Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32332d3233203d3e2036353638.roa
File:                     3139302e39392e39342e302f32332d3233203d3e2036353638.roa (raw, json)
Hash identifier:          TaeoIVKb1q7YW2W7eWTaNeuVybWdk0kSLhX0lKWqvno=
Subject key identifier:   E1:29:F6:D9:4C:E7:FC:C8:68:7C:DE:81:DA:08:0B:D2:23:B6:DA:C8
Certificate issuer:       /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial:       7E823F3B146B984DBFDB21D760A6F9D7965EDAF2
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32332d3233203d3e2036353638.roa
Signing time:             Tue 05 Mar 2024 18:13:25 +0000
ROA not before:           Tue 05 Mar 2024 18:08:25 +0000
ROA not after:            Tue 04 Mar 2025 18:13:25 +0000
asID:                     6568
IP address blocks:        190.99.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:3f:3b:14:6b:98:4d:bf:db:21:d7:60:a6:f9:d7:96:5e:da:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
        Validity
            Not Before: Mar  5 18:08:25 2024 GMT
            Not After : Mar  4 18:13:25 2025 GMT
        Subject: CN=E129F6D94CE7FCC8687CDE81DA080BD223B6DAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:68:5d:2e:4a:a0:c5:14:05:26:c9:0d:7b:
                    9f:92:40:b8:bd:b7:d2:59:23:52:81:36:07:82:dc:
                    e2:79:ec:d9:24:cb:1a:e1:f0:e7:37:6a:36:0c:88:
                    07:c9:b6:97:89:bb:ba:42:b0:10:a7:fb:4f:99:28:
                    1a:98:c2:64:30:a7:13:aa:1a:a8:30:04:23:cc:09:
                    41:48:c8:74:ca:fe:01:d8:54:22:3f:a8:3f:db:13:
                    09:6e:e9:db:69:96:ef:a9:a9:d8:eb:f8:f5:4a:a4:
                    d8:d9:d1:4c:b7:71:11:3b:de:e0:33:a4:d8:14:2b:
                    5a:d0:bc:c4:a1:77:ed:5d:20:56:c2:59:2c:4d:a6:
                    b6:54:3c:ec:40:eb:66:83:df:6d:34:b0:96:33:c6:
                    b7:c0:b5:92:29:f9:83:0e:df:d7:e4:e2:6c:4d:91:
                    03:95:45:d0:61:77:ad:75:46:27:cc:49:b2:8a:19:
                    c8:d0:3a:dd:00:ca:d9:84:ac:53:e7:f1:6d:49:74:
                    c6:32:a6:b9:77:e7:06:21:bd:50:79:c5:87:fd:02:
                    fb:07:c2:85:c7:5c:9d:a3:d0:23:85:ce:bf:f1:ed:
                    3a:83:61:40:59:30:63:d1:41:f9:29:7a:53:0b:76:
                    7a:2c:0a:d1:1f:5a:e6:c0:43:a2:3f:70:54:c1:dc:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:29:F6:D9:4C:E7:FC:C8:68:7C:DE:81:DA:08:0B:D2:23:B6:DA:C8
            X509v3 Authority Key Identifier:
                keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32332d3233203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:15:74:04:26:83:7b:1b:9b:3f:1b:1a:85:a6:53:cf:78:81:
         3a:0b:4f:bd:ce:4f:b4:84:d2:a6:bb:49:f1:9e:8a:62:d2:f8:
         e2:40:54:55:20:dd:61:20:d2:6c:b0:fe:06:91:60:53:82:45:
         af:12:88:2f:b6:ba:e1:b4:fb:d0:35:56:73:77:f2:dc:10:51:
         25:b5:fe:ba:5a:63:98:c4:9b:b7:53:83:70:91:af:e7:b8:aa:
         95:7d:05:e1:ef:ff:20:f6:c8:68:77:eb:cd:51:f0:41:21:61:
         f8:07:80:99:83:e7:5c:82:3e:f0:2a:da:81:7a:73:6e:bb:d4:
         5d:6a:dc:e5:a9:fa:cd:f3:ce:7c:5a:3b:5d:3c:fd:96:06:ac:
         e1:21:ce:7f:88:23:7a:18:e0:ba:e9:14:81:11:1c:25:3d:03:
         18:aa:70:4a:72:b5:0f:90:81:6a:31:d1:7c:21:6a:28:80:42:
         5f:9b:c0:e7:35:4a:93:bd:ad:af:a2:98:6a:8c:b0:b0:2e:1a:
         02:52:54:ae:12:bf:25:48:3f:68:67:70:a5:ad:55:52:4f:46:
         58:37:ed:97:2c:d7:5d:0a:cc:d5:3b:54:2f:93:28:52:37:98:
         ec:65:c0:87:65:c2:95:6b:31:ac:a6:80:94:13:61:01:2b:26:
         72:a9:7f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org