Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE8EA5A93706E79E558FA99A1807B85B345CFC5345F48401BE1F586465E6A194/0/3139302e3132342e33322e302f32312d3234203d3e203237373432.roa
File:                     3139302e3132342e33322e302f32312d3234203d3e203237373432.roa (raw, json)
Hash identifier:          bMKwQRXFzq12GwM0zUUKlnhhNjo4JFWxc9+DVD33/ds=
Subject key identifier:   A0:A2:64:BA:61:3F:EB:AF:62:46:36:6D:C3:6C:90:D3:5A:CA:2B:0C
Certificate issuer:       /CN=544060DCE22CA77386372BE64A439D96ED01388F
Certificate serial:       20640E0E99FB5D9BF2E1F12AAAE1C599649BACDF
Authority key identifier: 54:40:60:DC:E2:2C:A7:73:86:37:2B:E6:4A:43:9D:96:ED:01:38:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/544060DCE22CA77386372BE64A439D96ED01388F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE8EA5A93706E79E558FA99A1807B85B345CFC5345F48401BE1F586465E6A194/0/3139302e3132342e33322e302f32312d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:05:19 +0000
ROA not before:           Tue 05 Mar 2024 18:00:19 +0000
ROA not after:            Tue 04 Mar 2025 18:05:19 +0000
asID:                     27742
IP address blocks:        190.124.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE8EA5A93706E79E558FA99A1807B85B345CFC5345F48401BE1F586465E6A194/0/544060DCE22CA77386372BE64A439D96ED01388F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE8EA5A93706E79E558FA99A1807B85B345CFC5345F48401BE1F586465E6A194/0/544060DCE22CA77386372BE64A439D96ED01388F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/544060DCE22CA77386372BE64A439D96ED01388F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:64:0e:0e:99:fb:5d:9b:f2:e1:f1:2a:aa:e1:c5:99:64:9b:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544060DCE22CA77386372BE64A439D96ED01388F
        Validity
            Not Before: Mar  5 18:00:19 2024 GMT
            Not After : Mar  4 18:05:19 2025 GMT
        Subject: CN=A0A264BA613FEBAF6246366DC36C90D35ACA2B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:96:8e:c9:a9:47:75:b6:a6:4f:b6:8a:96:
                    c3:83:1f:e0:e4:cf:4f:d1:e4:8c:fb:29:ad:23:7a:
                    bb:4f:c6:43:05:62:0d:16:60:04:7f:e8:77:df:46:
                    b8:0a:b2:c5:7a:60:6b:1e:1a:44:e5:2d:5f:ea:81:
                    ce:41:fe:55:5b:21:ac:d4:41:ed:f0:b4:23:99:12:
                    6f:66:17:76:1e:a7:70:f0:b6:11:2e:8f:4c:fd:9b:
                    89:0c:19:05:59:b4:12:ae:d6:af:9a:cc:3e:2c:b3:
                    6d:20:b9:c6:62:02:8e:17:e8:f0:10:3d:68:80:b5:
                    d8:a7:64:ff:d1:a0:a0:b3:0b:ee:f6:61:e2:57:1f:
                    6f:53:f0:da:4d:1a:fb:b7:9f:9d:a5:19:fe:84:bc:
                    e2:5a:66:73:4a:08:89:de:48:35:79:7e:9e:80:a4:
                    3e:45:25:ce:a0:35:57:e5:71:49:1e:4d:83:ea:93:
                    c8:dd:77:1f:d0:80:e3:77:1c:0d:61:fc:85:b2:97:
                    0f:c8:77:49:42:3a:2b:c3:5d:61:c9:8a:d8:08:54:
                    7a:86:43:0f:92:7d:08:e0:52:30:64:6c:f5:92:ce:
                    0a:d9:76:c5:a4:1e:53:02:e0:9b:18:61:c4:47:5d:
                    4a:37:e4:9b:d6:41:f9:0d:c7:60:1a:8e:6c:d6:ce:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A2:64:BA:61:3F:EB:AF:62:46:36:6D:C3:6C:90:D3:5A:CA:2B:0C
            X509v3 Authority Key Identifier:
                keyid:54:40:60:DC:E2:2C:A7:73:86:37:2B:E6:4A:43:9D:96:ED:01:38:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE8EA5A93706E79E558FA99A1807B85B345CFC5345F48401BE1F586465E6A194/0/544060DCE22CA77386372BE64A439D96ED01388F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/544060DCE22CA77386372BE64A439D96ED01388F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE8EA5A93706E79E558FA99A1807B85B345CFC5345F48401BE1F586465E6A194/0/3139302e3132342e33322e302f32312d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:26:24:7e:0d:92:9c:53:ba:4a:f9:24:ec:2f:cd:df:ab:20:
         b4:85:f2:af:a4:92:72:8f:03:1d:67:46:80:f7:78:ce:cd:35:
         0f:f7:7f:f2:d7:5f:1b:a8:99:5e:00:fd:ac:76:08:39:dc:9b:
         9a:c7:c1:15:69:f4:4d:55:8d:56:a8:ef:b0:c4:ab:a4:98:b6:
         87:2f:90:ca:87:18:9d:e7:61:7f:89:51:7a:ab:a1:9f:f5:60:
         d4:5f:39:8b:b0:94:e4:eb:10:9d:f7:ec:1d:3a:23:21:16:9b:
         ed:f9:8f:f2:22:82:91:48:16:d7:96:f4:e4:c0:af:b9:b0:c1:
         3a:9a:1b:c1:35:11:9e:0d:1a:61:d1:6a:1a:30:3f:38:20:39:
         de:2f:d5:0c:c5:ad:35:fc:f8:06:fa:06:b9:c9:52:1f:d8:14:
         84:cc:d0:97:9c:51:ea:fe:40:d2:fa:d3:00:a9:6a:ae:76:d2:
         ae:01:f2:b7:67:5d:a2:23:65:eb:b0:1c:dd:bf:5c:01:3b:8e:
         35:6d:a7:8e:07:00:bf:42:bf:da:4f:dc:8d:e5:1c:cb:2c:69:
         3c:57:f1:8c:d6:ac:61:6c:6b:b0:0c:38:d5:fb:e3:17:b1:6c:
         be:09:be:a8:6c:0f:7a:a6:26:92:cc:ce:82:6c:80:7f:e7:3c:
         a2:46:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:52:04 2024 by rpki-client on console-fra.rpki-client.org