Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134392e302f32342d3234203d3e203138363738.roa
File:                     3139302e3132312e3134392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          q77RfK9WPZtkuJElBTr83mAIR3zDwSX+4yfK6c10TrI=
Subject key identifier:   55:B9:13:DD:54:60:38:C4:9F:BC:00:12:7F:DC:A4:6E:11:EB:4C:96
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       2964ADF5621B6BB21BFFBAA02D6BC343A50C3B30
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134392e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:02:42 +0000
ROA not before:           Tue 05 Mar 2024 17:57:42 +0000
ROA not after:            Tue 04 Mar 2025 18:02:42 +0000
asID:                     18678
IP address blocks:        190.121.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:64:ad:f5:62:1b:6b:b2:1b:ff:ba:a0:2d:6b:c3:43:a5:0c:3b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:42 2024 GMT
            Not After : Mar  4 18:02:42 2025 GMT
        Subject: CN=55B913DD546038C49FBC00127FDCA46E11EB4C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:71:4f:37:c3:c9:ea:36:8d:c0:0a:cb:c3:
                    81:64:f9:bd:17:07:a6:17:60:e1:53:a6:0a:26:a1:
                    0b:98:4d:66:61:42:25:22:27:8f:55:3c:37:e6:dd:
                    c1:0d:7e:01:f9:c3:68:3f:59:72:60:ff:ba:7c:97:
                    82:fd:15:76:c2:ff:d2:2a:93:9e:4f:ee:72:33:60:
                    99:44:25:05:82:8b:bb:5c:2f:ef:ee:6c:c9:2a:b2:
                    27:2e:b9:7a:e0:64:f3:c1:a9:ef:9e:26:ac:41:8f:
                    8c:12:54:48:52:28:9a:c9:99:bc:ff:73:2b:48:d8:
                    b5:66:b2:37:ff:71:a8:c9:4e:64:26:3b:54:a2:95:
                    0b:70:ad:c7:03:6d:c3:dd:d4:32:bf:04:38:03:08:
                    2a:30:17:a1:0f:3c:91:57:86:42:0d:7c:1b:4a:b5:
                    60:93:56:be:89:5d:cd:cd:5d:2f:0c:02:fe:72:18:
                    8e:b8:be:9f:67:90:04:ce:47:a1:82:ba:1a:df:41:
                    64:7a:43:ba:56:50:17:61:3e:f5:65:1c:a8:78:57:
                    3b:2e:64:e5:d8:57:41:9a:4b:b6:50:46:b8:ba:bf:
                    75:2d:96:39:47:bf:ae:d7:f3:7c:1a:6c:01:73:4a:
                    16:58:9b:cc:7f:dc:a9:b9:eb:8c:16:18:b0:b1:96:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:13:DD:54:60:38:C4:9F:BC:00:12:7F:DC:A4:6E:11:EB:4C:96
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:fa:f2:08:0e:be:62:6f:75:47:df:85:13:15:64:29:29:98:
         6b:14:a5:43:1c:c1:23:cc:d3:5d:78:8f:5f:75:22:84:13:54:
         fd:46:01:a9:df:71:86:f2:5c:b6:84:21:70:41:c1:2e:75:a9:
         1f:9e:23:6c:2b:68:fa:e6:36:e7:ab:a3:c6:65:ec:78:6b:58:
         45:f7:73:92:d4:ef:fb:c3:25:19:60:6e:4c:cc:3f:cf:24:cb:
         a5:48:54:66:e4:97:a3:c1:b1:ac:65:32:aa:e1:01:67:5a:75:
         dd:7c:ac:e7:a8:86:62:8b:b4:88:ff:2f:f3:0d:3f:a9:38:f4:
         a8:69:d8:37:2f:75:4c:bf:9a:75:a5:97:f4:89:0c:6b:20:fa:
         aa:4b:73:00:fd:9e:fb:5c:46:f3:6f:08:f9:1a:0b:60:5a:08:
         78:5a:22:8c:21:33:a9:bb:3e:a9:5f:c7:8a:79:8a:26:c8:a0:
         32:cb:40:89:c0:ac:c3:a5:38:85:eb:df:a8:13:7a:d2:b9:d2:
         0c:05:58:93:c7:d1:79:e3:65:6e:ae:41:04:1a:8f:48:8a:23:
         3a:ca:b5:75:b1:66:81:d9:86:0b:f8:e6:0f:ed:de:73:6a:c0:
         5e:7f:8d:da:56:0f:2c:d9:b4:7d:d1:df:87:27:d6:94:da:27:
         80:3d:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org