Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e35322e3132382e302f31382d3138203d3e203237383636.roa
File:                     3139302e35322e3132382e302f31382d3138203d3e203237383636.roa (raw, json)
Hash identifier:          R1wlFc+iqygn1gIy5u9hrwjke7JVb89x9H/v+XD0lLo=
Subject key identifier:   38:A8:E8:6A:7B:DE:69:F3:D7:4A:C9:E9:5E:27:A6:B6:99:52:7A:82
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       25A5BF903F7CD17BE8EE67A71A3F3F9238909C60
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e35322e3132382e302f31382d3138203d3e203237383636.roa
Signing time:             Tue 05 Mar 2024 18:20:38 +0000
ROA not before:           Tue 05 Mar 2024 18:15:38 +0000
ROA not after:            Tue 04 Mar 2025 18:20:38 +0000
asID:                     27866
IP address blocks:        190.52.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a5:bf:90:3f:7c:d1:7b:e8:ee:67:a7:1a:3f:3f:92:38:90:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:38 2024 GMT
            Not After : Mar  4 18:20:38 2025 GMT
        Subject: CN=38A8E86A7BDE69F3D74AC9E95E27A6B699527A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:ba:39:50:dd:f2:59:a3:c5:a1:13:37:96:
                    30:0a:49:0c:bc:af:36:d3:6b:fc:d7:62:bd:3b:49:
                    66:b8:7b:8a:b4:0a:9a:e9:70:4b:b0:dc:c3:43:97:
                    dd:16:27:6f:5c:d0:e6:9e:a0:ea:ef:ed:ed:17:a4:
                    d4:8c:e1:f8:95:33:ef:ea:2e:aa:53:25:88:f6:16:
                    0c:04:e4:d4:ba:dc:67:30:03:76:af:be:80:2f:e0:
                    4b:78:8b:16:8e:0a:3c:7a:32:17:96:d6:67:f9:09:
                    50:40:5d:d4:b1:a4:2e:0b:96:a8:de:8b:dc:e4:b6:
                    9b:dd:11:86:9e:9a:e9:92:7a:f3:55:a2:fb:52:e2:
                    c9:ef:64:aa:53:ef:a1:5a:c5:c9:5d:93:dd:39:2e:
                    49:37:f4:b8:70:4e:6f:cb:c7:3b:e6:9f:8c:2d:1f:
                    01:1f:ae:36:92:3c:30:a7:18:53:f2:d2:7b:54:b1:
                    0f:15:ce:5b:1a:0f:95:3d:d8:1e:e0:b4:df:ee:31:
                    12:fe:c3:1a:91:af:15:cb:f1:b2:40:99:ee:ec:8a:
                    00:50:31:35:3f:e2:b0:c6:42:11:11:5a:d9:fd:31:
                    34:a0:bc:7a:ec:aa:29:d0:fb:ae:9c:08:45:25:eb:
                    f0:b8:70:c6:d7:3c:b4:ef:93:93:83:d9:b6:e2:f0:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:E8:6A:7B:DE:69:F3:D7:4A:C9:E9:5E:27:A6:B6:99:52:7A:82
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e35322e3132382e302f31382d3138203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:44:e5:7d:49:93:d6:2b:54:d0:75:5c:18:06:bc:4e:cc:b8:
         95:3e:ce:cf:e6:56:b2:60:0f:7b:fa:56:48:ef:8f:39:6f:08:
         05:af:fa:b5:68:41:20:a2:85:b3:a7:9f:df:f3:30:13:b1:db:
         6f:5c:de:77:fc:bc:6c:b4:45:6b:f4:1b:95:e6:e5:36:56:55:
         dd:ea:69:80:89:6e:c7:f1:47:a2:84:c8:8f:27:d3:c5:60:db:
         69:0e:35:ee:3a:4a:f6:92:e4:96:bf:e7:dd:f2:1e:9b:b9:cd:
         c7:59:d3:f0:e8:51:fe:42:82:84:7d:e7:e0:89:72:5d:f4:28:
         77:4c:0d:02:a1:36:8e:8f:ae:9a:0e:d1:0d:11:67:eb:e8:3e:
         c3:53:c9:5c:37:54:e0:11:e5:dc:7a:7f:37:d4:bf:e2:7b:3f:
         2f:28:c2:78:ce:a0:aa:0a:a9:bf:c0:08:14:8c:6b:59:ca:2f:
         dd:4a:76:a4:e6:5a:aa:41:a3:2e:0c:bf:db:b4:64:89:3e:e0:
         fe:8a:d7:90:58:72:90:8c:bf:2c:c6:05:09:88:a3:cb:62:ad:
         c2:e1:47:8b:f3:1d:6d:a2:73:f1:43:fe:87:2d:b8:15:2f:d7:
         70:16:5e:96:d2:20:c7:97:d8:1c:e5:16:2c:94:bb:23:82:d2:
         28:04:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org