Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/3139302e382e3138302e302f32322d3234203d3e20323632313639.roa
File:                     3139302e382e3138302e302f32322d3234203d3e20323632313639.roa (raw, json)
Hash identifier:          cf2d78CObw1mpp+NB5AK7LFQqZWkVtHRasX10XE3Brw=
Subject key identifier:   BA:C6:E1:7B:5B:11:F1:22:AE:2A:8B:B4:FC:58:E4:52:F3:F6:92:87
Certificate issuer:       /CN=5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC
Certificate serial:       2A58B14479514B1FD405A04B680E6FEE5EA1B946
Authority key identifier: 5D:1B:02:48:FA:AE:22:5A:FB:B0:78:5C:F4:3E:CD:54:2F:6E:23:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/3139302e382e3138302e302f32322d3234203d3e20323632313639.roa
Signing time:             Tue 05 Mar 2024 17:40:28 +0000
ROA not before:           Tue 05 Mar 2024 17:35:28 +0000
ROA not after:            Tue 04 Mar 2025 17:40:28 +0000
asID:                     262169
IP address blocks:        190.8.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:58:b1:44:79:51:4b:1f:d4:05:a0:4b:68:0e:6f:ee:5e:a1:b9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC
        Validity
            Not Before: Mar  5 17:35:28 2024 GMT
            Not After : Mar  4 17:40:28 2025 GMT
        Subject: CN=BAC6E17B5B11F122AE2A8BB4FC58E452F3F69287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:4f:cc:06:30:01:f9:a9:ec:7c:2a:3b:37:
                    95:0f:a3:68:00:97:fa:1d:0c:e8:94:a2:6e:b7:20:
                    39:a1:38:8d:78:7d:8d:ec:b0:4d:15:75:a4:4f:6c:
                    8f:d6:7a:24:c1:4e:23:79:09:29:9e:97:ba:d5:92:
                    d4:6a:20:44:54:6b:1a:55:48:0c:5b:b7:d7:50:d2:
                    40:be:2c:6a:fd:11:80:b7:74:7b:6d:3e:89:a0:50:
                    a8:72:a8:96:d0:6a:93:72:83:94:8b:c6:3d:3a:44:
                    c2:29:0c:3e:17:67:41:3b:e0:6d:ee:18:b0:4f:c5:
                    d0:96:25:bd:30:fb:e9:4a:38:12:64:fb:0c:48:08:
                    10:57:89:0e:2b:b1:7f:20:64:56:e4:16:d7:74:e3:
                    a6:38:b3:42:0e:94:65:49:4c:c2:4f:fd:d7:b9:0e:
                    41:de:c0:14:5d:84:a7:93:c6:5b:89:0a:60:9e:46:
                    75:f2:5d:3e:fc:93:10:7c:51:89:6e:80:fd:21:d1:
                    1e:96:13:27:cf:7a:26:78:cb:22:0f:f3:a7:ff:fd:
                    4a:f7:33:12:c4:53:9b:5a:c3:c9:d4:49:f6:4a:fb:
                    57:19:dc:d4:26:23:e3:5c:b0:08:23:ad:41:d2:e5:
                    b8:fc:49:d5:d5:93:90:35:09:ae:d8:43:7d:98:be:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:E1:7B:5B:11:F1:22:AE:2A:8B:B4:FC:58:E4:52:F3:F6:92:87
            X509v3 Authority Key Identifier:
                keyid:5D:1B:02:48:FA:AE:22:5A:FB:B0:78:5C:F4:3E:CD:54:2F:6E:23:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/3139302e382e3138302e302f32322d3234203d3e20323632313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:c3:aa:c4:a8:f4:09:f6:ec:6c:3a:ec:90:c7:14:2b:dc:
         76:56:1b:1a:28:1f:9c:0f:ad:1b:50:f7:6a:23:95:1f:a5:79:
         8a:bf:53:b4:32:a9:17:e3:11:3a:3c:2f:73:02:e3:4d:45:a5:
         ba:ff:ea:e4:14:ae:fa:46:fa:6a:98:57:d8:60:d1:5a:67:74:
         68:f3:d4:e8:79:b7:84:18:f4:11:42:60:b8:e0:1a:4c:e9:d6:
         98:de:84:2e:54:e4:e8:ad:0d:92:f0:f3:49:d1:dc:12:b7:12:
         d7:2b:d4:d4:0f:2b:dc:ce:56:d8:0b:ad:5d:f4:d1:d9:dc:b2:
         4a:0c:45:85:8e:b2:fb:7f:b2:ed:57:e4:6e:c9:7a:3b:82:03:
         d1:02:ca:28:bc:5c:01:fd:e2:09:81:57:73:1d:f7:1f:97:17:
         cf:97:e0:27:fc:fe:59:b7:6f:0f:9b:d0:b0:37:6e:c1:5f:08:
         1d:69:4d:7a:67:0f:17:6e:ff:bc:34:8a:92:b2:82:d4:91:5f:
         a6:f5:9a:16:23:8c:bc:d2:c5:3f:2f:6e:dc:f6:c3:cc:ca:7e:
         2f:2d:31:fd:70:92:28:67:0e:c2:ac:8e:3b:33:fb:e2:e0:8b:
         0d:df:f0:57:8d:da:d3:75:5e:f3:c8:6f:8c:c0:17:8b:e3:2a:
         02:c0:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org