Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa
File:                     3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa (raw, json)
Hash identifier:          0DPDQWzi/ljeb8i4qFutJNnpwH1keaw2RGJr9ijiRG0=
Subject key identifier:   61:D6:D0:A1:4E:A8:3A:63:99:88:EC:EE:FB:2D:15:6F:6F:9D:65:8C
Certificate issuer:       /CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
Certificate serial:       428D4E77E8536E777B11C0516712FE05AEB96089
Authority key identifier: 55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa
Signing time:             Tue 05 Mar 2024 17:54:01 +0000
ROA not before:           Tue 05 Mar 2024 17:49:01 +0000
ROA not after:            Tue 04 Mar 2025 17:54:01 +0000
asID:                     262192
IP address blocks:        190.13.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8d:4e:77:e8:53:6e:77:7b:11:c0:51:67:12:fe:05:ae:b9:60:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
        Validity
            Not Before: Mar  5 17:49:01 2024 GMT
            Not After : Mar  4 17:54:01 2025 GMT
        Subject: CN=61D6D0A14EA83A639988ECEEFB2D156F6F9D658C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:45:fc:82:ab:18:a2:c3:f3:05:9e:cd:36:
                    63:2b:73:ff:f7:f7:6e:c0:e9:92:43:69:e5:a6:48:
                    7e:bd:24:55:59:84:3d:4e:50:cd:a2:33:ea:a3:50:
                    86:b4:2b:2b:63:a7:2c:2d:ea:b9:32:f7:91:e9:50:
                    9f:84:43:08:7e:49:c4:12:33:9b:1c:0b:c6:ff:3b:
                    fc:a6:85:21:a4:97:c0:6f:aa:88:e0:40:0b:1e:ec:
                    9d:8b:3c:88:54:ec:e3:8a:bc:82:62:f8:55:36:75:
                    2a:f8:0d:62:b8:17:b6:af:e8:b1:2c:68:35:a1:ce:
                    ff:d3:32:02:e6:bd:bc:b9:c4:5d:4e:8f:d5:54:73:
                    fc:60:2e:44:2e:8b:50:3a:a2:f1:22:ab:ae:9d:89:
                    c0:fa:42:50:81:6f:65:97:ed:16:da:26:37:98:2b:
                    32:22:a4:ea:d6:c4:c1:c6:45:36:0c:0a:a8:2a:75:
                    d1:7b:8e:25:7d:51:5d:80:89:ba:14:4e:30:e5:18:
                    7b:85:55:27:c0:09:34:7a:aa:5f:32:22:8f:e8:d4:
                    60:8f:45:ed:f6:0d:ff:a8:d7:05:b1:cd:51:3b:0a:
                    ea:16:a9:b0:24:02:ed:d4:4b:54:65:a0:02:79:ee:
                    9b:c6:5c:a4:2f:57:17:b7:8b:c9:5f:6d:f5:b7:54:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:D0:A1:4E:A8:3A:63:99:88:EC:EE:FB:2D:15:6F:6F:9D:65:8C
            X509v3 Authority Key Identifier:
                keyid:55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3139302e31332e3230382e302f32312d3234203d3e20323632313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:eb:c8:ad:f6:3d:a5:dd:48:22:0a:48:b4:73:88:0d:f2:
         44:ec:13:5b:8c:a8:54:15:97:f7:92:b3:80:c0:b9:f7:07:27:
         91:e8:db:33:03:e2:4b:a6:cb:b5:ae:2b:0e:0e:b9:91:af:0f:
         43:d8:7e:ba:16:ef:e6:97:b0:15:e5:58:ee:36:da:1c:ec:d3:
         71:f7:27:0e:bb:a8:b6:41:cb:a8:84:95:23:5d:0e:65:80:f4:
         5d:8e:a4:6d:29:43:f7:9b:fe:84:96:c5:82:b3:d1:aa:88:0a:
         e6:95:6e:19:31:7c:39:df:d3:df:93:4b:84:f8:14:38:9b:0d:
         e1:31:11:14:b9:b4:1c:a6:5b:0c:66:ce:53:c3:cf:3d:21:69:
         d8:fd:ed:38:65:fa:f7:2d:26:23:9f:0e:e9:48:76:88:59:e9:
         36:52:9c:bf:ad:1b:83:cb:cf:ad:3a:51:c4:42:c1:b6:dd:06:
         a8:a6:96:41:2d:5d:ee:13:cb:fc:24:9e:f7:45:af:c2:fc:2b:
         06:8d:2c:37:94:b3:41:39:d6:77:e9:85:42:af:c2:2f:68:cd:
         20:50:c9:07:9b:4e:fe:ca:1b:e0:c0:48:d1:0a:77:51:9e:8f:
         77:68:38:b0:3b:43:52:64:2c:49:2e:1c:52:32:d7:79:60:8f:
         57:a0:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org