Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3132382e302f31372d3234203d3e203138373437.roa
File:                     3139302e36312e3132382e302f31372d3234203d3e203138373437.roa (raw, json)
Hash identifier:          B93lQtX3GkO365dWdXJEcf/MyNsFvY6OY+TtpSsKHNg=
Subject key identifier:   5F:97:A6:C0:98:AD:18:4C:5E:EF:E9:63:94:12:2A:B3:6E:CC:B0:DE
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       5E9B3314DBBB2932B2A491B2083D0AD2E8FF4CFE
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3132382e302f31372d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:01 +0000
ROA not before:           Tue 05 Mar 2024 17:54:01 +0000
ROA not after:            Tue 04 Mar 2025 17:59:01 +0000
asID:                     18747
IP address blocks:        190.61.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:33:14:db:bb:29:32:b2:a4:91:b2:08:3d:0a:d2:e8:ff:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:01 2024 GMT
            Not After : Mar  4 17:59:01 2025 GMT
        Subject: CN=5F97A6C098AD184C5EEFE96394122AB36ECCB0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:3d:cb:37:1f:c9:bb:4c:b1:0c:39:7b:d4:
                    5f:07:18:8a:d4:f8:9a:e7:a6:f9:90:50:1f:ed:bd:
                    ab:5e:18:fe:14:06:80:06:39:63:0e:f7:3a:f8:78:
                    72:c0:ec:2f:1e:08:44:e1:54:12:05:36:7d:08:ec:
                    dd:95:7c:5f:3d:46:92:e1:98:a5:ef:76:4b:0a:05:
                    e6:ee:30:7e:77:6e:d2:ad:5d:59:56:da:49:71:a2:
                    f8:5a:04:66:11:00:64:ce:98:32:43:f6:d2:41:ed:
                    bb:f5:3c:6d:ad:88:8a:75:e9:58:a0:ed:3b:2e:cc:
                    2b:b6:01:45:f0:c0:d7:7c:47:80:bf:3a:d6:4b:44:
                    2f:7d:98:89:25:2a:7b:48:cd:65:c3:01:62:bf:de:
                    4a:64:0c:9b:67:a8:4e:65:0c:e6:1b:72:03:77:ff:
                    f6:69:fc:2a:b1:bd:42:8a:d1:0e:43:9b:db:e2:07:
                    7a:57:2f:37:9d:dd:3b:ea:ec:60:14:dd:0d:ac:30:
                    0d:0f:8c:ad:c1:5b:b1:d5:0d:6f:1f:09:6d:09:6c:
                    ff:ec:fb:70:b1:c2:22:19:88:6d:92:61:ed:3a:62:
                    7b:58:65:c7:da:31:10:88:b0:99:26:75:fb:3d:10:
                    b1:c8:76:d9:8a:5e:ea:b8:d5:a7:f5:10:5d:76:08:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:A6:C0:98:AD:18:4C:5E:EF:E9:63:94:12:2A:B3:6E:CC:B0:DE
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3132382e302f31372d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:e1:6c:44:72:79:b7:60:a4:98:35:58:24:08:65:aa:c1:
         e4:7e:46:eb:61:18:6d:30:de:d6:bc:6a:61:69:f0:01:d0:b9:
         8d:59:78:ac:98:e3:a0:52:fa:a3:3d:55:5e:51:56:9f:8a:b0:
         d0:ae:23:9d:3d:54:28:6e:c5:d4:5d:37:1c:24:cf:fb:20:09:
         98:b4:11:69:28:a2:a8:66:36:11:72:f5:84:a8:cb:b0:99:25:
         13:4b:d5:e3:3d:72:30:29:44:38:52:44:f9:06:ef:9b:44:1e:
         c5:d3:9f:31:3f:cb:75:eb:1a:a5:15:06:d9:be:a4:5e:7d:df:
         16:6a:15:af:d9:dd:f6:fc:c2:ec:df:ec:97:d2:ca:87:6e:b6:
         21:8f:7b:0b:6d:a5:3c:36:e2:22:ba:a7:d8:6b:9d:4d:11:09:
         7b:db:c9:df:70:6a:01:c9:56:6b:a6:56:55:46:a8:50:f9:b1:
         8d:6c:1d:3e:80:00:61:49:8a:e9:d1:4a:af:f1:54:2a:74:4a:
         a3:be:4c:9a:64:d7:0f:88:48:18:a9:b4:d9:25:42:86:c9:a0:
         61:e7:b2:8b:1f:07:cc:8f:f3:62:47:69:8e:51:5e:57:3f:cb:
         a2:00:fc:e4:5b:12:4c:1c:a7:bc:8d:88:79:6e:cf:4d:03:b1:
         29:46:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org