Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32342d3234203d3e203532323730.roa
File:                     3139302e36312e3230342e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          RwlhiBFBWP3KteuThJcRTRiD3ZC7aEtAaGQGn0xQEXU=
Subject key identifier:   CF:09:47:DB:36:EA:51:5C:2C:34:B8:B1:0D:F3:EB:88:7B:B6:B2:51
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       370327443EA7DF3151BB26F211540282EC1056A1
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32342d3234203d3e203532323730.roa
Signing time:             Tue 05 Mar 2024 17:58:59 +0000
ROA not before:           Tue 05 Mar 2024 17:53:59 +0000
ROA not after:            Tue 04 Mar 2025 17:58:59 +0000
asID:                     52270
IP address blocks:        190.61.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:03:27:44:3e:a7:df:31:51:bb:26:f2:11:54:02:82:ec:10:56:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:59 2024 GMT
            Not After : Mar  4 17:58:59 2025 GMT
        Subject: CN=CF0947DB36EA515C2C34B8B10DF3EB887BB6B251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:da:ad:71:15:7e:0b:a9:2a:27:db:b8:d4:88:
                    25:3b:b0:66:ae:f8:e9:f2:ae:e4:f2:27:d3:0c:5d:
                    4a:e8:85:4c:9f:9d:dd:10:18:76:93:d7:33:c8:14:
                    fe:03:91:62:fd:82:5c:6e:49:46:af:f1:f5:7c:5d:
                    a1:f6:de:d4:30:5a:ea:e6:b1:d4:73:a6:60:f1:15:
                    61:a7:50:04:96:1f:00:81:96:7a:f5:a1:b3:be:84:
                    16:f7:da:7f:cd:fb:74:16:5e:e5:57:d2:bb:56:fd:
                    b1:07:0e:b5:42:7e:ca:b3:52:33:3b:4f:4a:a7:57:
                    a9:a9:99:c5:56:05:3c:2c:65:b8:80:c0:c9:6b:e1:
                    ec:5a:8e:62:7e:17:e6:95:af:67:f7:95:d0:96:ef:
                    bc:4d:60:8a:fc:d3:01:60:a0:29:ea:65:d8:9c:15:
                    ac:c4:28:c5:5e:23:30:dc:23:ff:53:9c:2f:05:ef:
                    7f:01:13:6c:22:9b:27:f0:8e:04:84:07:cf:51:70:
                    59:b5:fb:3f:e2:2b:75:dd:56:76:f4:0d:c8:4e:53:
                    a5:ad:0f:54:a6:40:aa:bd:ea:68:42:63:13:42:71:
                    5e:a5:31:ef:f8:08:80:57:1e:9d:6e:dc:dd:1f:e3:
                    18:ce:97:f8:7c:bb:73:7d:3a:0e:d3:74:74:2d:c2:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:47:DB:36:EA:51:5C:2C:34:B8:B1:0D:F3:EB:88:7B:B6:B2:51
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:d1:a2:34:ba:cf:12:ee:f8:77:5c:2c:a0:df:d9:b1:73:
         b7:7c:23:1f:32:9c:ec:63:63:c3:ce:80:6a:de:a5:af:be:04:
         b4:a4:3a:f7:d2:5b:4f:f0:3f:89:a3:47:43:4a:34:4f:2a:7e:
         d8:eb:14:cc:10:c6:e8:a0:ff:87:01:39:af:86:fe:27:e0:82:
         10:e4:09:91:d7:02:2d:4f:40:3f:bb:c2:e3:71:58:2b:4d:bf:
         2f:bd:c4:37:9e:56:e3:61:b8:d6:ee:78:cc:d5:4b:3c:fa:bd:
         1d:4f:02:88:89:44:92:a9:04:ce:87:7f:f9:fe:2b:43:48:02:
         2a:3e:4d:f3:4c:85:c5:ec:4a:b5:16:6f:5b:66:8b:0c:12:e9:
         b9:84:53:8d:5b:d1:34:55:06:9e:ce:1a:f6:58:83:2a:32:ad:
         7e:42:f5:92:d5:83:3d:1a:dc:86:2c:03:1e:bf:ba:6e:b2:4b:
         ba:09:b9:5c:cd:c7:ac:35:8b:9d:c2:3a:ef:7a:23:f7:b5:83:
         0b:08:99:24:d8:26:d6:cf:3e:32:df:72:c4:e1:8f:64:4a:90:
         e4:76:1d:22:25:54:f5:ff:55:86:25:3d:ac:c3:07:38:fe:5a:
         e5:92:93:30:ab:30:2a:18:54:55:46:55:ea:a6:b9:d7:b1:15:
         40:86:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 02:23:16 2024 by rpki-client on console-fra.rpki-client.org