Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3139302e3137312e39362e302f31392d3234203d3e203532323633.roa
File:                     3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (raw, json)
Hash identifier:          /MtAeZhZEfmgXMZg3ceQwzYCFhueZRAm281pMpTbuMc=
Subject key identifier:   F4:6A:FD:6D:17:F7:C4:2E:25:3D:15:2C:60:BF:BF:99:C7:76:55:A0
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       2EF8BE05689BFCDC1DDF1B2E540265F58923FE
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3139302e3137312e39362e302f31392d3234203d3e203532323633.roa
Signing time:             Tue 05 Mar 2024 18:19:47 +0000
ROA not before:           Tue 05 Mar 2024 18:14:47 +0000
ROA not after:            Tue 04 Mar 2025 18:19:47 +0000
asID:                     52263
IP address blocks:        190.171.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f8:be:05:68:9b:fc:dc:1d:df:1b:2e:54:02:65:f5:89:23:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Mar  5 18:14:47 2024 GMT
            Not After : Mar  4 18:19:47 2025 GMT
        Subject: CN=F46AFD6D17F7C42E253D152C60BFBF99C77655A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:19:39:be:df:0a:2d:04:cb:6a:2f:bc:5e:
                    e2:a2:dd:5b:5b:ee:0f:98:73:94:28:13:c0:c1:c3:
                    a4:32:01:ff:7e:9d:8b:87:5c:1c:d3:24:f3:92:c6:
                    a5:28:35:3f:56:5f:ad:b9:bb:ba:5e:cd:24:47:df:
                    1a:6f:b7:ad:e1:50:d4:65:e8:cc:4b:79:49:ad:6e:
                    7f:c8:c4:58:5b:55:dd:bd:dc:d6:f5:09:4a:3c:bb:
                    37:c8:c8:c9:8d:9d:06:5a:52:b5:f9:1f:f2:28:1d:
                    62:8f:d2:de:17:ae:78:48:fc:27:b5:6b:32:b6:7e:
                    f0:7d:10:e9:38:2a:ff:87:c0:e8:12:02:58:0a:ba:
                    9c:ba:4f:0d:26:f2:38:25:33:42:d7:61:47:84:b7:
                    8d:2e:10:9c:2e:c2:c8:47:61:e4:b2:6a:86:bc:81:
                    84:99:95:b1:68:a6:f3:8f:49:2c:7f:17:f4:16:8f:
                    49:85:9a:48:0c:b5:2d:15:70:9b:6a:88:50:e4:ff:
                    ea:61:71:33:fb:45:71:02:5b:0c:9c:b7:5b:b1:24:
                    22:0c:fe:d9:a9:b0:06:82:06:b7:a4:16:f2:ba:98:
                    81:34:83:cc:6d:c8:91:94:b6:01:17:3e:4f:25:db:
                    3f:84:af:12:aa:2f:3f:69:8f:7d:43:6b:9c:e7:f9:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:FD:6D:17:F7:C4:2E:25:3D:15:2C:60:BF:BF:99:C7:76:55:A0
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3139302e3137312e39362e302f31392d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:d4:d5:c8:57:58:c0:71:e3:28:fd:97:ab:f1:5e:40:ee:
         86:12:f2:23:df:9f:e6:09:94:5b:e8:7e:fb:76:6f:c0:0f:a7:
         a1:32:4f:85:da:ae:6b:7f:f6:34:db:05:f6:fd:7d:91:06:4a:
         da:bf:65:fa:23:40:69:06:e2:81:25:38:cf:99:21:ec:c0:4b:
         df:00:19:24:00:c4:91:a2:f3:7c:de:8f:8f:05:79:e8:5b:6e:
         7e:6f:e8:82:f4:bd:fd:f4:9a:73:63:fe:9c:e8:e2:17:55:40:
         85:ed:74:23:96:a7:55:06:99:25:47:44:c8:6e:90:fd:03:81:
         13:b9:e1:0c:37:86:a6:11:f2:96:98:e2:3e:39:df:54:d0:50:
         fa:84:a9:6d:77:f4:46:f9:20:47:08:68:3f:47:c7:eb:b9:15:
         82:da:9d:52:aa:28:4e:de:2b:ab:fe:07:c3:4c:0e:33:56:92:
         20:23:db:b7:b6:67:5b:53:99:ea:02:6a:4a:4c:83:09:cb:32:
         62:a4:19:87:23:ac:7f:2c:63:b8:a0:4a:5b:a5:90:2b:f9:87:
         b0:b8:92:47:4a:71:f0:69:39:d9:99:98:9d:f2:f2:31:7b:d8:
         6d:74:5c:9e:7c:31:cd:f2:b4:1f:12:27:c7:16:87:15:4a:b7:
         b1:0b:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org