Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/3136312e3139302e302e302f31362d3234203d3e203133343734.roa
File:                     3136312e3139302e302e302f31362d3234203d3e203133343734.roa (raw, json)
Hash identifier:          JrK3cyLjb5gCMt7kuh1riFw5EouXn54CTQVcD22W0jQ=
Subject key identifier:   00:66:97:E6:85:45:18:72:1D:60:1E:BA:6D:86:BF:CC:1E:E3:7A:B0
Certificate issuer:       /CN=0E59BA547C4D7976EEBC9708853D72B95F91E5BF
Certificate serial:       5D9605E4F909B0201C46EDB6BC33A73C84AC9DFB
Authority key identifier: 0E:59:BA:54:7C:4D:79:76:EE:BC:97:08:85:3D:72:B9:5F:91:E5:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/3136312e3139302e302e302f31362d3234203d3e203133343734.roa
Signing time:             Tue 05 Mar 2024 18:05:58 +0000
ROA not before:           Tue 05 Mar 2024 18:00:58 +0000
ROA not after:            Tue 04 Mar 2025 18:05:58 +0000
asID:                     13474
IP address blocks:        161.190.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:96:05:e4:f9:09:b0:20:1c:46:ed:b6:bc:33:a7:3c:84:ac:9d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E59BA547C4D7976EEBC9708853D72B95F91E5BF
        Validity
            Not Before: Mar  5 18:00:58 2024 GMT
            Not After : Mar  4 18:05:58 2025 GMT
        Subject: CN=006697E6854518721D601EBA6D86BFCC1EE37AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:4e:1f:c0:10:e4:14:55:92:f6:36:de:52:
                    0e:e8:73:27:f5:87:41:f9:eb:e4:ec:7c:49:07:76:
                    3a:a8:ac:e2:a6:9a:02:06:0c:b5:2a:52:9b:79:83:
                    63:31:96:31:d6:e1:6b:5a:56:78:57:20:2d:23:4a:
                    0e:6a:2b:25:d4:e4:c0:43:eb:04:16:2d:ba:12:b3:
                    45:4f:30:01:a7:a1:08:e8:db:cc:27:7f:a9:48:c7:
                    d7:33:f2:2b:13:98:c5:cd:83:f7:4f:75:3a:50:27:
                    20:3d:b7:47:f2:48:3f:53:14:2e:e0:90:ba:d7:dd:
                    89:bf:d3:23:ee:f9:91:1a:7a:49:07:5e:13:2e:57:
                    40:2c:90:e7:c0:29:70:87:32:ce:14:b9:58:f4:54:
                    f6:3a:ec:43:37:4f:6f:b7:4b:5b:da:40:42:b0:28:
                    53:cc:05:36:fd:04:24:bf:0c:54:eb:ce:b6:da:e3:
                    a3:dd:b8:59:b1:fd:4e:85:60:04:52:94:3c:46:1b:
                    67:4f:36:2b:fd:09:a1:4a:ec:be:8d:53:10:ef:3b:
                    11:e5:43:b4:6e:26:e6:8f:2a:fa:d2:1a:61:23:2b:
                    67:65:41:a9:db:37:91:ac:39:bc:25:8d:61:4b:4d:
                    52:b5:3a:0c:57:5d:ef:77:59:29:04:f6:1c:08:f8:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:66:97:E6:85:45:18:72:1D:60:1E:BA:6D:86:BF:CC:1E:E3:7A:B0
            X509v3 Authority Key Identifier:
                keyid:0E:59:BA:54:7C:4D:79:76:EE:BC:97:08:85:3D:72:B9:5F:91:E5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/3136312e3139302e302e302f31362d3234203d3e203133343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:a5:1a:bb:4b:df:0c:9c:56:cf:dc:eb:66:be:ed:ce:2a:
         98:4a:61:10:0b:56:6f:bb:b9:3d:b1:28:f5:b5:35:a8:e4:8e:
         1a:e7:27:8a:84:0d:15:c2:b1:37:e5:97:3a:b2:0b:91:a7:47:
         78:95:22:50:8a:c8:c5:21:4e:e4:3c:da:e4:34:9f:65:d1:46:
         20:46:33:b7:8d:b2:83:73:b3:65:af:1d:7a:6f:85:16:9b:a6:
         63:b9:55:c3:cb:26:c7:7a:75:9e:12:ae:0d:a9:04:0e:a7:84:
         5a:c1:60:e5:b4:b7:9d:88:c8:96:e9:c8:3d:90:23:a4:72:52:
         a3:ed:c5:7f:d1:9d:20:22:51:ee:3e:7a:8f:41:3e:90:6a:68:
         f2:3c:04:17:0f:7f:f0:bd:16:07:5c:0b:0f:6a:4d:d5:50:98:
         0d:e8:65:c4:6a:2c:e5:5c:9f:72:07:ca:ff:e9:ff:df:af:70:
         c5:0e:8c:ad:9f:be:ee:ae:32:cd:f5:6f:4e:50:c4:e1:7c:3a:
         cd:88:b0:6f:a8:71:e3:dd:7a:d8:7d:d4:10:93:25:f9:17:62:
         65:22:f6:98:a8:75:79:0f:21:55:23:3c:ae:34:cb:37:b7:9c:
         ff:0d:33:1d:4b:d8:5b:08:b7:ff:e7:2d:b0:ce:db:e2:60:4d:
         c4:87:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org