Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3138302e302f32322d3234203d3e203238303135.roa
File:                     3139302e352e3138302e302f32322d3234203d3e203238303135.roa (raw, json)
Hash identifier:          I0/u/JrDSY7FNaydo/sKhoiCQSQmjGxcEvk12AteF9Q=
Subject key identifier:   56:81:E5:45:BA:28:52:FC:14:98:65:22:81:D0:CC:40:54:6B:FA:9D
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       1A3114FA55ED341C0C576EC7CC6F57289001130F
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3138302e302f32322d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:45 +0000
ROA not before:           Tue 05 Mar 2024 18:06:45 +0000
ROA not after:            Tue 04 Mar 2025 18:11:45 +0000
asID:                     28015
IP address blocks:        190.5.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:31:14:fa:55:ed:34:1c:0c:57:6e:c7:cc:6f:57:28:90:01:13:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:45 2024 GMT
            Not After : Mar  4 18:11:45 2025 GMT
        Subject: CN=5681E545BA2852FC1498652281D0CC40546BFA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:65:1b:8e:d4:8e:d3:2d:80:4c:fd:4a:63:
                    ed:e3:1f:12:74:bd:12:76:89:da:f2:bb:ee:79:41:
                    86:34:8c:c7:55:02:31:1e:d0:98:f4:6b:9f:53:ab:
                    ef:87:5d:56:a6:53:6f:aa:d5:ad:3b:96:3d:c4:5a:
                    df:96:bb:7e:be:b2:c0:32:1d:3a:da:11:09:22:e4:
                    a5:7f:8d:5a:d4:e6:90:84:cf:f9:67:8c:59:b9:1a:
                    ca:c8:f4:1d:3b:82:1a:ab:fa:e8:8a:9c:29:18:5e:
                    1b:c5:b4:bf:90:b7:2e:ff:9f:11:41:28:f2:56:6c:
                    b6:de:ea:47:3b:b5:f3:76:31:03:16:e0:d7:6e:34:
                    aa:0c:ab:00:00:c3:ec:71:d5:74:37:0e:48:1e:15:
                    20:77:5e:2c:b0:54:d2:fa:e5:e6:72:38:51:c1:12:
                    83:f5:42:71:06:c0:ea:8b:a5:cb:97:46:80:53:de:
                    11:0f:a6:2a:52:d0:ee:3c:4a:48:42:47:e6:18:c8:
                    63:b2:4e:8e:a0:ec:5d:15:64:19:18:52:36:ad:8c:
                    43:22:83:f8:e9:5a:4b:ae:c4:41:ce:6b:26:db:fe:
                    4c:14:c4:0b:8e:6d:12:b8:d0:1f:cf:b4:97:3d:7d:
                    ed:6f:98:be:2e:55:60:b6:b6:2b:b7:22:f4:ae:1c:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:81:E5:45:BA:28:52:FC:14:98:65:22:81:D0:CC:40:54:6B:FA:9D
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3138302e302f32322d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:51:66:72:9d:db:f6:07:91:ae:e4:53:f4:3a:b6:e7:66:20:
         d2:85:fb:95:2d:0e:7e:55:4b:e2:5b:d8:04:b4:6e:f3:ac:1b:
         f7:fe:5f:0a:55:3c:b6:7d:3b:d2:ff:33:57:23:1b:b5:c8:46:
         86:d9:5e:6d:c6:03:62:4f:b3:fa:23:08:74:a9:f9:e1:e4:ec:
         6f:1b:96:a5:02:73:f6:cd:17:f0:99:ed:00:c1:01:39:eb:f0:
         0a:f1:62:a1:f6:7e:79:78:d3:cd:01:95:dd:06:64:53:ae:e1:
         d3:1b:e9:a2:6d:53:ce:e3:ae:8c:38:fd:28:79:52:ad:cc:58:
         ff:08:82:8d:e3:2f:6c:4e:ce:ca:09:e2:b3:46:aa:90:4a:b1:
         62:94:f4:9a:40:5f:db:91:88:a6:ab:42:c7:f8:52:5e:1b:3a:
         3e:76:a0:ff:14:ea:2c:2c:14:19:46:56:75:1d:54:30:a1:55:
         c6:00:fa:6b:0a:be:f9:63:d4:60:0a:70:09:36:d6:a9:d8:aa:
         a8:e7:67:ac:6f:05:c4:2e:d3:aa:84:07:37:0a:3c:e3:92:22:
         84:4d:37:33:fa:cb:88:c5:a3:91:1d:bb:4a:1c:92:83:23:13:
         b2:08:44:de:1a:7c:d6:40:a1:71:e4:21:e7:47:fa:24:e9:bb:
         bf:65:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:27 2024 by rpki-client on console-ams.rpki-client.org