Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203532343230.roa
File:                     3139302e31312e3132382e302f31392d3234203d3e203532343230.roa (raw, json)
Hash identifier:          ot2X9YJlEMQXWMnf9zIIFJkrrjvlOJ/oMY0r8wwsQqE=
Subject key identifier:   72:7C:0B:7C:AF:29:AF:68:DD:69:92:01:80:C7:F4:26:58:19:2A:D0
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       6C1F48F83B1A359451DB322BDD6F4D76EED85C89
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203532343230.roa
Signing time:             Tue 05 Mar 2024 18:07:18 +0000
ROA not before:           Tue 05 Mar 2024 18:02:18 +0000
ROA not after:            Tue 04 Mar 2025 18:07:18 +0000
asID:                     52420
IP address blocks:        190.11.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1f:48:f8:3b:1a:35:94:51:db:32:2b:dd:6f:4d:76:ee:d8:5c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Mar  5 18:02:18 2024 GMT
            Not After : Mar  4 18:07:18 2025 GMT
        Subject: CN=727C0B7CAF29AF68DD69920180C7F42658192AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:13:fb:0d:b1:85:83:cd:a5:e6:6f:80:22:
                    77:88:e7:f9:15:76:5d:80:ab:05:d6:da:14:bd:04:
                    ce:f9:dd:ed:de:65:6f:4e:0a:c5:08:e8:6d:64:90:
                    67:ba:83:8f:6e:32:ae:c7:1f:6c:9e:b8:6d:76:24:
                    9a:5e:87:0c:6a:8a:c4:47:7e:f6:fb:4d:6f:6b:83:
                    bd:6c:3d:b7:72:0d:39:0c:d0:7e:a0:0e:68:55:cb:
                    a8:07:9b:c7:18:d0:df:79:9f:e4:d6:40:95:e9:bd:
                    66:5a:54:04:25:1b:1e:04:98:3b:5d:ef:c5:74:65:
                    e0:23:7a:51:a2:56:bb:c8:db:2d:fb:20:be:5f:3d:
                    51:a2:01:b0:b9:da:1d:08:23:d8:78:62:23:22:61:
                    d9:26:02:bc:51:da:3a:f9:b4:21:1c:b2:73:b2:de:
                    1c:10:e0:3d:25:90:8d:b8:08:ae:79:3f:98:5d:20:
                    07:d8:fb:f1:27:c3:b7:1b:fe:0d:10:2f:63:21:07:
                    17:c6:64:f5:bd:e0:41:59:92:62:29:ce:52:a1:be:
                    0c:eb:4e:97:9d:8e:c8:ee:d4:21:80:83:73:25:76:
                    9c:01:81:e6:56:1d:9f:99:80:34:6b:a0:b9:92:45:
                    67:bd:29:a0:c2:bf:a0:d6:61:32:74:ea:63:4c:87:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:0B:7C:AF:29:AF:68:DD:69:92:01:80:C7:F4:26:58:19:2A:D0
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:8e:47:56:a3:68:79:eb:a3:b9:b9:79:9b:3f:bc:0b:6a:
         7c:8c:05:7f:11:27:56:e3:8d:c2:f5:68:f4:dd:a3:e4:12:94:
         14:45:e7:e7:0c:c1:f0:c0:c3:60:08:40:4c:05:37:90:e4:4e:
         de:02:19:e4:f7:c3:a7:36:bd:2d:4f:ad:f4:6e:a9:da:d6:74:
         fe:2c:5d:39:27:ad:5d:63:cb:fa:f0:be:4a:09:bc:0d:c9:b0:
         e1:1d:e0:09:6d:a7:01:4d:86:c3:d3:49:f4:9e:a8:38:9b:cb:
         df:ba:e0:8c:e0:7d:ab:b1:a0:9e:b9:63:c0:fe:99:79:e1:47:
         5b:ea:cc:6c:30:5e:27:9d:eb:0a:86:7a:06:69:61:7b:b8:81:
         1d:d6:0b:16:68:22:77:a5:b2:72:ae:1d:0d:d6:d0:3c:f9:e8:
         01:83:68:cf:ed:5c:d5:e1:15:ae:56:45:b9:a5:b8:e5:f7:29:
         6b:3d:88:ac:7a:d0:e3:73:f1:2e:59:6f:98:d2:d7:e7:8e:c6:
         71:ff:90:c5:41:12:54:71:86:71:da:a7:a9:8a:22:52:3f:62:
         50:43:97:77:9c:15:01:f5:db:a9:22:36:38:f9:81:d4:95:90:
         16:6f:b9:0d:62:63:63:57:6a:85:18:b7:50:28:4e:33:4a:22:
         32:77:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:46:57 2024 by rpki-client on console-ams.rpki-client.org