Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f31392d3234203d3e2033383136.roa
File:                     3139302e31332e302e302f31392d3234203d3e2033383136.roa (raw, json)
Hash identifier:          T2ax4A8KNOm/EsyH+RSqSFyz5dIg7MPGfTn8PbBWfkY=
Subject key identifier:   AA:A9:5A:DD:D4:61:BA:1F:5D:D7:28:DB:6B:7D:17:A6:FE:B3:0D:D5
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       1F469F4091B8DED6D4654E9CD5F22B8EA585A861
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f31392d3234203d3e2033383136.roa
Signing time:             Thu 11 Jul 2024 15:45:00 +0000
ROA not before:           Thu 11 Jul 2024 15:40:00 +0000
ROA not after:            Thu 10 Jul 2025 15:45:00 +0000
asID:                     3816
IP address blocks:        190.13.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:46:9f:40:91:b8:de:d6:d4:65:4e:9c:d5:f2:2b:8e:a5:85:a8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jul 11 15:40:00 2024 GMT
            Not After : Jul 10 15:45:00 2025 GMT
        Subject: CN=AAA95ADDD461BA1F5DD728DB6B7D17A6FEB30DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:a5:eb:87:eb:50:8d:8f:29:98:87:1a:79:
                    40:e4:83:b6:9d:34:21:69:98:80:fa:22:19:3f:ec:
                    54:96:bb:10:51:a1:e3:42:f2:09:e4:66:ee:9c:3d:
                    11:8b:7e:ca:a6:d8:35:08:9a:ea:83:27:1e:ad:79:
                    7f:09:b3:54:d6:79:f9:48:78:f2:bb:67:e5:d1:1e:
                    fa:e5:ee:a8:3c:d6:74:e9:5c:47:d9:fe:fd:8c:35:
                    34:6f:c7:ad:32:3e:5d:0f:7b:6b:e3:a6:2e:80:f8:
                    77:05:71:0e:78:ef:2e:a4:aa:91:e2:b4:34:f2:a6:
                    42:dc:59:db:a1:27:9d:8c:3b:e9:2d:8c:3b:b9:e5:
                    2a:10:f5:90:23:c5:60:5e:e6:24:b0:ee:a4:3c:ad:
                    ce:d5:19:06:4c:70:e0:99:6e:b4:a5:82:e6:a1:e2:
                    57:43:db:42:eb:f1:b5:88:39:ab:23:29:73:ae:8a:
                    13:89:b4:a5:14:a4:f7:b5:83:0b:e8:7d:25:b8:4a:
                    bb:1a:3b:db:34:e1:ab:b0:10:a1:09:cb:3a:64:15:
                    68:ec:ca:11:57:92:2f:21:4e:7f:35:df:91:99:e9:
                    13:01:e6:96:d7:0e:ad:a3:17:19:b0:07:dd:0f:2a:
                    ab:53:1c:12:6a:d5:ad:a1:60:fb:74:0e:fe:e7:92:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:5A:DD:D4:61:BA:1F:5D:D7:28:DB:6B:7D:17:A6:FE:B3:0D:D5
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e302e302f31392d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:85:85:6a:31:4a:11:4b:6b:a1:e2:1e:66:96:9f:68:cd:
         d7:97:47:d4:a3:0b:0b:ed:a1:3b:dc:36:71:71:46:08:3f:ba:
         87:ea:0b:5d:d0:4c:78:45:e4:9c:58:bf:f0:d0:d9:17:7c:59:
         cd:9f:86:d0:8e:3d:7b:46:4d:98:7e:22:11:81:a7:2d:36:b4:
         07:6a:9f:1e:8c:cb:5d:b9:f5:8b:5b:75:87:b2:61:fe:8d:5c:
         ae:91:b5:0c:7f:4e:e7:f3:f1:25:15:2b:40:a7:dc:d2:13:44:
         ce:74:81:e3:ec:c1:fb:0b:a9:ae:b1:4b:63:6d:0b:19:70:6d:
         13:0b:3b:03:cc:56:7f:13:ba:8c:79:0e:15:2a:13:70:11:14:
         c3:0b:22:3e:1b:be:4c:c5:84:51:76:04:db:26:fe:98:f3:5c:
         f8:fc:12:5f:0a:24:4f:0b:f3:ba:b6:56:af:61:c9:5a:32:f9:
         45:ed:75:ad:3d:f7:3e:97:8f:0e:f9:39:67:d8:bd:0d:4f:7d:
         9f:ab:98:4e:63:58:79:9c:3b:96:8d:88:a3:e8:78:8c:55:29:
         21:03:19:4d:75:85:3f:ee:24:05:65:2d:61:61:7d:d2:4e:d4:
         7c:36:42:56:fb:a9:88:f7:b8:fd:d2:1b:a9:96:2f:4e:79:1a:
         9b:07:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org