Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203238313138.roa
File:                     3139302e39342e302e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          Jw7g2VLSrueMfEjLQHccOl9n937FjHNul2gpJtZ6ASU=
Subject key identifier:   E6:1C:0A:3B:FE:49:BD:C3:75:A5:81:0A:7B:73:5E:2D:A8:C9:31:8B
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       5CFFB86BB768C7CDEB069813025217985F2FC784
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:14 +0000
ROA not before:           Tue 05 Mar 2024 18:04:14 +0000
ROA not after:            Tue 04 Mar 2025 18:09:14 +0000
asID:                     28118
IP address blocks:        190.94.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ff:b8:6b:b7:68:c7:cd:eb:06:98:13:02:52:17:98:5f:2f:c7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:14 2024 GMT
            Not After : Mar  4 18:09:14 2025 GMT
        Subject: CN=E61C0A3BFE49BDC375A5810A7B735E2DA8C9318B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:49:27:28:40:8a:0b:3a:2b:62:ab:9b:d8:
                    7f:06:2c:48:b2:cb:26:c8:1a:ee:15:58:39:9c:00:
                    66:1c:ca:6c:85:9c:fc:17:4a:13:40:20:35:9f:2d:
                    61:a4:3c:ef:e8:b4:8c:1e:80:e2:a9:aa:4f:51:b7:
                    c3:89:5e:a5:64:35:16:c8:da:68:49:54:80:09:ee:
                    f9:81:ad:ce:46:bd:22:34:45:b0:f2:7a:ff:c3:92:
                    f2:26:9c:4d:f8:de:e9:96:17:a7:af:96:0c:bf:51:
                    57:3a:9f:b7:dc:cc:35:f4:05:31:e7:17:39:82:fc:
                    3e:03:d5:9a:a9:35:3b:3c:93:ac:35:4c:21:8b:7d:
                    23:a3:9f:7c:37:3d:df:c9:47:4d:20:9f:0d:f4:f5:
                    7a:3c:06:f0:da:e0:d9:8a:45:a8:b8:db:d3:0f:cd:
                    4f:04:f2:87:7e:52:13:29:76:5b:b9:31:6c:25:76:
                    7f:e7:9b:94:ba:48:8c:ac:12:2c:2f:b7:40:bc:62:
                    cc:62:6b:37:cc:06:f6:72:e4:5e:b0:9a:ae:9d:a8:
                    c7:0a:a4:53:9e:60:00:f7:a0:c6:f0:eb:1c:16:52:
                    19:af:5d:82:73:fc:fb:38:d5:93:d7:81:14:74:de:
                    4a:ff:b5:af:73:a1:79:62:dc:ba:00:72:15:2b:51:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1C:0A:3B:FE:49:BD:C3:75:A5:81:0A:7B:73:5E:2D:A8:C9:31:8B
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e302e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:85:fe:56:69:ad:74:d6:77:44:dc:80:ce:9e:a4:34:f4:48:
         be:3b:39:25:e4:1a:31:19:7f:0b:13:24:ad:e3:9d:6a:e9:a5:
         b0:33:50:81:3f:7d:39:18:8f:ec:62:7e:b5:90:6a:23:62:73:
         48:43:64:7c:4c:8e:bb:17:80:00:eb:88:3b:b3:0b:e5:2f:fb:
         86:e3:5d:39:3b:0c:65:d4:38:63:e7:f0:95:f7:39:36:a3:04:
         ac:d0:ed:8a:bb:df:91:2f:fe:e9:64:d0:10:cc:f0:06:ee:8f:
         50:02:ee:be:22:a9:d8:4d:dd:66:09:9e:ad:c0:d9:cb:32:41:
         7f:19:92:28:0f:1f:5f:5c:10:b3:02:7f:d4:84:3d:34:de:34:
         23:9b:98:3f:29:9b:76:4e:9e:62:4a:e3:f8:8e:7c:63:42:aa:
         67:0b:e3:9e:2d:c4:e8:fe:c6:a3:75:05:e7:b9:50:9b:95:15:
         b1:7d:84:21:89:a1:b3:c3:3c:c0:6e:f0:a8:1b:a3:0b:fd:2b:
         1e:23:23:6a:25:5b:b2:45:31:43:96:d1:bf:3e:04:eb:6e:60:
         ac:c4:c5:8a:b8:9c:be:0b:dc:cf:9a:9d:40:77:d1:46:30:76:
         69:9c:09:76:15:12:69:9d:78:c4:f9:e6:d7:4c:f5:1f:7d:3f:
         90:bd:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:29:18 2024 by rpki-client on console-fra.rpki-client.org