Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203532343230.roa
File:                     3139302e31312e3136302e302f31392d3234203d3e203532343230.roa (raw, json)
Hash identifier:          BwPkcg6CUYt959MWBbwywQTBSCRXAKKC0g5v/WDKKDA=
Subject key identifier:   A3:D3:58:05:F2:4D:DB:27:0B:5A:20:2B:86:9B:1A:1E:CA:49:1A:7B
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       1C29147C4514E4A56E9DA0F2D8B07258BD843988
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203532343230.roa
Signing time:             Tue 05 Mar 2024 18:07:19 +0000
ROA not before:           Tue 05 Mar 2024 18:02:19 +0000
ROA not after:            Tue 04 Mar 2025 18:07:19 +0000
asID:                     52420
IP address blocks:        190.11.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:29:14:7c:45:14:e4:a5:6e:9d:a0:f2:d8:b0:72:58:bd:84:39:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Mar  5 18:02:19 2024 GMT
            Not After : Mar  4 18:07:19 2025 GMT
        Subject: CN=A3D35805F24DDB270B5A202B869B1A1ECA491A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:c8:5d:94:37:fe:55:1d:9d:44:11:36:a1:
                    fb:93:16:36:33:74:82:9b:14:75:3f:f9:31:c5:7d:
                    e3:31:df:26:f3:7e:f3:8c:97:5f:82:f5:ba:c0:17:
                    41:4d:e5:f9:bd:9e:2a:94:76:d8:7f:0d:e3:1f:72:
                    77:f0:87:ca:68:cf:54:a8:28:ff:93:1a:67:ba:da:
                    35:e2:c1:bf:89:48:bc:9e:29:b1:84:20:e1:0e:40:
                    b1:48:d7:18:df:bd:45:da:37:1b:b0:19:b3:05:47:
                    a1:65:7b:66:a0:9b:52:00:e4:e0:cf:53:7f:ba:45:
                    1c:d0:e1:c4:7a:20:54:40:4c:ce:a3:b8:5f:b4:0c:
                    44:fa:e9:27:fa:cb:8d:1b:00:4b:cd:df:ac:9c:fc:
                    a0:45:f5:85:ec:70:ec:b9:b3:3b:3c:de:87:bd:7b:
                    b7:3f:c0:f8:b2:52:c6:0b:77:b5:ff:6d:45:82:05:
                    26:ce:dd:28:70:63:71:9f:7f:3f:2c:4b:3f:22:b3:
                    9f:de:a3:c4:50:7e:de:26:eb:b3:87:f9:38:8f:6e:
                    d1:f1:03:1f:86:90:f5:ac:90:fb:dd:57:e7:d7:ed:
                    99:c5:b2:f5:b5:03:22:53:3d:70:77:a8:3e:70:85:
                    82:32:a2:45:3e:8e:e7:d3:59:4d:a5:b3:2c:4f:5b:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D3:58:05:F2:4D:DB:27:0B:5A:20:2B:86:9B:1A:1E:CA:49:1A:7B
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:d0:fb:75:2f:cc:8b:53:85:ec:51:0f:e6:59:62:31:3c:
         cb:ae:f3:1f:1c:47:e9:34:f7:49:e4:de:c6:45:58:13:fe:17:
         c6:ee:e6:db:3d:40:1f:8d:8e:7a:3d:81:25:5a:97:6a:3c:3f:
         1a:71:24:1d:da:6b:89:6b:3b:4e:98:b3:ba:b9:84:e7:9a:a3:
         3d:b7:39:e5:23:be:8f:87:22:1e:b9:1b:c4:b6:5f:0c:fb:43:
         45:19:ed:48:d9:97:47:5c:9c:69:b9:95:0f:ed:dd:d6:8d:cd:
         b6:1e:6e:55:da:f5:64:fc:a4:6b:a6:01:e9:0e:62:57:59:a7:
         dc:18:83:21:ee:ea:34:9d:9b:34:8e:f3:7e:34:c4:60:26:5f:
         5d:e6:30:8d:5f:df:f9:ab:53:99:0a:61:05:98:33:3e:46:fb:
         7a:c4:1b:ef:1e:b3:b2:0e:73:9e:15:f1:34:f7:39:5b:9e:6b:
         ee:97:ae:73:de:4f:53:6e:ba:61:b8:ad:c7:37:b0:bb:28:8b:
         25:8f:9b:51:f3:55:5d:3d:56:fa:9d:a1:2d:7f:4b:d6:e4:c5:
         32:5f:9a:76:0d:b3:e1:a0:c3:59:c2:a5:36:10:a0:0c:cc:8e:
         05:94:fc:a2:41:3f:09:fd:aa:e4:13:41:24:99:92:16:e4:5e:
         fe:76:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:27:05 2024 by rpki-client on console-fra.rpki-client.org