Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e3138302e3139322e302f31382d3234203d3e203532343839.roa
File:                     3139302e3138302e3139322e302f31382d3234203d3e203532343839.roa (raw, json)
Hash identifier:          r1u9OtAdE2GHoaqCaHVcT+3gnP4Wb0pQROyXXvQjBt8=
Subject key identifier:   6D:3B:02:BD:12:8E:AD:34:9D:A5:9E:3A:13:3A:B7:65:F6:56:C7:BC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       2FDC24861F5B0FAEC92D2C180DB53FC7B01C8E9A
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e3138302e3139322e302f31382d3234203d3e203532343839.roa
Signing time:             Tue 05 Mar 2024 17:52:24 +0000
ROA not before:           Tue 05 Mar 2024 17:47:24 +0000
ROA not after:            Tue 04 Mar 2025 17:52:24 +0000
asID:                     52489
IP address blocks:        190.180.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:dc:24:86:1f:5b:0f:ae:c9:2d:2c:18:0d:b5:3f:c7:b0:1c:8e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:24 2024 GMT
            Not After : Mar  4 17:52:24 2025 GMT
        Subject: CN=6D3B02BD128EAD349DA59E3A133AB765F656C7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:24:87:fc:41:76:08:de:a6:ea:c0:fa:91:
                    d8:60:2b:f9:ec:c6:19:a5:d9:75:7e:d6:c2:c8:52:
                    81:a8:1e:b4:d3:ea:87:88:5e:3c:c1:59:1c:d6:df:
                    8a:ce:64:4c:f0:61:20:1c:16:48:ca:b2:31:42:c0:
                    cf:ce:65:f1:56:c3:1c:18:45:6b:49:1b:e9:fe:ff:
                    99:a2:5e:db:dc:2d:eb:37:1b:07:ad:e0:f4:8f:97:
                    c8:ea:da:0e:57:df:2e:35:4c:cb:d4:79:fa:e3:d5:
                    67:31:1b:fe:0b:ab:19:6b:02:39:d3:1b:38:19:1a:
                    c8:76:00:8f:3b:b2:62:40:de:30:c8:c9:8e:e9:c2:
                    18:b9:11:e4:82:1f:aa:f2:85:42:50:59:e5:f6:52:
                    60:63:b1:bd:06:98:d6:b6:da:af:f0:71:36:e4:f0:
                    0e:88:09:40:a5:ff:60:72:18:f4:88:f2:08:98:62:
                    53:a8:86:eb:a2:bf:22:31:ac:da:d9:6f:7c:3c:ae:
                    53:9e:e3:f6:8d:17:df:be:59:d8:62:75:3f:6a:46:
                    9c:c3:47:81:ec:66:90:0f:2d:32:12:68:e6:a2:20:
                    67:29:77:cb:4c:5d:85:1e:f1:72:1a:2d:44:64:f3:
                    6f:53:32:14:e3:1d:0a:91:f4:58:4b:41:b8:1d:29:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:02:BD:12:8E:AD:34:9D:A5:9E:3A:13:3A:B7:65:F6:56:C7:BC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e3138302e3139322e302f31382d3234203d3e203532343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:f2:22:11:9b:48:8e:82:5a:85:90:76:77:c4:11:df:4c:
         a6:ac:67:a0:f5:86:08:dd:02:06:7a:37:91:a2:df:29:30:ac:
         2b:08:19:a3:7e:c5:6d:96:a5:48:9b:52:87:1b:65:67:eb:a4:
         17:85:da:1d:91:ae:03:ad:e8:10:3e:e4:9a:32:39:3b:67:45:
         4f:81:41:06:94:1e:51:10:e3:a1:89:4c:6a:eb:8b:33:67:75:
         ef:48:8e:13:eb:4b:42:71:3b:56:8c:86:8c:44:e0:c2:41:c8:
         7d:e2:f7:99:ca:98:fb:b6:e5:07:29:d1:5a:98:9f:8e:d8:5d:
         63:be:29:af:7a:ef:bd:c3:8b:0c:8d:13:8c:77:f0:44:2a:22:
         23:56:b1:48:8a:9e:45:55:24:86:a1:69:80:ab:72:af:51:e5:
         43:dd:ba:c6:ef:14:dd:30:f4:34:68:84:49:70:3b:ee:64:30:
         f7:2e:9a:c7:3b:c3:16:5c:80:fb:dc:10:eb:ab:a5:23:8b:6e:
         03:7d:7f:70:9f:2d:66:b3:6b:7e:36:42:f5:04:57:e5:bc:51:
         2b:52:50:24:91:36:7e:92:85:5c:44:1d:cf:26:17:27:a0:bb:
         83:96:fd:90:d1:21:bb:68:1e:16:a1:03:90:e4:04:ee:82:31:
         9d:c0:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org