Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa
File:                     3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa (raw, json)
Hash identifier:          XyBcSZ0i5yINAfyPnmnvreZexIYeveJB5bJEoX5N3n0=
Subject key identifier:   90:AD:4A:3C:F0:7C:8C:E8:2C:0A:AB:BF:70:BC:A3:A3:6C:84:1B:18
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       3E84F9E01FD3F1BC4564BE9579A0255A571AF29E
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa
Signing time:             Tue 05 Mar 2024 18:19:58 +0000
ROA not before:           Tue 05 Mar 2024 18:14:58 +0000
ROA not after:            Tue 04 Mar 2025 18:19:58 +0000
asID:                     3597
IP address blocks:        199.248.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:84:f9:e0:1f:d3:f1:bc:45:64:be:95:79:a0:25:5a:57:1a:f2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Mar  5 18:14:58 2024 GMT
            Not After : Mar  4 18:19:58 2025 GMT
        Subject: CN=90AD4A3CF07C8CE82C0AABBF70BCA3A36C841B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:40:10:1c:a0:59:52:96:66:8b:ae:23:19:
                    f6:cf:5e:80:32:8e:55:19:cf:57:58:ab:b2:fa:8f:
                    af:63:fb:70:09:66:b0:36:9a:4d:b6:fe:dc:b6:42:
                    ec:f5:26:6b:ce:42:e7:e3:f1:56:6b:69:42:00:38:
                    91:ae:58:78:40:b6:39:34:80:1a:31:a1:38:3f:c6:
                    f2:f9:09:24:c1:16:1c:d9:74:4c:cb:32:2e:b2:ab:
                    47:b8:e6:ab:ff:28:c6:83:94:a3:e5:05:0f:eb:87:
                    2c:73:b9:e4:15:56:b9:9c:1c:78:b7:1b:06:09:ee:
                    3f:b3:72:7e:94:dc:1b:7a:d8:7c:27:27:4a:2f:04:
                    95:97:41:cc:20:2e:d4:17:94:56:40:d5:5e:f3:d9:
                    a0:ad:e8:2a:6f:10:86:c2:f1:54:96:0b:7a:c6:4d:
                    9c:91:35:be:63:c8:67:d8:ad:9c:be:9a:5e:9c:9e:
                    6d:9b:fe:8f:fe:fe:3c:b3:be:39:ee:36:08:fa:bf:
                    41:33:d0:55:1c:70:ee:62:e9:1b:86:a3:a4:2b:e8:
                    7e:a2:17:5f:8f:55:6c:cd:14:1f:e0:e0:5e:fd:41:
                    58:7d:71:70:65:0d:cf:65:36:5d:35:08:c5:8f:88:
                    59:e1:78:2f:e3:71:00:7f:df:bb:3d:8e:c9:a9:4f:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AD:4A:3C:F0:7C:8C:E8:2C:0A:AB:BF:70:BC:A3:A3:6C:84:1B:18
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:73:b3:a1:cc:df:cc:53:e6:51:a0:6c:bc:f2:99:09:06:
         f4:c5:95:d8:0f:36:67:f3:dc:85:ff:86:9e:eb:ef:40:0f:c7:
         72:bc:19:e1:aa:d5:f6:0d:90:eb:bd:c5:72:94:cd:3d:3f:99:
         98:55:3c:60:21:46:8c:9a:b7:a1:87:f4:05:d6:a9:65:2d:cd:
         33:bc:20:cc:26:09:8a:2b:c2:f8:dd:cb:df:96:77:e7:f8:4f:
         40:fd:fc:48:05:80:53:23:5f:09:a9:31:e8:8a:4f:db:46:0e:
         d9:43:20:b9:47:97:0b:e6:b6:8a:08:76:47:46:ae:42:92:69:
         b4:14:5f:06:13:d7:88:9b:a9:84:c8:97:6a:61:92:d0:6b:ed:
         fb:6e:23:ca:f9:11:b9:85:19:5f:a2:0c:d8:8a:b9:88:e8:84:
         c3:59:0a:6b:ac:df:15:f7:cf:b0:ac:45:13:12:83:72:d9:40:
         9a:e5:79:c8:ea:8e:88:7c:24:b8:34:e7:91:c7:b4:a3:71:20:
         66:7f:64:ad:8d:8d:6b:2a:eb:ae:ac:5f:ba:91:0b:ae:d7:4d:
         16:bc:40:ea:7c:d9:b2:ce:3f:6e:02:e2:78:b1:b0:46:3f:ca:
         0f:d0:b0:ae:ab:ca:d2:68:48:53:6e:13:00:9f:2f:ff:6e:3f:
         45:7b:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:06:59 2024 by rpki-client on console-ams.rpki-client.org