Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          RyReHwjc9IccMVR1ACt8iHeJW1hFNatUdNt/pSIBYOI=
Subject key identifier:   AC:ED:66:62:C6:32:62:D5:28:EE:F8:5C:F1:C4:7E:BA:AB:49:89:CB
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       2026DA0C0C378AF5F802EC7EC527DA0F55B59094
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:49 +0000
ROA not before:           Tue 05 Mar 2024 17:57:49 +0000
ROA not after:            Tue 04 Mar 2025 18:02:49 +0000
asID:                     262589
IP address blocks:        190.121.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:26:da:0c:0c:37:8a:f5:f8:02:ec:7e:c5:27:da:0f:55:b5:90:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:49 2024 GMT
            Not After : Mar  4 18:02:49 2025 GMT
        Subject: CN=ACED6662C63262D528EEF85CF1C47EBAAB4989CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:9f:ea:f4:84:cf:6b:7d:5a:6e:c9:b9:a0:
                    d7:1f:4c:06:68:ba:ef:ea:3d:51:8a:d7:bd:be:33:
                    48:8c:a9:42:4c:09:73:64:a3:cd:66:4a:b1:7f:57:
                    19:fd:e6:21:26:56:5f:ee:aa:1c:b3:62:8e:02:48:
                    de:0e:3e:06:cc:04:fc:ec:86:4e:17:e0:4c:3e:e1:
                    23:3d:69:39:d2:56:a0:f0:b0:57:15:46:24:2d:ab:
                    d4:26:61:29:cd:b7:45:9f:1b:10:c9:be:75:62:72:
                    9c:3a:8a:06:25:17:48:6a:14:63:21:e5:95:38:20:
                    24:c7:ac:f4:05:fb:60:7d:f8:f0:04:0b:0b:d4:99:
                    fb:a2:fb:a2:dd:98:9a:b5:fb:d8:46:04:d1:34:b0:
                    bd:f3:8b:fb:c0:9d:9d:2a:b3:78:8d:11:37:ed:54:
                    27:73:70:b7:0a:b7:7c:cb:58:77:f6:d4:f9:11:6e:
                    03:ad:9f:38:fd:28:00:94:f4:9c:a8:4c:89:af:27:
                    49:53:8b:3d:be:47:83:53:91:96:59:5a:0c:f3:f4:
                    02:3d:0c:23:3e:3a:0a:5e:ba:ff:c2:13:58:c0:72:
                    35:b3:dc:8d:08:dd:60:51:4a:61:ac:2e:60:e6:a0:
                    c7:77:41:92:8b:01:d1:2e:9a:3f:4d:cc:2b:ee:fe:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:ED:66:62:C6:32:62:D5:28:EE:F8:5C:F1:C4:7E:BA:AB:49:89:CB
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3135372e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:bb:89:9a:5e:7b:bd:73:45:cd:31:3f:0a:03:a5:13:1a:
         fb:c2:eb:11:4d:e2:9a:41:24:1b:5c:dd:71:2b:a3:f5:3d:31:
         30:ef:79:e3:83:f3:e3:ed:fc:5f:8f:11:95:d9:d8:83:24:a0:
         b3:df:85:b0:d0:28:86:0e:33:90:a4:af:2b:2c:85:1a:0d:2c:
         42:e5:2f:2e:42:7c:58:0d:5b:62:63:15:05:2f:0a:c7:dc:ce:
         d8:91:7b:e5:84:5e:2f:b4:dc:a5:11:7c:91:e1:1d:b7:4d:c1:
         9d:88:e5:c6:db:68:ce:31:81:13:bd:47:f9:f4:a9:84:ef:a6:
         d6:09:87:74:36:c5:57:9e:e6:ea:23:2c:bf:9c:f7:01:f8:dc:
         4c:19:d3:dc:f7:1e:b7:f6:56:0b:17:94:d5:4b:3d:8d:30:a8:
         c0:f7:f6:3c:b0:1c:ca:b5:89:83:f4:f4:d9:f4:6a:d8:56:81:
         01:81:8f:7c:4b:58:2b:41:60:b2:e5:13:a6:4a:66:33:f1:c1:
         5c:c2:07:10:6b:03:4d:ad:b1:a4:ad:60:ce:cf:66:09:af:3d:
         7a:0d:b2:65:d2:82:37:9f:40:0c:7f:33:0d:d0:9f:83:6b:fa:
         17:ed:23:d4:b0:6f:48:e2:8a:1b:3a:0a:eb:43:ec:06:e5:01:
         67:8e:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:06:26 2024 by rpki-client on console-ams.rpki-client.org