Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3139302e33322e302e302f31342d3234203d3e203131353536.roa
File:                     3139302e33322e302e302f31342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          h3q8MtuJNswDXMuP0yDq4CVWPMwTk3VkExhXaDWDweQ=
Subject key identifier:   3E:20:3B:5E:F6:08:07:34:E5:BB:AE:59:00:02:82:8E:62:13:C1:DB
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       5052627F32C18F345CCB5994B0E107966671E5B6
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3139302e33322e302e302f31342d3234203d3e203131353536.roa
Signing time:             Tue 05 Mar 2024 17:42:13 +0000
ROA not before:           Tue 05 Mar 2024 17:37:13 +0000
ROA not after:            Tue 04 Mar 2025 17:42:13 +0000
asID:                     11556
IP address blocks:        190.32.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:52:62:7f:32:c1:8f:34:5c:cb:59:94:b0:e1:07:96:66:71:e5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Mar  5 17:37:13 2024 GMT
            Not After : Mar  4 17:42:13 2025 GMT
        Subject: CN=3E203B5EF6080734E5BBAE590002828E6213C1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:0a:fd:0b:37:95:46:15:ae:e7:a7:6b:9d:
                    22:df:fa:6e:91:4c:1b:a9:69:e0:c1:74:6a:05:98:
                    1b:16:4b:7c:c9:b2:ec:cb:bc:ea:cf:4e:42:7b:06:
                    87:fd:ca:d8:52:4e:79:13:07:bb:b7:c2:6b:9a:5b:
                    56:e0:58:80:ab:f7:32:5b:70:0f:d3:e1:74:43:dd:
                    8f:ef:2b:f4:85:51:dd:5e:5b:85:58:e5:d3:47:76:
                    59:d9:7f:8c:c9:e3:99:7a:aa:db:11:f9:bd:f3:4f:
                    ad:8b:d9:c6:b2:3a:c2:d3:29:44:73:15:2c:13:5f:
                    04:fc:71:3d:9f:4d:9e:a0:69:d1:78:d1:e4:09:81:
                    d9:14:ec:15:38:61:2d:83:d5:1a:41:91:52:75:25:
                    02:6f:bb:d9:92:85:b1:1b:b7:40:f4:46:f2:d8:2f:
                    46:cc:6c:16:fb:d0:95:3c:22:cf:ec:21:db:03:68:
                    a7:44:6a:21:81:51:5a:fa:22:64:b9:57:75:84:eb:
                    20:bc:8c:8f:72:fd:b9:6b:b3:a4:37:22:cc:d3:34:
                    08:49:71:2d:c4:e4:8b:bc:a5:e7:b6:13:b5:21:6a:
                    b0:7c:1e:49:77:dc:6e:87:6b:6e:96:8e:99:13:57:
                    f2:9d:05:cd:0c:e3:dc:f5:0a:44:8d:e5:77:16:ad:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:20:3B:5E:F6:08:07:34:E5:BB:AE:59:00:02:82:8E:62:13:C1:DB
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3139302e33322e302e302f31342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:5f:22:31:8a:0e:a4:af:3e:01:d3:25:ae:38:8c:04:d0:
         15:48:a0:0c:91:98:e1:55:fa:e2:a0:79:c1:10:95:23:f1:89:
         ab:c1:22:99:a0:4c:d7:95:f6:c2:81:8d:60:d9:ca:99:7f:40:
         1b:1d:a1:ee:7f:67:41:e8:5c:7d:7e:2b:19:b1:78:2a:49:27:
         6d:18:a3:6d:c0:5c:c2:65:48:44:12:c0:8d:e7:4b:c0:f0:0a:
         47:20:2b:c4:a7:08:22:57:8f:75:8a:a2:a1:c3:d8:d8:d2:52:
         f8:a8:24:d6:b6:75:23:58:f6:78:df:a3:8d:eb:14:9d:54:86:
         70:fe:dc:41:e3:dc:c2:fe:8c:06:d2:f6:f5:68:42:44:c0:a2:
         45:fe:c0:31:4b:e8:49:90:30:94:4e:42:d2:81:a9:2f:5e:56:
         fc:69:ff:25:a3:b2:09:d9:cf:1d:d6:90:6d:f7:c6:cf:46:64:
         6c:7c:11:fe:c3:c3:34:9f:3c:cb:04:b7:66:30:71:06:7c:19:
         cc:be:46:b5:83:1f:92:72:7e:94:d3:81:76:f3:7f:e7:30:88:
         db:e6:e0:be:18:ce:8d:a1:35:cc:5c:27:ae:4d:2b:b3:98:ab:
         03:57:0c:d8:60:31:9f:8c:d4:41:75:ad:ca:07:47:60:0a:c2:
         87:f8:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 04:16:41 2024 by rpki-client on console-ams.rpki-client.org