Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233322e302f32322d3233203d3e203237393739.roa
File:                     3139302e39332e3233322e302f32322d3233203d3e203237393739.roa (raw, json)
Hash identifier:          WSkROq9fJEl4VOmRDlGAKiokOkp5Z/HcwK0vX7j//V0=
Subject key identifier:   4D:2A:0E:58:C6:7A:0C:8C:FC:91:8D:26:10:E6:8F:6E:19:81:33:12
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       332E49FD3A9C914430F003E5B5FDFC01292DE690
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233322e302f32322d3233203d3e203237393739.roa
Signing time:             Tue 05 Mar 2024 18:06:20 +0000
ROA not before:           Tue 05 Mar 2024 18:01:20 +0000
ROA not after:            Tue 04 Mar 2025 18:06:20 +0000
asID:                     27979
IP address blocks:        190.93.232.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:49:fd:3a:9c:91:44:30:f0:03:e5:b5:fd:fc:01:29:2d:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Mar  5 18:01:20 2024 GMT
            Not After : Mar  4 18:06:20 2025 GMT
        Subject: CN=4D2A0E58C67A0C8CFC918D2610E68F6E19813312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:9a:4f:8f:7d:63:3f:44:b1:f4:e2:4a:24:
                    56:15:12:54:68:4f:40:3e:18:5a:3a:bf:8c:95:70:
                    a9:a1:3d:c8:7f:79:bc:9c:db:c2:29:1d:76:43:eb:
                    2a:f0:6f:d7:8a:b0:8b:fb:3b:c4:1e:dc:6b:c4:a7:
                    94:a9:8f:02:96:aa:b3:08:15:ff:53:93:dd:85:95:
                    e4:a9:9b:c5:36:2a:a2:d9:f9:89:49:87:02:ba:aa:
                    c0:0b:2d:c4:96:1d:5d:c6:1b:48:14:dd:83:b2:2e:
                    4a:22:1c:6b:22:f4:b8:36:b2:27:8a:b3:c4:d9:da:
                    e9:d3:43:b2:f2:75:6e:99:a5:9b:c1:0f:6f:ba:29:
                    1f:8b:1e:58:c3:b8:09:68:53:a6:42:0b:5d:c5:f6:
                    7d:eb:08:4f:17:87:cf:4f:67:70:b6:5c:a8:85:46:
                    94:73:ad:74:7f:37:e7:4e:82:c5:10:a9:a3:4f:cc:
                    c0:b2:25:15:19:80:e1:63:9d:0d:58:d2:7c:2c:de:
                    55:e2:4a:7b:0b:10:c3:09:39:47:74:a1:38:df:89:
                    90:cc:70:d3:6e:ec:31:4f:29:1b:50:f4:b6:0c:40:
                    33:32:11:37:c8:c5:3b:c0:18:14:22:7d:98:69:58:
                    19:8d:9c:6a:6b:fa:63:49:d6:10:b8:c3:5d:a2:14:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2A:0E:58:C6:7A:0C:8C:FC:91:8D:26:10:E6:8F:6E:19:81:33:12
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233322e302f32322d3233203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:22:f4:3a:83:84:c7:25:57:5c:99:a2:b1:a6:7e:29:fa:
         7a:bf:ba:17:88:03:c4:41:11:aa:01:04:9c:da:ba:90:de:99:
         0c:3c:44:f5:9d:1d:77:66:de:b3:67:af:f4:18:3d:76:da:c6:
         38:93:9e:e8:2a:6b:85:fd:cc:a1:06:33:35:3d:57:3e:c8:98:
         8f:8e:06:f8:78:24:57:e6:bb:32:db:7b:34:ce:05:d2:59:24:
         be:b0:bf:50:53:90:cf:35:ca:43:94:e6:19:9e:4c:0f:8e:ad:
         9d:2f:bd:38:47:33:f0:98:14:e6:9b:2c:6e:44:6b:76:8c:c3:
         34:d7:25:b1:c3:71:67:47:c6:e9:7b:75:94:d5:77:79:9b:5a:
         8a:79:06:55:ef:37:fe:1a:ec:9d:e2:de:1a:25:31:d1:82:de:
         70:8c:de:ad:f7:2d:2e:99:d6:98:10:1d:b5:ba:68:9e:ad:cf:
         77:05:06:1c:8b:58:22:43:ba:ff:5c:d1:45:2a:92:e1:6f:50:
         ac:1d:e6:e6:44:f7:87:5a:fc:5a:05:ba:31:0d:1a:55:f3:f9:
         0f:8a:fb:83:1e:98:64:3c:b8:b3:dc:99:9f:ce:2e:f0:54:ec:
         ba:30:20:01:b2:cb:a1:58:5f:72:47:b1:40:80:2f:a4:cc:cb:
         91:77:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org