Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/3139302e3131352e302e302f32302d3234203d3e203532343638.roa
File:                     3139302e3131352e302e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          UGhi56Nneh4mwA3DaiCCEwJ1e6t7WOxh7UOGGEPK/3A=
Subject key identifier:   B3:4A:40:80:57:01:58:3F:9E:B0:4E:41:F0:07:87:48:67:89:8B:90
Certificate issuer:       /CN=118F90F371D9C027A32B54664D90927AD358EA5B
Certificate serial:       11037CB448E73411A9B4F5D63E3193F1DEFD2A3A
Authority key identifier: 11:8F:90:F3:71:D9:C0:27:A3:2B:54:66:4D:90:92:7A:D3:58:EA:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/3139302e3131352e302e302f32302d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:46:33 +0000
ROA not before:           Tue 05 Mar 2024 17:41:33 +0000
ROA not after:            Tue 04 Mar 2025 17:46:33 +0000
asID:                     52468
IP address blocks:        190.115.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:03:7c:b4:48:e7:34:11:a9:b4:f5:d6:3e:31:93:f1:de:fd:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118F90F371D9C027A32B54664D90927AD358EA5B
        Validity
            Not Before: Mar  5 17:41:33 2024 GMT
            Not After : Mar  4 17:46:33 2025 GMT
        Subject: CN=B34A40805701583F9EB04E41F007874867898B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:ec:a6:4e:62:19:c8:f9:fa:d3:ee:22:c3:
                    7c:5e:71:04:85:e8:b4:a5:6b:2a:0f:15:f1:9c:a3:
                    d1:27:b9:09:5e:47:de:c2:72:01:11:8f:38:52:79:
                    89:af:b7:61:da:be:11:d6:8b:fc:9e:df:ce:39:0c:
                    2d:02:7f:8d:ca:d0:14:41:2e:08:76:2d:1a:88:c6:
                    ee:e5:c0:20:85:a7:a8:1a:78:66:d1:06:4e:3f:0d:
                    0e:c3:1a:35:55:17:dd:b3:91:88:9b:53:5c:a2:30:
                    ca:88:69:2a:bb:4e:e9:1c:e3:16:a0:9a:d4:2b:12:
                    f4:1d:4e:15:74:26:e8:2b:69:ac:c6:f4:ba:40:f5:
                    25:54:08:a9:c0:12:66:f5:4f:b9:ed:38:d8:fd:57:
                    af:fd:4e:5b:5c:f7:14:e6:7b:87:3a:3e:a3:dd:0f:
                    75:63:e6:70:9a:c9:8f:6b:e9:69:28:fe:ff:50:76:
                    46:98:3c:7e:a6:98:ca:59:97:f8:7e:18:cc:f3:d2:
                    91:ca:40:f2:8c:16:a8:62:5c:d8:e4:44:10:78:fb:
                    50:c0:0b:44:81:5d:5a:b0:36:c9:df:72:29:8b:57:
                    7e:13:76:69:a1:6b:4b:53:30:89:30:43:73:6f:b0:
                    57:0e:08:6b:c6:2a:d7:23:9a:80:66:15:3b:94:97:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:40:80:57:01:58:3F:9E:B0:4E:41:F0:07:87:48:67:89:8B:90
            X509v3 Authority Key Identifier:
                keyid:11:8F:90:F3:71:D9:C0:27:A3:2B:54:66:4D:90:92:7A:D3:58:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/3139302e3131352e302e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:50:43:94:a6:3f:94:63:4f:ff:1f:25:9d:61:74:f4:e6:
         4c:a3:c5:ba:bd:0f:e3:0c:04:51:b2:29:f4:c8:bf:f8:df:e1:
         cd:58:c4:ee:9f:cf:dd:cf:06:f5:5f:c6:f1:36:44:01:ff:9c:
         7e:92:1e:12:7f:ce:58:fb:76:d9:ad:a4:e8:2f:19:ef:a9:41:
         51:ee:8b:dc:35:81:bb:e7:96:48:a0:47:1b:c2:b9:ee:52:95:
         a1:75:00:8b:97:6a:07:ec:ac:d4:f5:53:c6:54:e3:a7:ca:17:
         9e:38:dc:73:8e:23:7b:dc:6c:05:e1:44:b0:36:fc:dc:40:9a:
         83:b3:a2:5e:05:dc:80:19:63:05:97:d6:4b:09:fd:47:65:ac:
         41:e5:02:f6:83:2d:d2:9c:11:c8:ce:26:d6:fb:cd:2c:d4:35:
         ec:33:82:a0:f9:2d:b5:f6:a3:bb:6c:ec:09:3d:8b:aa:28:09:
         44:5b:fd:29:0c:a8:be:ff:a1:f4:cb:27:77:89:94:03:da:1b:
         34:2d:e7:2f:26:f4:0d:ec:95:05:75:c0:cf:fc:1d:5a:f9:e0:
         79:08:d8:cd:6d:bc:bc:64:25:5c:85:30:b1:f2:51:05:32:64:
         2b:b6:f9:95:fb:5e:4b:21:1d:fb:f4:3f:95:92:3a:a4:c4:24:
         b7:ef:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:34:52 2024 by rpki-client on console-fra.rpki-client.org