Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203132303636.roa
File:                     3139302e39342e302e302f31392d3234203d3e203132303636.roa (raw, json)
Hash identifier:          ag/ZdYb2R8JwfbRauOPt5WECrBzscKN2jpFBCRHlewA=
Subject key identifier:   1A:6A:BC:D3:D3:AC:6D:98:E3:3E:7A:9D:9C:41:3C:3C:57:74:38:32
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       4A38DEF0EE2FF83451CA2087DDDA70C8CFCC90F0
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203132303636.roa
Signing time:             Tue 05 Mar 2024 18:09:13 +0000
ROA not before:           Tue 05 Mar 2024 18:04:13 +0000
ROA not after:            Tue 04 Mar 2025 18:09:13 +0000
asID:                     12066
IP address blocks:        190.94.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:38:de:f0:ee:2f:f8:34:51:ca:20:87:dd:da:70:c8:cf:cc:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:13 2024 GMT
            Not After : Mar  4 18:09:13 2025 GMT
        Subject: CN=1A6ABCD3D3AC6D98E33E7A9D9C413C3C57743832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:64:f0:eb:eb:be:cf:04:b7:e1:9b:2b:d7:
                    a3:2c:31:7c:bb:bb:19:b6:96:3b:6c:c8:3e:08:40:
                    9f:9a:f1:94:54:3f:0e:c2:6f:b2:26:6f:9a:7a:b8:
                    c5:99:9a:f9:d9:c8:41:44:bb:8f:32:75:30:8d:29:
                    98:36:91:2e:81:23:2a:b7:3e:0a:c0:5e:8a:21:ed:
                    8e:86:d3:4c:b1:de:bd:39:eb:c0:6e:89:bb:7e:76:
                    63:25:ef:a7:84:e6:4d:8f:48:0b:b7:60:42:6b:f6:
                    3a:cf:aa:32:47:c2:97:a2:74:72:6d:b2:46:8b:c1:
                    ba:f4:7f:32:f7:a1:59:23:42:6a:c1:cf:20:df:9f:
                    3b:0f:4b:c4:95:e5:df:91:e3:82:75:ea:d8:4e:9b:
                    5e:09:01:97:f7:c0:69:db:55:d0:b1:eb:c6:54:a3:
                    d1:da:f5:d8:7d:3b:d3:90:a9:8d:c3:54:1b:27:a5:
                    24:cd:a1:90:c7:ff:7c:89:e0:80:ff:09:b0:fe:a5:
                    ce:b8:15:ca:6f:9e:f5:96:d3:6d:72:c8:d3:38:66:
                    de:a0:0f:19:e1:9b:c5:e8:75:06:50:45:5b:53:d7:
                    57:df:75:73:aa:f3:cb:3c:79:1e:8f:ae:78:91:58:
                    cb:ad:b8:60:f5:a9:8b:bd:f2:76:ea:10:b6:74:e0:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:BC:D3:D3:AC:6D:98:E3:3E:7A:9D:9C:41:3C:3C:57:74:38:32
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:ae:55:23:34:e1:c6:ab:7a:5a:a3:ee:1b:1b:36:f0:9b:
         49:72:6f:e7:ef:aa:fb:93:ce:7d:04:f0:5c:3c:96:39:44:fe:
         54:42:e8:35:0d:68:1e:62:2b:a3:6d:68:01:e4:05:56:80:b4:
         f1:c9:9c:24:23:82:01:96:2b:4e:d0:00:40:75:35:cd:6e:b9:
         59:4b:7c:bc:44:04:c8:69:73:16:2e:bd:7d:7f:ef:14:d0:dc:
         71:ce:58:86:ae:cd:2b:17:d6:ae:94:bd:bf:8f:6a:0b:2d:df:
         7b:c9:1c:f0:b1:f8:47:81:5a:fb:f6:9a:b4:f2:b7:fe:a9:ab:
         c3:9a:eb:62:ff:56:aa:3d:03:b7:06:97:7e:ec:39:11:d1:4f:
         2b:eb:76:13:bc:e3:2d:dd:3d:4d:37:a7:b7:8b:34:f6:77:51:
         23:73:0e:91:93:6a:98:0d:b5:ca:e8:ca:2f:00:b5:16:58:0a:
         93:2f:aa:7c:d5:10:d5:df:47:63:c2:56:f0:00:92:2c:a1:13:
         ba:03:09:a7:b1:e7:ee:c3:74:b0:1c:93:a7:95:6b:f7:69:d4:
         08:a0:b6:54:94:5b:a8:3a:c2:0f:90:4c:69:20:ac:33:a6:f0:
         fa:07:f6:3c:61:ee:00:9f:fb:48:21:b5:e6:2e:b6:21:03:27:
         d8:d7:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org