Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
File:                     3139302e39362e3232342e302f31392d3231203d3e2033383136.roa (raw, json)
Hash identifier:          eUrkt/mcjI8kBAJ7J+VMiKmkMgSZZh4ptZ3Tu09rWE4=
Subject key identifier:   CE:63:99:D5:31:99:7D:21:EA:00:D8:2F:D9:22:E1:42:EE:3B:A9:51
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       6FA2AA20CC836D51B3792950B2641B9E4DAF9178
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:05:51 +0000
ROA not before:           Tue 05 Mar 2024 18:00:51 +0000
ROA not after:            Tue 04 Mar 2025 18:05:51 +0000
asID:                     3816
IP address blocks:        190.96.224.0/19 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:aa:20:cc:83:6d:51:b3:79:29:50:b2:64:1b:9e:4d:af:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:51 2024 GMT
            Not After : Mar  4 18:05:51 2025 GMT
        Subject: CN=CE6399D531997D21EA00D82FD922E142EE3BA951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:b5:57:dd:ef:f0:6b:19:92:ab:ba:7c:fc:
                    ea:c9:1b:48:66:ae:87:85:bd:89:78:47:13:f5:f9:
                    59:e8:15:d1:8f:57:22:96:f7:5b:76:0d:6d:90:be:
                    82:ee:20:24:0c:da:82:fe:47:3c:70:82:09:a5:46:
                    90:28:31:06:ff:22:32:e4:e3:79:f5:9e:63:f3:8b:
                    c8:98:d5:cb:fc:f5:67:a6:a2:e3:01:ea:2d:dd:b1:
                    51:45:29:d9:e7:3a:0c:49:2a:00:28:ba:c9:63:33:
                    d4:ba:e9:5d:89:f5:d0:6a:16:87:4c:1b:e5:31:6c:
                    11:10:61:95:09:31:e5:ee:48:3a:a3:cf:56:ab:df:
                    2f:74:b2:d9:5f:9e:59:e5:ab:92:2d:aa:98:18:05:
                    b2:6b:7d:bc:b2:64:8e:a3:52:b1:94:0e:6a:9c:65:
                    9d:c5:2e:43:e1:9a:a5:1d:1a:a1:07:68:cf:01:32:
                    7b:c4:70:3b:97:c6:1c:e8:52:67:38:55:d2:7b:5d:
                    b0:7d:bd:a2:bf:ad:28:0f:aa:55:16:f1:15:0b:87:
                    5f:82:4f:1e:b2:88:bf:36:0c:5e:86:0b:e5:a5:73:
                    6a:ee:b9:77:12:26:c9:ff:a7:4b:b2:2a:45:37:13:
                    53:d7:6f:a2:d9:36:e3:c3:86:59:38:84:94:15:51:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:63:99:D5:31:99:7D:21:EA:00:D8:2F:D9:22:E1:42:EE:3B:A9:51
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:20:e0:5e:0d:a4:06:6b:b0:a8:70:a0:e0:7f:ff:e7:bb:
         8e:a0:5e:5b:f9:c5:6f:1e:a7:fc:8c:af:cb:41:9b:6b:76:50:
         3c:44:f0:de:4a:2e:30:f6:c7:db:79:c6:5b:68:83:df:fd:93:
         43:38:eb:1c:20:04:1d:51:b3:89:e2:d8:c1:c5:43:67:29:84:
         01:04:91:3b:34:62:c9:ac:f1:af:82:58:b4:e4:d0:e6:be:7d:
         51:e2:5a:fe:cc:eb:d9:5f:b1:86:22:da:4d:81:89:61:bd:65:
         a4:13:3c:f3:d3:7e:c2:49:19:37:40:f3:f5:4f:4d:78:d8:52:
         db:2f:d9:b5:6a:e8:8d:bf:b6:c2:dd:2e:e6:2c:4b:ba:e9:05:
         14:a6:3c:39:6b:ee:0c:87:2a:09:4b:30:05:55:93:2b:3b:00:
         8f:9d:82:48:46:d1:ef:3d:7c:11:70:87:a6:e0:8f:6c:46:51:
         84:28:1d:61:d5:07:69:70:a5:57:78:70:1b:0d:97:4c:06:b6:
         16:9c:87:8f:83:c6:8c:f5:8f:91:aa:0b:9f:b0:0a:bd:dd:2d:
         37:3f:92:77:a4:4f:95:80:9f:f1:10:da:f2:da:f8:40:31:b7:
         82:d9:75:f8:a7:68:5d:ba:65:1f:a8:14:c5:d4:0a:95:bc:7b:
         44:0e:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org