Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3139203d3e203237383833.roa
File:                     3139302e3131342e3139322e302f31392d3139203d3e203237383833.roa (raw, json)
Hash identifier:          9QHbWBOQuSr65ThBs2hW+Uo5uHSl9Ha//UU4vZ4CEJc=
Subject key identifier:   86:75:AC:A6:76:B4:E7:F2:63:2D:8E:ED:06:47:20:B5:C9:8E:6A:28
Certificate issuer:       /CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
Certificate serial:       2CD1AEA4D094CC37F934248BD5B42C05FA69D99B
Authority key identifier: D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3139203d3e203237383833.roa
Signing time:             Tue 05 Mar 2024 18:16:03 +0000
ROA not before:           Tue 05 Mar 2024 18:11:03 +0000
ROA not after:            Tue 04 Mar 2025 18:16:03 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d1:ae:a4:d0:94:cc:37:f9:34:24:8b:d5:b4:2c:05:fa:69:d9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
        Validity
            Not Before: Mar  5 18:11:03 2024 GMT
            Not After : Mar  4 18:16:03 2025 GMT
        Subject: CN=8675ACA676B4E7F2632D8EED064720B5C98E6A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:ad:ee:56:37:27:bb:b3:d5:d0:ae:25:48:
                    21:0a:31:a8:29:de:54:25:e4:59:ce:13:f0:2c:8f:
                    f7:2a:d4:f1:0d:63:0d:89:85:27:1e:d4:95:d7:4a:
                    c7:5c:9c:e8:2c:5a:0f:dc:a2:e1:28:f7:f1:38:ac:
                    3a:58:02:92:44:71:af:01:76:82:24:6c:40:5b:c0:
                    c2:67:ee:b4:4b:d0:05:1c:f3:01:3c:95:ca:47:b1:
                    51:6e:43:69:ad:5c:62:c9:96:46:43:81:e7:12:95:
                    cb:c2:8a:61:92:88:bb:68:31:3d:d6:68:42:90:e6:
                    84:ed:a1:21:30:b2:42:8f:63:5c:c0:59:10:32:e5:
                    ea:8b:0f:3b:40:17:18:d8:ea:4e:91:9e:ba:1e:24:
                    e1:f8:fd:95:c1:e0:ee:da:ab:11:be:c3:a1:d4:e7:
                    98:79:31:d1:ce:7c:dd:3a:b5:47:05:04:34:2b:c6:
                    d2:40:54:e2:a2:04:59:dd:0a:7e:69:ee:8e:43:e2:
                    5c:dc:91:69:94:f8:89:cd:b5:5e:5d:26:91:8e:9d:
                    72:53:c4:8f:95:15:e6:b3:70:bd:af:b9:02:d3:9a:
                    7c:c4:72:49:21:a3:a7:e2:c6:e7:e0:8d:fe:97:fc:
                    8c:3d:53:8d:60:3f:ff:3c:f2:65:50:32:d5:f6:1f:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:75:AC:A6:76:B4:E7:F2:63:2D:8E:ED:06:47:20:B5:C9:8E:6A:28
            X509v3 Authority Key Identifier:
                keyid:D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3139203d3e203237383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:47:17:42:06:80:d4:7a:ad:67:4a:65:ef:62:54:88:60:45:
         fb:f6:be:93:e8:9a:91:b5:93:19:af:ba:5b:8e:68:fd:61:34:
         e6:75:85:f3:cf:2a:50:e1:74:99:24:b9:31:1d:ca:33:d5:ff:
         76:7c:74:6c:d4:6e:2c:72:21:95:99:bf:6c:a8:ec:b4:3c:69:
         3f:90:7a:cd:97:47:dd:c5:c3:4f:59:43:e6:9b:fd:a2:fb:19:
         5b:f0:0d:e0:f3:20:fb:3f:39:c8:e9:f3:90:78:cc:6a:21:b0:
         6a:6a:61:f2:27:69:08:70:da:61:fb:62:45:3e:13:32:f3:c6:
         8b:19:93:a9:23:f1:33:dd:c6:2d:b5:1d:b4:b8:4b:1d:d3:63:
         1b:f6:d8:30:1a:26:3f:55:23:ab:27:ec:d7:cf:a8:73:52:bd:
         f4:c1:88:42:3a:c0:09:23:7c:4e:02:40:81:bc:ea:0e:9e:83:
         46:e2:61:99:b7:c3:0e:47:5e:f3:a7:76:1a:cb:ff:2f:c1:0e:
         01:4f:b3:ff:a8:5b:b5:4b:d8:6f:19:de:ae:9d:d2:de:35:3e:
         02:7c:56:8b:97:16:0c:61:84:e4:50:be:f5:fd:ba:d9:d8:44:
         b4:34:b0:58:11:aa:24:fb:8e:be:0b:6e:80:ed:6d:b9:26:46:
         08:76:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:18:51 2024 by rpki-client on console-fra.rpki-client.org