:50:4f:0a:3b:ba:27:1e:
                    ff:49:39:b7:79:fb:08:12:be:f5:01:27:18:44:95:
                    15:a8:b4:d5:b0:78:b3:9c:c2:8a:0b:3b:e7:07:e2:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:0D:8D:98:F0:11:D8:C2:D9:54:CB:CB:96:5A:96:6B:17:39:03
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134322e302f32332d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:73:a5:7f:46:fe:da:04:9e:d6:38:5d:2e:99:d7:e9:b6:48:
         b7:84:5e:84:96:8c:9d:8a:ec:52:06:f2:e7:4d:95:9d:4e:e7:
         92:5a:1d:2b:42:f2:22:0c:0f:69:68:d5:b9:64:61:fa:db:41:
         8c:ed:d7:80:30:00:d5:16:11:96:46:f5:34:82:81:9d:ce:9e:
         fe:7c:a4:ce:d0:46:f9:d9:90:df:3c:81:ac:06:c5:89:45:5c:
         1d:83:34:de:3d:46:35:14:84:e4:27:af:1a:f1:a1:32:91:cb:
         2f:e5:fe:e4:82:06:11:17:84:79:3e:f2:7e:61:15:5d:c0:94:
         2e:5a:e5:fb:92:49:81:ac:d9:b3:21:86:bc:2e:a7:3f:6c:79:
         b8:57:39:08:c5:d5:80:12:38:74:8b:92:9a:69:bb:84:5a:20:
         37:d7:48:58:30:85:2d:43:b9:f0:64:13:1d:6c:42:12:15:5a:
         fa:bf:45:2c:7d:f4:47:b9:c2:b7:94:e2:99:dc:16:55:b3:28:
         af:3a:2d:4c:0b:3f:d8:c7:c1:e5:6d:45:7e:4b:07:94:d4:29:
         91:93:6a:4f:26:fd:28:d5:15:ff:36:b6:c1:30:bd:0b:fd:55:
         bd:8d:65:d1:2c:1d:a7:b6:5f:7e:8f:ec:44:43:5e:6a:51:47:
         1d:29:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org