Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3134302e302f32342d3234203d3e203232373234.roa
File:                     3139302e31352e3134302e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          YVSi25AQq6rDMs5TrNr0fwJFmyFjMne9iBvB0g6oABw=
Subject key identifier:   F0:1F:54:D1:16:69:BD:20:BE:CC:58:C6:35:4F:9D:E6:10:1C:98:82
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       218B62749A4119AD349E330B2EA42A012EF7E7D8
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3134302e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 05 Mar 2024 17:44:36 +0000
ROA not before:           Tue 05 Mar 2024 17:39:36 +0000
ROA not after:            Tue 04 Mar 2025 17:44:36 +0000
asID:                     22724
IP address blocks:        190.15.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8b:62:74:9a:41:19:ad:34:9e:33:0b:2e:a4:2a:01:2e:f7:e7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Mar  5 17:39:36 2024 GMT
            Not After : Mar  4 17:44:36 2025 GMT
        Subject: CN=F01F54D11669BD20BECC58C6354F9DE6101C9882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:bf:75:0f:e7:90:e0:e2:66:78:7a:0d:b1:
                    d5:34:e2:2f:d6:22:3c:9b:29:b8:59:ed:4d:d2:34:
                    22:ec:31:35:04:3c:5a:92:3a:dd:5c:fa:6e:62:78:
                    7f:51:67:5d:4b:af:5f:2d:a0:ed:29:1c:9e:a4:e6:
                    df:df:df:87:98:52:d4:bf:37:fc:17:81:12:b9:f6:
                    3b:9a:25:da:dc:cd:58:cc:af:f7:80:5f:90:8e:52:
                    7c:92:42:93:60:07:8c:0b:27:a3:a4:e5:f3:ee:af:
                    ab:e2:9b:ec:87:ba:d2:ba:a1:f6:8c:c9:15:d4:27:
                    83:cc:ee:00:e6:97:74:58:11:eb:69:34:ae:96:50:
                    10:1b:e8:6d:8a:95:bb:52:81:6e:20:da:30:c2:3d:
                    33:9e:c5:67:b2:c4:66:3e:cd:b4:8e:4f:e5:d7:fb:
                    6a:84:03:bc:70:50:f8:61:43:36:69:4a:4e:5b:dd:
                    94:34:cf:53:b9:c4:61:66:9a:b4:62:2d:29:5c:37:
                    45:38:f1:ae:1c:d1:c8:76:43:43:32:af:0d:9c:ec:
                    8c:7b:bb:64:b3:8c:0c:16:43:c9:14:70:fc:04:ad:
                    65:29:19:cf:8b:df:15:64:21:54:74:58:2e:4b:bf:
                    3f:cc:3c:7e:da:02:bd:f1:d3:ac:2f:74:2e:8b:43:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1F:54:D1:16:69:BD:20:BE:CC:58:C6:35:4F:9D:E6:10:1C:98:82
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3134302e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:b5:53:12:f0:f7:7b:2f:18:af:7e:c9:ef:bc:98:64:15:
         e9:0c:53:ce:1e:a2:55:54:1c:22:e1:0a:1b:48:0b:82:34:9f:
         38:d6:95:e0:ce:3b:dd:54:8a:8c:4f:6d:7e:ac:21:09:d5:4c:
         8a:a3:c7:2d:11:1a:df:2b:2f:ac:04:ab:e1:0d:0d:03:91:53:
         e8:43:35:0d:7e:c7:3b:da:36:64:17:09:f2:e4:d6:33:bd:49:
         15:f0:39:9b:a2:a7:b7:86:0c:f2:29:b6:96:5a:ac:e3:e6:0f:
         57:16:f0:46:d9:75:2c:ae:f6:10:7c:08:b4:f7:87:dc:62:33:
         c8:59:85:e3:d6:39:a6:a7:4a:5f:b2:61:ef:3b:b1:c3:a5:64:
         87:9f:a0:ab:a8:f6:42:88:8f:a5:7f:24:f5:a3:a9:b5:08:a7:
         54:71:8d:b9:b2:d7:ac:fe:9e:c1:e5:79:ee:c1:98:52:de:8d:
         ba:7c:da:d2:37:db:ef:f2:2f:66:ef:d8:48:ac:9d:11:ab:35:
         4a:10:13:f0:13:9e:ed:2d:ae:20:57:8c:80:af:c3:6f:ce:10:
         c0:af:56:0b:6e:87:62:cd:91:64:60:ac:38:55:22:4a:d8:0b:
         3c:24:55:c5:9d:ad:89:e6:e1:92:8b:a1:7c:ee:fc:5e:21:c6:
         88:4b:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org