Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa
File:                     3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          DAxpGWjUzKycnmxBf/YWPV7fe/kq1p28fJx7ZCJiaQM=
Subject key identifier:   01:EC:EB:6A:91:74:89:F1:9B:51:9D:6A:EA:26:06:E5:BE:8C:B4:19
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       6895A4CA46DE0D74304F95B220A9A81FB3498CFE
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 05 Mar 2024 17:58:51 +0000
ROA not before:           Tue 05 Mar 2024 17:53:51 +0000
ROA not after:            Tue 04 Mar 2025 17:58:51 +0000
asID:                     395161
IP address blocks:        190.120.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:95:a4:ca:46:de:0d:74:30:4f:95:b2:20:a9:a8:1f:b3:49:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Mar  5 17:53:51 2024 GMT
            Not After : Mar  4 17:58:51 2025 GMT
        Subject: CN=01ECEB6A917489F19B519D6AEA2606E5BE8CB419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:28:3e:6f:f3:f5:9a:e7:86:3b:bd:04:00:
                    7f:8f:7a:ce:95:63:95:d5:76:47:65:2f:83:36:f9:
                    1a:0e:ea:79:27:ad:09:60:1a:89:53:7a:ba:db:32:
                    a9:0c:da:21:49:a6:19:86:e2:43:7f:32:58:4f:97:
                    11:2c:d2:13:f0:96:92:20:10:8f:63:9f:37:25:0a:
                    83:6d:f0:cf:40:b6:c6:ae:ae:2a:6b:02:1f:f0:0d:
                    94:67:fa:0f:8a:f0:7c:14:65:55:7a:2d:c5:d0:79:
                    e8:9b:9e:e8:7f:b3:b5:ff:2f:4b:ab:47:15:5e:39:
                    7d:d9:f6:29:af:7e:8b:b0:da:56:6b:a6:f9:7e:0d:
                    e6:5f:3a:b9:bc:42:46:6b:9c:3b:ed:a9:b3:34:4e:
                    00:8c:d6:0d:ae:4e:9a:75:7b:a9:9f:35:6c:a0:c3:
                    c7:a6:e6:2e:27:a9:8c:a9:6a:18:90:a2:ee:e2:cf:
                    5a:17:15:c3:05:f7:a0:c2:7c:21:0d:a8:86:df:50:
                    0e:bf:95:be:36:45:62:d7:77:0e:5f:48:e0:cc:5d:
                    47:f9:12:91:55:d4:3a:a1:c5:47:d7:7d:a6:4f:af:
                    d8:dc:c3:05:33:11:34:61:06:02:4c:f2:d2:b7:8c:
                    1e:d4:e8:9d:4f:a2:d3:27:86:27:ea:0b:19:24:b4:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EC:EB:6A:91:74:89:F1:9B:51:9D:6A:EA:26:06:E5:BE:8C:B4:19
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:7d:6f:10:4c:a7:0f:b6:9a:44:e6:04:ce:df:bb:fb:7f:
         4b:92:25:f7:6a:1c:91:03:cf:15:ed:b8:3a:14:01:51:13:84:
         0d:90:b8:a2:9e:d1:61:92:d1:91:32:e6:1a:67:64:7b:ce:05:
         1c:86:22:fb:1d:dc:37:18:24:22:ab:31:77:de:16:54:9f:ea:
         d2:44:48:8d:83:ae:56:d4:7b:e4:b9:5f:4d:a9:a7:49:e5:63:
         c6:c4:41:ef:de:1b:3b:9f:1d:8a:29:4e:80:9f:40:df:25:a2:
         c7:13:ee:b5:03:d8:24:14:ab:cd:51:57:5e:3d:9b:c4:f4:2a:
         c1:15:b4:29:a1:ce:5d:f8:ca:3e:70:95:5b:13:ef:7d:2a:a5:
         a1:80:57:83:16:05:75:64:32:ea:69:1f:15:6a:49:43:e7:68:
         b7:5e:5f:a9:11:5d:08:93:a3:d1:21:4e:88:0e:a5:3e:e6:a2:
         44:31:07:2e:75:63:42:1b:df:15:af:f1:92:e8:66:e3:8b:b0:
         4d:b3:6c:f6:63:a4:6d:bf:96:78:ff:48:24:ed:e2:19:5e:43:
         93:f7:1b:e9:39:85:16:22:6d:c9:bc:89:ed:e6:af:d6:14:8f:
         e0:3d:1b:a0:fc:f3:a0:8d:2c:6c:c5:84:4f:da:38:45:22:19:
         2e:40:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org