Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa
File:                     3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          4wKT0+0B7L4D0VtptzqNmZG26hwIoWM1LiIafu06kDk=
Subject key identifier:   7D:3B:3E:EE:27:61:2D:24:7C:41:FB:CF:1A:19:25:A0:94:2F:C1:A3
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       5C291F384702881B1C20C612BC673790B7A176A3
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:34 +0000
ROA not before:           Tue 05 Mar 2024 17:57:34 +0000
ROA not after:            Tue 04 Mar 2025 18:02:34 +0000
asID:                     262589
IP address blocks:        190.14.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:29:1f:38:47:02:88:1b:1c:20:c6:12:bc:67:37:90:b7:a1:76:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:34 2024 GMT
            Not After : Mar  4 18:02:34 2025 GMT
        Subject: CN=7D3B3EEE27612D247C41FBCF1A1925A0942FC1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:6c:73:ca:23:cf:85:83:10:55:5c:ac:2e:
                    90:77:88:ce:1e:60:6d:ea:6d:9b:74:8c:37:52:ca:
                    84:89:02:5e:15:4e:46:bf:dd:e0:3a:9f:d9:e4:c2:
                    a1:99:fc:90:62:ec:84:b2:31:c7:67:cf:af:e9:6d:
                    42:ae:28:82:06:e9:c1:58:3f:e5:fa:33:13:3d:d9:
                    51:1a:9c:04:62:70:71:6f:cc:0e:50:e5:2f:78:c0:
                    59:ff:bc:3d:f0:fe:bd:d9:e8:0b:83:12:ba:5e:dc:
                    88:13:94:6a:83:65:36:97:c7:1b:d0:c3:a7:2a:a5:
                    f6:f4:49:dc:7c:64:92:23:3c:f5:58:7d:c4:63:ed:
                    b0:44:b1:26:4a:0b:55:1d:f4:03:fa:1c:17:56:10:
                    d5:69:e3:51:24:83:f5:03:38:25:cb:e9:69:d2:5c:
                    6a:5f:c9:0b:dc:4d:9c:51:d3:0d:6e:13:db:6d:69:
                    fc:8c:59:91:3a:29:93:08:dc:49:1b:76:cb:b9:f7:
                    71:7f:54:f8:d0:3f:76:07:03:41:90:cc:01:1d:dd:
                    2a:31:95:4f:e0:a1:1a:0b:e2:58:05:d4:08:dc:84:
                    3b:9f:0d:7c:b9:72:b0:91:bd:0e:db:df:8f:b8:2a:
                    86:72:01:8c:11:06:ca:01:bb:5d:15:b7:bb:99:e9:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:3E:EE:27:61:2D:24:7C:41:FB:CF:1A:19:25:A0:94:2F:C1:A3
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:24:22:ea:2f:ae:e4:bc:4c:61:9b:2d:28:b5:50:21:22:c4:
         48:33:5e:b9:95:b2:6d:18:96:e4:04:1b:1c:c7:39:3b:7a:b5:
         6c:ae:71:66:f6:4e:62:a2:88:6a:08:2d:c4:4e:68:53:74:64:
         0b:3f:cd:93:58:df:4b:bb:65:6b:a5:a8:c2:1f:e9:f8:d4:83:
         5c:97:5c:69:bc:fd:0a:b0:24:90:d6:a5:71:f5:1c:78:bf:62:
         b3:9f:bc:47:f9:bc:92:11:63:b4:f4:91:85:5d:76:ee:ff:17:
         09:98:3d:8b:ae:2e:0c:3d:1d:12:db:99:d8:23:99:01:10:ac:
         36:1b:24:b4:cb:c6:8e:67:ae:30:7b:f6:85:c7:3d:74:60:44:
         10:69:3f:97:c6:71:98:7c:56:23:27:50:bd:45:77:5b:0f:88:
         3a:b1:a2:24:d0:32:bb:66:5a:4c:46:eb:45:96:84:ab:9c:49:
         e7:b6:aa:e3:f7:74:a7:37:a4:62:19:1c:f0:26:f7:c3:af:52:
         80:97:b7:56:36:88:ef:aa:d2:c1:e9:de:06:a4:ad:4e:fa:69:
         60:11:ae:ae:ba:38:c5:c3:ab:da:bd:c4:55:45:f8:68:12:48:
         77:f0:45:e8:9a:ff:df:00:72:88:35:48:4c:d8:ee:59:ce:0f:
         cb:71:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org