Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e302e302f31362d3234203d3e203138373437.roa
File:                     3139302e36302e302e302f31362d3234203d3e203138373437.roa (raw, json)
Hash identifier:          gay4km5+g83VZi8WbQqIDju650PTGqJaJHb17ZCpDBg=
Subject key identifier:   2F:A4:CF:FF:73:AA:C8:E2:F9:9A:46:78:CC:30:A6:9D:45:E7:16:57
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       484A92E5F0303B415F823334B945863A2BDEC09B
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e302e302f31362d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:20 +0000
ROA not before:           Tue 05 Mar 2024 17:54:20 +0000
ROA not after:            Tue 04 Mar 2025 17:59:20 +0000
asID:                     18747
IP address blocks:        190.60.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4a:92:e5:f0:30:3b:41:5f:82:33:34:b9:45:86:3a:2b:de:c0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:20 2024 GMT
            Not After : Mar  4 17:59:20 2025 GMT
        Subject: CN=2FA4CFFF73AAC8E2F99A4678CC30A69D45E71657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:2f:b6:65:da:a4:01:58:5e:9f:34:b5:d1:
                    8b:77:12:ca:47:c3:ff:48:76:0e:41:b1:ab:0c:5f:
                    11:8b:80:eb:73:c6:bb:a2:bf:41:06:64:c2:ef:13:
                    9a:80:5a:f5:2a:93:88:d3:45:eb:24:ee:57:0a:0e:
                    20:9a:6b:89:f8:98:9e:36:d3:2e:c9:c9:e2:7c:33:
                    0e:87:4b:0f:7c:5c:32:a5:97:4b:da:7c:3d:c3:35:
                    8c:b6:76:f5:8a:4f:c2:76:29:71:62:55:41:fd:53:
                    f9:64:6e:b9:30:a9:d9:b9:e9:29:09:d7:56:22:0e:
                    88:d2:79:78:cd:cf:53:1c:30:54:44:5b:ad:55:04:
                    53:d8:5d:d1:b0:20:41:03:3c:20:ae:03:5f:a4:43:
                    8d:50:45:69:30:d7:91:0f:60:e5:bb:02:48:cd:a4:
                    fe:bb:63:e5:9c:75:a0:16:52:14:52:d1:f4:cd:35:
                    f3:bb:d0:7a:73:23:ce:ee:8a:24:fd:d4:67:3a:d1:
                    ca:b7:db:55:b1:da:17:c9:a3:ef:1d:df:58:00:27:
                    81:b3:ee:a8:8a:3a:47:67:1c:91:15:11:4c:0b:51:
                    8e:4d:36:9d:2d:8d:e8:c4:3a:5c:52:12:46:a1:98:
                    76:22:24:cc:8b:f5:fa:05:c3:a8:95:3c:61:f3:48:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A4:CF:FF:73:AA:C8:E2:F9:9A:46:78:CC:30:A6:9D:45:E7:16:57
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e302e302f31362d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:90:ec:7f:29:e2:11:d9:9d:19:39:dc:78:67:de:ec:37:e5:
         12:39:6f:5f:b7:13:03:2d:ef:b2:cf:1a:47:e5:25:84:18:0d:
         e0:ca:40:04:e0:5c:5b:4c:03:e9:84:6c:ae:e3:41:95:79:cd:
         b1:20:e5:86:02:03:7e:68:f2:01:1b:ea:2d:6d:52:36:f7:d1:
         90:55:56:2d:f0:a5:7d:1b:1f:32:14:a0:8e:57:01:57:4f:42:
         bc:7b:8e:3f:20:f6:1f:0c:0a:1e:4e:ba:13:30:51:cb:8c:0b:
         45:2b:d2:0a:a9:3f:00:e7:4e:4c:f3:f4:81:0d:75:21:8b:7d:
         5d:36:f0:82:a7:0e:48:42:9d:2f:f9:bd:71:cb:09:2f:88:13:
         69:84:f7:3c:fe:fe:20:0c:5b:ae:2d:47:84:43:4e:18:f6:dc:
         72:b1:a5:e2:be:85:35:56:e4:d9:90:8d:c6:2e:0f:e0:cb:e5:
         7d:d6:dd:66:f7:ef:26:e4:d7:66:3a:ec:97:5b:a7:12:69:da:
         9f:37:86:b7:05:21:d3:66:f5:84:94:c1:42:f7:0f:26:ff:93:
         0b:1c:f4:16:bd:e2:93:2e:1a:ac:9b:82:e1:53:79:7c:1a:e9:
         76:5a:27:32:bb:12:7d:a5:ff:ab:e9:05:2c:db:b8:af:a5:42:
         0a:1c:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:56:55 2024 by rpki-client on console-fra.rpki-client.org