Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3139302e35322e34302e302f32312d3234203d3e203238303933.roa
File:                     3139302e35322e34302e302f32312d3234203d3e203238303933.roa (raw, json)
Hash identifier:          y/SewN3J9URx9VVMp7WXaU03+sLj1jbHDkURv8VY5h0=
Subject key identifier:   7A:E0:B1:9C:91:4C:5B:92:E0:55:34:F2:89:C9:77:22:B5:E0:0C:51
Certificate issuer:       /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial:       778312720CF9D87B383002FB6FC8BC36FAAFE46B
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3139302e35322e34302e302f32312d3234203d3e203238303933.roa
Signing time:             Tue 05 Mar 2024 18:01:55 +0000
ROA not before:           Tue 05 Mar 2024 17:56:55 +0000
ROA not after:            Tue 04 Mar 2025 18:01:55 +0000
asID:                     28093
IP address blocks:        190.52.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:83:12:72:0c:f9:d8:7b:38:30:02:fb:6f:c8:bc:36:fa:af:e4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
        Validity
            Not Before: Mar  5 17:56:55 2024 GMT
            Not After : Mar  4 18:01:55 2025 GMT
        Subject: CN=7AE0B19C914C5B92E05534F289C97722B5E00C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:42:83:36:c7:23:4e:91:ac:ac:ec:dc:54:
                    84:12:8f:0e:93:02:2d:7e:49:6b:7c:d5:a4:0c:f1:
                    e4:cb:0c:d2:6e:43:69:1c:b3:88:33:c4:2c:06:45:
                    94:c9:c6:8d:93:f3:bb:32:63:da:67:57:c2:05:87:
                    08:0c:1b:e3:1f:91:38:6d:23:75:8a:c1:a9:08:ae:
                    d8:20:21:4f:b4:49:85:fa:50:52:b4:df:36:1a:12:
                    1d:84:19:e7:53:2d:d5:53:7f:90:0f:dc:fb:e4:59:
                    a5:de:1b:bc:c4:7a:e5:af:da:a0:ce:2e:f8:3a:9e:
                    36:15:31:96:8f:c2:15:39:6f:fb:a0:6c:84:44:a8:
                    75:57:d0:38:1e:13:fb:81:a2:eb:b9:5b:26:18:b4:
                    b8:f7:c2:66:0b:77:3b:a7:54:31:58:59:eb:9f:7f:
                    2c:33:35:c6:35:20:a9:bf:75:d0:9a:cc:ae:28:01:
                    0e:1a:10:82:55:80:e8:d5:b2:9d:bb:ba:cd:b8:6a:
                    9e:a4:97:dc:b3:26:f5:a9:af:24:77:a3:17:6c:1e:
                    50:1a:ab:97:32:24:8c:60:81:36:6e:02:a4:89:78:
                    c3:e6:01:8a:68:1a:a7:04:91:74:52:71:7d:cb:77:
                    0c:2a:68:9b:15:75:be:45:d7:cd:30:f8:ce:c3:ed:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:B1:9C:91:4C:5B:92:E0:55:34:F2:89:C9:77:22:B5:E0:0C:51
            X509v3 Authority Key Identifier:
                keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3139302e35322e34302e302f32312d3234203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:91:f9:2c:ed:ef:ed:7c:3b:69:54:ff:1d:92:88:10:30:
         d1:59:d9:2e:cf:40:63:46:a9:ff:ea:32:86:79:0a:af:34:a3:
         8d:af:fc:e2:8a:c6:41:03:2a:67:d8:49:e9:23:1d:2f:d7:66:
         a6:dc:17:c6:e2:1d:c2:0a:ea:20:a5:b9:34:6b:0b:20:44:bb:
         c4:30:e0:74:54:e1:92:f3:a9:0c:4b:8f:51:2f:db:cd:cb:35:
         9b:6f:a4:1a:01:54:20:ff:fd:4d:62:f9:e6:35:c6:96:06:4c:
         c3:86:b5:2a:45:23:55:11:de:3c:f4:9f:8e:76:c4:fc:33:f1:
         9b:26:29:21:da:43:81:63:2a:78:ff:d3:b4:e2:73:e2:9c:84:
         64:26:1a:80:e8:dc:1b:b2:67:cd:60:b4:2d:7c:ed:3e:9a:7c:
         3c:56:14:ab:10:59:a2:06:33:bb:a9:9a:87:c3:f7:6f:8a:f9:
         ee:47:82:50:fd:1e:35:b2:5a:7d:7c:ae:db:9d:83:29:17:33:
         01:24:0f:60:a1:2b:20:57:5b:f8:09:13:1b:b9:50:20:78:f3:
         bd:f1:42:d3:3b:4b:91:90:96:40:8a:62:d9:e8:ff:7e:be:52:
         83:fe:a2:1b:14:6d:fc:28:9f:ba:d1:59:fc:2d:25:f5:5b:5f:
         24:c7:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:35:26 2024 by rpki-client on console-ams.rpki-client.org