Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e3132342e36342e302f31392d3234203d3e203238313138.roa
File:                     3139302e3132342e36342e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          HncxvHqyzJR7pOXHwiWBfwW2mocyc07Dob22Sx3d+nY=
Subject key identifier:   AD:56:FA:A6:55:84:85:60:CA:5B:8F:D8:49:6B:69:F0:A6:87:FC:D2
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       0FABF596AD81403E7E177170AAECE32D5C60620E
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e3132342e36342e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:16 +0000
ROA not before:           Tue 05 Mar 2024 18:04:16 +0000
ROA not after:            Tue 04 Mar 2025 18:09:16 +0000
asID:                     28118
IP address blocks:        190.124.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ab:f5:96:ad:81:40:3e:7e:17:71:70:aa:ec:e3:2d:5c:60:62:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:16 2024 GMT
            Not After : Mar  4 18:09:16 2025 GMT
        Subject: CN=AD56FAA655848560CA5B8FD8496B69F0A687FCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:f0:d6:a4:27:12:aa:ba:ce:b0:6f:bd:cc:
                    9d:54:ed:ac:ca:db:eb:ec:d0:d9:b0:ef:bb:0f:c2:
                    fc:d6:93:c1:d6:53:b4:7a:0a:12:d4:aa:2c:4e:e1:
                    f6:12:69:e5:ac:75:6a:c7:06:2e:dc:87:5d:3a:c3:
                    a6:06:7b:e6:6d:cb:d6:57:42:f5:35:34:ac:7e:67:
                    29:ac:bb:5a:25:22:d2:b9:2d:62:cd:ee:50:c1:f9:
                    ba:04:53:f6:75:64:ef:d5:36:f0:ce:3d:32:92:7b:
                    bc:2e:34:67:d9:46:83:9e:cb:4d:76:2a:e2:ea:32:
                    2f:ac:7a:70:71:d9:45:3e:07:06:b1:bb:19:45:c8:
                    2d:42:18:dc:22:eb:8d:35:6c:0b:54:73:ac:ca:98:
                    8a:a1:e2:1a:d7:73:dd:8c:70:26:96:88:79:92:d8:
                    9d:62:23:24:07:a1:7e:64:a4:9f:f2:cd:6c:e4:49:
                    09:41:72:f8:d3:db:c0:48:d7:d1:fc:43:ac:b1:52:
                    8c:e4:5b:60:2c:f5:db:78:51:d8:2b:f4:b5:ed:4d:
                    96:97:38:1c:22:70:f0:24:fa:b3:00:16:d4:c4:8a:
                    1f:61:45:f6:d1:ab:f6:31:4a:4e:4d:c3:25:43:ae:
                    36:87:7d:2b:89:33:3d:55:21:2a:2f:a9:da:ba:cc:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:56:FA:A6:55:84:85:60:CA:5B:8F:D8:49:6B:69:F0:A6:87:FC:D2
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e3132342e36342e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:47:f5:b1:1c:b9:89:73:e3:44:ed:b8:93:0e:71:4e:5a:d9:
         9d:ed:81:3f:c6:bb:ce:03:48:47:61:ad:c5:cf:47:ac:27:29:
         d1:02:b2:76:2e:5f:72:f2:f3:6c:5a:bc:39:a0:cd:97:0c:30:
         bc:dd:fe:e9:bd:bd:21:9e:a7:e5:73:e3:68:44:6e:41:fc:5b:
         ed:49:9c:a3:b6:92:ba:c8:77:62:7f:e8:c6:f7:12:ad:8b:8b:
         cc:dc:cf:91:1b:be:9d:9c:39:7d:8f:bd:00:cf:09:98:e7:39:
         6b:23:95:b9:ab:dd:20:5f:61:d4:63:b3:2a:82:51:26:5a:68:
         fe:3c:69:93:04:be:aa:cc:f3:ad:ba:40:dd:40:98:ee:74:58:
         5e:10:ad:23:f4:ab:aa:b5:84:19:6e:38:53:96:a8:22:0f:5b:
         1c:39:38:a8:cf:b5:a3:5b:02:6d:e5:95:de:fa:45:df:b8:04:
         da:9c:23:aa:08:cb:1a:94:9e:a1:94:88:cd:31:5d:61:b8:73:
         67:ce:88:b0:fd:fb:aa:be:e3:bb:57:b2:6d:1b:ed:38:9e:f2:
         13:ee:3f:df:ce:f6:bf:1b:90:36:f0:8b:f8:18:70:72:76:b2:
         21:c1:ad:3a:16:5e:fd:04:68:6f:e1:2a:81:f1:1f:4c:6e:36:
         06:2b:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:29:18 2024 by rpki-client on console-fra.rpki-client.org