Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa
File:                     3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          65qHckbv4BM0FRbHHFc9r+GtJGyq82gKeStxsAuFG1I=
Subject key identifier:   AC:94:79:97:A5:03:EC:41:9F:5A:37:13:A1:E2:E5:31:7F:ED:15:59
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       75228E06EC6812461A745FCE1D03A4F33C85BBE1
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:36 +0000
ROA not before:           Tue 05 Mar 2024 17:57:36 +0000
ROA not after:            Tue 04 Mar 2025 18:02:36 +0000
asID:                     262589
IP address blocks:        190.14.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:22:8e:06:ec:68:12:46:1a:74:5f:ce:1d:03:a4:f3:3c:85:bb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:36 2024 GMT
            Not After : Mar  4 18:02:36 2025 GMT
        Subject: CN=AC947997A503EC419F5A3713A1E2E5317FED1559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:51:74:f8:3a:a6:e8:34:0c:3d:55:96:13:
                    c6:b8:c2:36:34:b9:b8:da:37:2f:ad:f1:f8:1c:85:
                    8f:93:7b:59:3a:80:43:41:a4:20:9a:30:ff:93:00:
                    69:c2:33:66:dc:e0:0a:aa:32:ca:cc:7e:1e:96:73:
                    ab:d1:65:81:5d:c1:77:e4:fb:48:d9:31:b7:31:8f:
                    8e:82:82:69:e6:20:98:1f:db:a9:cd:39:08:62:7d:
                    cb:3d:c7:a2:85:af:46:24:2c:b8:da:fd:29:1e:0a:
                    49:ee:aa:8f:ae:af:76:67:eb:b0:db:1b:c6:b0:31:
                    b9:85:30:16:c1:ab:53:be:e1:c8:26:9a:eb:76:78:
                    7e:52:f0:e7:c5:0c:bf:26:5f:ec:4d:17:63:1b:c5:
                    5e:3d:8b:2c:ca:a9:13:83:c2:19:ca:06:94:d1:c1:
                    f1:70:1a:c6:99:8b:6d:ac:57:4b:4c:8a:a8:c6:4b:
                    80:0f:49:ac:52:73:bc:5c:6b:c3:c1:bf:8f:cf:d3:
                    b1:7b:a7:c2:15:6e:47:19:04:2b:d5:cb:8d:bb:49:
                    01:15:7c:72:eb:36:2a:d0:46:0c:45:0e:ab:54:b9:
                    ae:4b:82:b3:d8:ca:4c:ca:f9:6b:b2:b1:5b:4e:1f:
                    24:78:6a:bc:11:2f:0f:92:6d:f6:7a:15:cb:92:44:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:79:97:A5:03:EC:41:9F:5A:37:13:A1:E2:E5:31:7F:ED:15:59
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a3:98:53:34:6b:4e:90:12:00:c4:93:c2:1d:61:28:b2:29:
         2d:3e:44:ab:f9:54:57:56:ae:83:5e:49:4c:9c:2f:66:b0:b2:
         e4:f6:bc:bf:4b:64:8f:86:d8:db:6d:ae:10:12:25:5c:cb:1e:
         51:c3:d7:77:c5:27:fb:4e:a4:20:30:41:d2:26:c2:b8:1a:3e:
         12:26:c8:32:c2:04:17:7d:bb:10:0d:27:04:de:5f:7d:d1:72:
         4d:80:0b:30:d2:4e:01:e7:74:2f:3c:9d:b9:df:64:db:bf:8e:
         c5:27:5b:2e:59:14:88:dc:8d:08:2c:10:6b:8a:cc:1f:0c:80:
         95:af:3f:6a:47:b5:a5:bb:23:e2:e0:05:f7:77:e7:39:03:75:
         98:29:18:2b:25:7e:f9:e4:aa:01:29:17:f6:47:77:c5:be:d7:
         a9:da:21:45:ae:74:83:e9:6a:57:82:27:09:bb:52:01:ce:71:
         27:16:c9:f2:06:c6:d1:1a:59:32:07:a3:72:db:20:ef:93:00:
         ed:60:35:65:d3:13:f1:4d:48:f8:f0:c3:0d:82:d6:8b:90:ec:
         bd:c5:1e:7c:64:e1:69:b2:a5:5f:48:26:6a:68:a3:e6:10:f9:
         79:08:45:03:cd:70:fb:fc:f2:72:4c:a0:a0:28:42:bf:92:4a:
         33:0c:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org