Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203231353735.roa
File:                     3139302e3138372e302e302f31362d3234203d3e203231353735.roa (raw, json)
Hash identifier:          KE6pvr9g7HVg3TXDswDaNEAXGzkPnIjQtoUW4L0AAdg=
Subject key identifier:   40:E5:08:19:15:C5:AA:C5:89:2A:C2:D2:24:99:63:69:B3:13:FE:A0
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       48C281B2AE42C1517BF45FFA6A734A85472821E4
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 18:20:10 +0000
ROA not before:           Tue 05 Mar 2024 18:15:10 +0000
ROA not after:            Tue 04 Mar 2025 18:20:10 +0000
asID:                     21575
IP address blocks:        190.187.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c2:81:b2:ae:42:c1:51:7b:f4:5f:fa:6a:73:4a:85:47:28:21:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Mar  5 18:15:10 2024 GMT
            Not After : Mar  4 18:20:10 2025 GMT
        Subject: CN=40E5081915C5AAC5892AC2D224996369B313FEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:6e:c9:89:3a:aa:b8:9b:1e:c6:4a:da:45:
                    62:a0:71:e2:e3:b0:1a:64:85:d5:8d:50:e8:a6:70:
                    57:60:d9:82:da:9f:d2:70:ab:a0:b3:a4:36:37:7d:
                    83:8b:6e:f6:50:e2:c2:d1:29:a1:c3:82:6f:06:a3:
                    5a:c8:5d:07:43:52:9d:d6:2d:0f:d3:6f:99:0c:df:
                    4d:8c:cb:1c:33:db:97:f9:2d:69:d2:1c:33:ff:ee:
                    77:2a:94:67:fc:b1:b9:04:7f:cc:5b:cd:c4:4d:60:
                    ab:59:75:3b:24:1a:4d:bb:4f:b9:1f:64:cc:72:f5:
                    f7:aa:4a:f1:88:24:1b:20:aa:ab:06:78:56:d3:4d:
                    4b:1b:cf:da:c5:aa:d7:b7:cf:b7:7b:12:7e:45:0f:
                    dc:16:2c:68:74:81:09:1c:79:7e:a9:6f:8a:90:c0:
                    ce:47:1b:4e:92:76:44:97:db:ee:12:2b:45:4f:66:
                    ad:63:67:18:e0:d0:bc:bc:ff:83:26:b3:3d:3c:45:
                    ea:0e:48:b6:14:a2:9f:2b:07:9d:79:d8:d3:ce:a8:
                    ae:73:b4:7c:ae:21:ef:d8:73:7b:52:37:ef:57:0c:
                    cd:3a:fa:91:f6:d4:dd:9b:da:75:cc:b9:08:73:2c:
                    10:08:b8:aa:72:ce:a3:cf:6e:6f:42:f7:b3:a1:8b:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E5:08:19:15:C5:AA:C5:89:2A:C2:D2:24:99:63:69:B3:13:FE:A0
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:d1:09:99:9f:cd:24:91:94:b9:5a:38:5c:e4:5a:1f:9d:
         69:7e:22:5a:4c:40:3d:a0:20:7a:3e:a3:3d:24:04:89:ce:39:
         fe:8c:a8:8f:10:bc:f6:58:bc:c1:ca:72:74:f8:7d:5e:2f:7e:
         8f:dc:49:24:e7:2b:90:79:ef:95:20:cb:c8:e6:4f:bc:06:bd:
         c6:0c:7e:7b:65:fa:83:56:e5:16:d0:bd:0e:9f:82:53:00:7c:
         b2:d5:7e:72:d3:74:62:08:03:46:ea:f5:e4:ea:ef:fc:90:3a:
         67:6c:76:5e:d5:b0:48:f8:e1:5a:87:46:7c:3a:0c:16:45:ed:
         24:0b:f0:de:f4:da:3a:42:06:cb:6e:29:84:c9:1d:cb:b4:e8:
         b0:8f:f5:58:c5:72:8e:ef:ff:a8:da:fe:5f:33:a4:42:13:d2:
         59:eb:90:99:73:b1:df:31:18:bc:f3:f1:58:13:10:a9:0c:a1:
         97:e1:b2:28:8d:c3:55:c4:73:55:67:58:f1:11:f5:76:41:24:
         39:1a:c5:a7:ce:6a:1c:dd:2f:07:95:23:d3:b1:f6:f1:fa:d5:
         62:0d:c3:30:3b:e7:88:cc:32:35:39:de:2c:37:41:d1:9d:c7:
         83:9d:20:b6:99:be:0b:0c:38:7b:ed:f1:54:fb:cb:22:46:87:
         3b:ab:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org