Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
File:                     3139302e39342e33322e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          DOFKS+XK4HcyKd1t2xKh5wSlC4foWrbWb7gJNIrYyG0=
Subject key identifier:   C1:E4:6F:C6:CB:77:97:8D:C2:98:24:F8:8C:D1:8D:E0:FA:6B:F1:A7
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       20C43FC157572BEB4ED07CBE3E60C3151F20DB94
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:16 +0000
ROA not before:           Tue 05 Mar 2024 18:04:16 +0000
ROA not after:            Tue 04 Mar 2025 18:09:16 +0000
asID:                     28118
IP address blocks:        190.94.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c4:3f:c1:57:57:2b:eb:4e:d0:7c:be:3e:60:c3:15:1f:20:db:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:16 2024 GMT
            Not After : Mar  4 18:09:16 2025 GMT
        Subject: CN=C1E46FC6CB77978DC29824F88CD18DE0FA6BF1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fe:b6:ad:56:93:ba:45:55:ec:be:06:06:14:
                    4a:cf:97:89:6b:ce:ad:8e:65:a1:a5:6d:dd:4d:e4:
                    21:e6:45:34:e7:df:8e:6a:c1:29:95:15:8b:2c:4e:
                    ef:3c:96:05:0d:7f:35:bb:4c:7f:24:34:ca:5c:ca:
                    fb:b7:a6:f4:56:cc:61:47:9f:af:98:10:e0:6e:a0:
                    d3:5c:63:25:e5:3b:95:48:d5:73:3d:c3:55:43:5d:
                    74:2a:79:90:dd:72:a0:ff:eb:da:74:18:d6:62:cd:
                    fd:08:21:b6:dc:e5:cd:0a:53:d4:72:f6:20:a0:ea:
                    ba:36:65:14:d4:0c:2d:b6:5a:2b:0c:db:ab:25:7f:
                    64:98:a3:a8:db:a0:de:b5:c4:d4:93:be:fd:f7:4f:
                    fb:d8:8b:7f:53:24:e5:3f:16:f7:90:eb:db:1d:6a:
                    54:d8:ad:7a:6c:9c:59:79:f8:86:7a:93:5a:6a:49:
                    48:5e:75:ba:b8:5b:70:c0:57:af:3b:af:75:43:64:
                    a0:cf:21:6d:da:67:d1:b5:27:de:9b:8d:8d:1c:19:
                    64:0b:55:0d:be:85:02:fe:4b:d1:9f:55:09:e4:d0:
                    64:a0:3f:fd:15:f7:f0:e7:cb:38:b5:81:df:d2:d0:
                    0c:87:34:1f:cc:36:23:82:db:3f:bd:74:bc:d3:d2:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:6F:C6:CB:77:97:8D:C2:98:24:F8:8C:D1:8D:E0:FA:6B:F1:A7
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b9:1a:2e:42:3f:34:a7:8f:c3:d5:82:5b:ef:3d:a2:9f:da:da:
         ee:10:61:cb:7b:c0:eb:f7:36:f6:b8:1e:35:e3:1c:ff:2f:30:
         58:1a:1f:66:b2:55:26:ef:a1:c8:1c:98:be:9e:88:e3:1d:e4:
         eb:da:88:a3:c3:06:68:13:a2:58:5b:7a:98:9c:4f:d7:be:13:
         bc:6b:ee:dc:2d:2c:2a:cb:90:11:f9:e2:43:36:6b:65:1e:5f:
         44:77:24:3c:4a:52:be:d7:9c:c8:c8:dd:18:6e:60:00:2d:78:
         9b:87:f5:83:3d:a4:5d:5d:ae:ec:ec:fe:27:60:72:56:ba:2c:
         74:b2:0f:54:77:f1:74:5b:06:65:d9:98:50:e7:24:ee:2b:49:
         0c:73:eb:ea:88:6f:c3:b0:db:15:25:67:c8:de:96:39:fd:62:
         98:55:6c:7d:8c:a1:80:04:eb:10:52:20:ac:3d:b3:0d:0f:6a:
         0b:b7:ee:e7:e3:3b:06:81:fd:32:6e:0e:57:f0:85:91:f6:65:
         a8:ce:c4:b6:37:74:29:23:95:81:76:1b:a8:26:9b:f6:1a:4c:
         aa:b8:f0:c5:26:e3:b8:11:4a:30:45:f8:c6:f9:f3:db:6e:53:
         bb:d0:e5:57:e2:30:6e:87:d8:ca:b2:ee:37:e3:50:ca:07:e6:
         31:50:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:18 2024 by rpki-client on console-fra.rpki-client.org