Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233352e302f32342d3234203d3e203237393739.roa
File:                     3139302e39332e3233352e302f32342d3234203d3e203237393739.roa (raw, json)
Hash identifier:          WRjEV4HlUerIGXoJQXQUJSOozlZQUKoz8j0ccYUoPO4=
Subject key identifier:   AD:34:DE:0A:93:5D:AA:2E:6B:32:CE:3E:20:A7:32:DD:A4:39:3E:52
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       4D136DDCFAF0A182D575C6DBCE6166FB18247AF1
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233352e302f32342d3234203d3e203237393739.roa
Signing time:             Tue 05 Mar 2024 18:06:20 +0000
ROA not before:           Tue 05 Mar 2024 18:01:20 +0000
ROA not after:            Tue 04 Mar 2025 18:06:20 +0000
asID:                     27979
IP address blocks:        190.93.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:13:6d:dc:fa:f0:a1:82:d5:75:c6:db:ce:61:66:fb:18:24:7a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Mar  5 18:01:20 2024 GMT
            Not After : Mar  4 18:06:20 2025 GMT
        Subject: CN=AD34DE0A935DAA2E6B32CE3E20A732DDA4393E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:00:ca:12:09:40:70:3e:d0:8a:4a:62:1d:
                    2c:c5:f1:c0:79:f7:07:c7:07:ac:ea:97:63:14:e6:
                    bd:0c:52:1a:c2:01:97:0a:b4:e8:bd:e8:bc:0c:27:
                    c4:84:f7:ef:0c:8d:70:fc:8b:dd:e2:17:5f:c0:b2:
                    93:93:21:38:c3:65:ad:17:8d:bb:7a:e4:62:84:62:
                    7b:89:3d:f4:f8:73:99:bb:a2:ac:b4:99:79:e3:96:
                    81:2c:62:e6:13:94:7c:03:57:81:3e:63:36:7a:c1:
                    de:00:50:f3:fa:9c:e1:a2:0b:9a:05:19:e0:db:15:
                    be:7c:5f:40:ea:53:12:ff:26:d1:4a:37:c1:ae:b0:
                    9d:c7:04:06:07:ac:14:11:3d:2f:9c:b9:cd:ad:b4:
                    2d:d1:6b:62:e4:80:23:f0:39:fd:6a:16:b0:26:46:
                    13:52:88:63:0e:fa:04:a5:a2:3a:47:9a:09:00:aa:
                    bd:41:ae:79:6a:6d:e8:14:61:25:c3:71:50:3d:a2:
                    31:aa:e7:c2:34:17:bf:14:ea:17:b7:db:eb:2f:b3:
                    4c:59:7b:96:33:6b:3e:af:d6:b2:c3:12:6c:fc:d7:
                    d4:91:9f:25:3d:54:64:7d:75:01:d3:d5:03:0b:f9:
                    f1:3f:98:8e:72:dd:97:7d:66:35:dd:fc:fd:e2:6d:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:DE:0A:93:5D:AA:2E:6B:32:CE:3E:20:A7:32:DD:A4:39:3E:52
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233352e302f32342d3234203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:40:40:c6:82:1f:92:4f:f9:5f:87:01:5f:3c:42:2f:51:24:
         35:72:6a:1b:b3:cb:d9:41:e4:0c:17:b6:d2:84:04:e2:98:10:
         7d:87:00:1c:7f:6e:25:8b:0f:6d:8e:c3:40:e5:8e:87:89:13:
         74:be:99:5a:f8:5c:79:28:c8:d1:6e:a0:62:d7:1f:3d:d4:b2:
         fa:3f:d9:24:b2:18:58:d4:33:b7:2d:79:83:36:ee:99:86:9d:
         0b:f9:1b:de:02:a5:39:34:ed:3d:0b:18:d1:f5:db:2b:45:71:
         9b:42:47:93:0f:57:91:8b:77:a5:8f:a8:87:4a:e4:77:0d:54:
         27:e1:14:bc:86:b0:37:61:12:21:ff:d7:c0:cf:11:c7:17:10:
         4d:7a:97:f1:0c:2f:8a:8c:6c:65:ff:cf:ae:f2:8c:87:75:21:
         96:85:f3:62:9a:2a:ce:4c:c7:80:14:09:c6:6f:e4:85:eb:e8:
         97:af:15:9f:18:be:e1:b3:04:58:be:bd:5f:91:16:27:ee:01:
         03:12:0f:30:74:d4:4a:9e:d2:ee:cb:5c:fc:4c:c0:a7:be:22:
         1b:ad:16:e3:4b:89:f6:f5:b1:e5:7c:09:e7:a0:7d:d5:33:dc:
         81:26:32:79:7d:8a:21:ef:98:7a:0f:77:58:27:79:7c:c7:70:
         f0:b8:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org