Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa
File:                     3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa (raw, json)
Hash identifier:          HORUvrascAEn16hzb6N4rVk8VCFgwI9d7S3kvtCdBpE=
Subject key identifier:   01:5C:8A:FB:89:98:33:7A:31:F3:4E:BC:C9:45:C3:34:0A:F1:79:1D
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5EB1FF57532A279A5CD7DA1FC5CDDE921817A5DF
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa
Signing time:             Thu 27 Jun 2024 18:25:01 +0000
ROA not before:           Thu 27 Jun 2024 18:20:01 +0000
ROA not after:            Thu 26 Jun 2025 18:25:01 +0000
asID:                     3816
IP address blocks:        190.184.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b1:ff:57:53:2a:27:9a:5c:d7:da:1f:c5:cd:de:92:18:17:a5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jun 27 18:20:01 2024 GMT
            Not After : Jun 26 18:25:01 2025 GMT
        Subject: CN=015C8AFB8998337A31F34EBCC945C3340AF1791D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:39:71:5b:d9:89:2b:97:fc:17:58:25:35:
                    83:39:b6:5c:52:42:f0:b1:ab:05:55:5f:a9:ba:ef:
                    7b:10:b8:41:74:40:c1:66:a4:da:72:97:aa:a8:b7:
                    c2:73:40:3c:f8:03:b8:f7:3b:87:f0:f0:b5:46:00:
                    13:69:98:11:41:9d:1b:7b:0f:0c:06:b1:4a:89:72:
                    76:cb:1d:d3:aa:9e:c0:3e:ab:32:38:5b:70:27:a8:
                    85:3e:57:b0:77:50:98:d5:0f:7d:89:0a:1d:b5:07:
                    fe:59:62:d0:56:f5:10:7a:4e:a5:05:fc:39:fa:fd:
                    d7:40:cb:b5:60:62:b5:a9:9c:96:66:f2:cf:c7:29:
                    6d:f4:1f:5d:f7:c6:43:3b:cf:e9:ac:93:a2:2c:34:
                    9e:71:de:26:23:75:17:74:49:f9:35:d6:c3:ce:a7:
                    a5:66:75:3b:6f:ed:4b:c6:28:6c:a1:21:cd:58:7f:
                    57:09:e1:07:91:57:92:61:29:e6:dc:78:dc:66:1b:
                    06:e1:c9:7b:08:ef:f3:f1:64:4b:5c:58:e0:91:62:
                    d7:a0:98:91:13:3d:c1:b0:51:a1:ac:af:4d:0c:28:
                    29:15:51:44:2b:9c:cc:67:22:7f:0f:e5:e0:48:a9:
                    26:47:b2:8e:14:2c:6a:d4:e5:72:ba:6f:69:11:96:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5C:8A:FB:89:98:33:7A:31:F3:4E:BC:C9:45:C3:34:0A:F1:79:1D
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3135322e302f32312d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:36:b4:4e:75:d4:03:df:21:b3:14:18:ba:76:d9:00:df:60:
         1e:21:fb:4d:f7:e4:5b:59:93:f3:c5:77:07:31:37:b8:05:b6:
         69:ef:2d:29:8e:28:3b:16:2e:53:cd:3f:73:6e:ce:aa:61:a1:
         55:b8:bc:05:53:7d:77:0f:e5:b6:71:f5:c8:48:9e:54:26:22:
         14:66:6f:b6:45:ab:ea:03:01:1f:ac:e0:6e:ab:60:ba:77:c8:
         bd:4e:c7:f0:a7:d9:39:1b:3f:fc:82:37:3a:c5:e8:cb:64:05:
         53:31:45:05:f6:14:f8:74:3a:51:53:7f:25:1f:f9:f5:43:0e:
         da:8c:9e:44:69:1d:ca:49:93:1b:10:9e:4e:e6:30:2a:a6:b7:
         3b:af:d2:42:92:32:d4:0c:d9:a3:b1:62:00:7d:ef:7a:72:cd:
         d2:96:94:9c:00:07:0d:b7:5f:d3:d4:9e:4b:11:3f:7d:90:25:
         85:a5:3c:57:92:47:85:a9:c3:eb:88:fa:7b:bc:e5:0f:86:4b:
         3b:a2:fa:0e:f9:97:9f:db:02:ad:84:cf:44:3b:a2:ff:e6:fd:
         6e:54:32:b4:8f:28:28:a4:26:cf:08:6c:ce:34:f9:ff:ad:5f:
         ef:f6:5c:d0:53:21:27:71:64:36:57:e4:8e:f7:b6:7f:15:61:
         25:50:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org