Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203138373437.roa
File:                     3139302e36302e33322e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          Z4ZuXxbDEWza9niHaqomiHNuNxsOB97rw86Q9gBxNdM=
Subject key identifier:   47:3F:BC:C3:52:EC:DC:BB:39:D8:FD:EF:FD:84:32:26:2C:E9:8F:C2
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0E5D1704F27C7089E9C94760EA00A8DADE2E6E66
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:11 +0000
ROA not before:           Tue 05 Mar 2024 17:54:11 +0000
ROA not after:            Tue 04 Mar 2025 17:59:11 +0000
asID:                     18747
IP address blocks:        190.60.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5d:17:04:f2:7c:70:89:e9:c9:47:60:ea:00:a8:da:de:2e:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:11 2024 GMT
            Not After : Mar  4 17:59:11 2025 GMT
        Subject: CN=473FBCC352ECDCBB39D8FDEFFD8432262CE98FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:44:58:a7:dd:9a:99:fe:85:5f:1e:d3:cd:
                    bf:2e:c9:8b:39:0b:20:d4:a7:18:31:12:3b:07:e8:
                    1c:cb:fb:4a:0c:13:73:c5:f9:6f:fb:95:5b:17:ec:
                    60:68:bc:64:20:b1:5b:49:00:74:07:0e:c6:1a:b8:
                    05:3d:48:76:7a:9f:5a:15:59:75:69:7e:4f:24:6e:
                    53:fc:b0:68:3e:3e:53:3c:1d:d1:91:1e:05:8e:2c:
                    79:03:66:31:49:1a:61:61:e9:64:2c:6a:62:d1:ec:
                    c9:6e:8b:89:e9:1d:6a:27:f3:95:6d:93:66:fc:f2:
                    e3:91:0d:7c:3c:df:ff:af:c5:6f:73:83:c9:9e:e7:
                    18:a1:65:5b:72:01:4f:a1:78:2a:6c:ce:26:aa:8d:
                    74:2f:2f:23:1e:39:74:dd:8f:ef:df:ca:bd:fd:91:
                    bb:49:fd:93:cc:57:21:1f:16:af:1e:28:1b:35:be:
                    d8:a5:52:d0:d2:eb:0c:e8:20:15:17:7c:a6:84:2b:
                    4d:c2:c5:f2:0a:18:5b:aa:58:47:8b:88:c4:2a:ae:
                    03:6e:27:a4:01:7e:9b:b7:85:9f:22:cb:8e:51:b9:
                    e9:48:64:b9:aa:70:00:55:c3:1f:d4:f8:b0:61:b1:
                    fa:71:fb:a8:88:c7:9b:06:15:25:ab:9c:d2:f2:fd:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:BC:C3:52:EC:DC:BB:39:D8:FD:EF:FD:84:32:26:2C:E9:8F:C2
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e33322e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:6b:15:e4:3c:7a:a4:3b:dd:b3:fd:ca:60:ff:1d:45:64:
         10:5c:5f:f3:d4:1a:d7:87:1d:22:f4:36:15:d6:63:c5:ea:d7:
         93:f9:d2:e7:36:72:9e:c0:3d:5f:44:c4:b5:5c:dd:36:ed:8a:
         ad:70:19:ef:87:0d:64:56:fb:da:b5:93:1e:9d:9e:d5:a0:5d:
         43:90:99:a8:af:33:74:10:9b:01:e3:7a:4a:bb:0c:8a:dd:ec:
         b5:3a:7d:e7:89:b8:01:3f:60:c3:b1:f2:d9:8a:08:be:9e:dd:
         6f:b6:64:c4:ef:10:cf:89:52:51:6b:0b:39:2b:7f:6a:e2:5e:
         b6:93:d3:cd:d7:45:b3:57:e6:f6:b4:1a:c8:f9:61:98:4b:96:
         0e:c3:f5:2e:96:d7:c8:43:69:7c:72:0d:02:7a:aa:6c:65:a7:
         1f:14:a3:bc:94:66:8a:b8:9c:df:2b:fa:93:aa:c1:8a:c4:90:
         1c:ce:66:34:e7:25:f5:3c:20:d6:e7:d8:1e:e5:77:68:a4:0f:
         54:c2:d0:7a:64:4b:1d:64:ea:4f:39:0b:b8:e5:3e:35:82:36:
         0d:73:29:02:a4:cd:d0:30:53:2c:52:9b:73:b0:9e:de:c1:a8:
         be:b7:59:67:3a:3d:85:0e:cf:ff:44:3b:3a:31:15:5b:2e:30:
         cf:d4:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org