Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa
File:                     3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa (raw, json)
Hash identifier:          Vx9IpG21UeMleyt/JZaJldf2NpKuX4sIjJB/ShQMDCw=
Subject key identifier:   D4:E0:87:94:59:C0:50:08:C1:99:3A:4D:8E:FB:4E:FE:0E:1E:E5:07
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       5E67A43A91010EF21E52D5C21F16BA2409170C81
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa
Signing time:             Tue 05 Mar 2024 17:56:44 +0000
ROA not before:           Tue 05 Mar 2024 17:51:44 +0000
ROA not after:            Tue 04 Mar 2025 17:56:44 +0000
asID:                     27792
IP address blocks:        181.189.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:67:a4:3a:91:01:0e:f2:1e:52:d5:c2:1f:16:ba:24:09:17:0c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Mar  5 17:51:44 2024 GMT
            Not After : Mar  4 17:56:44 2025 GMT
        Subject: CN=D4E0879459C05008C1993A4D8EFB4EFE0E1EE507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:cc:b5:d0:5f:3a:91:d7:61:ad:8a:a9:1d:
                    54:88:0e:4d:dd:01:5b:00:58:c4:0f:08:9b:70:7a:
                    a3:45:3b:d1:6f:4a:17:a6:57:9a:bf:87:94:2d:f9:
                    49:8d:3f:57:1e:9b:41:d7:b1:b5:66:65:f8:3a:ef:
                    ec:ca:7b:b3:79:12:1a:bf:9f:8f:41:8a:1a:f9:4a:
                    c5:e8:a2:3c:0c:62:79:29:7e:2f:1a:14:87:6c:b4:
                    af:ee:55:21:ca:bf:89:fd:26:ed:f0:aa:dc:31:09:
                    79:65:60:7d:fb:a0:6e:0c:fd:b9:1b:76:c0:ce:c4:
                    df:9e:72:e7:c9:ba:65:6a:7e:82:9c:15:26:73:de:
                    5e:5b:b7:2a:44:b6:a2:9b:97:e5:df:cb:32:01:09:
                    9d:c6:05:23:cd:e3:6e:84:28:00:4e:d3:4f:1c:c6:
                    c8:4b:5f:01:e7:99:99:9e:6c:a3:45:65:ba:1f:c3:
                    05:68:f3:c1:05:7f:20:a4:a8:e1:af:e2:38:03:46:
                    e7:7b:7b:7a:e5:c1:5d:b6:9b:68:a5:9d:6d:d0:b6:
                    18:4c:a6:d5:4c:5c:61:8b:fc:43:b4:ed:1c:c7:74:
                    41:a8:98:26:76:90:e2:c9:1a:f4:da:f3:8d:56:ed:
                    eb:56:8b:51:2d:ad:0c:3c:52:3d:22:10:93:be:4a:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:87:94:59:C0:50:08:C1:99:3A:4D:8E:FB:4E:FE:0E:1E:E5:07
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:4e:d1:10:8b:0f:26:6f:9b:c2:a3:d8:7c:bc:13:e9:3a:
         7a:27:27:90:99:dd:fd:a7:b2:97:4b:0a:66:e8:94:81:2f:67:
         8d:fa:f3:89:c7:fe:86:51:ab:56:12:6a:11:52:1d:6d:a0:82:
         68:2c:9b:c1:3d:9f:8f:a4:6e:a4:e4:71:8e:f7:70:a1:aa:a0:
         18:f5:44:ba:69:31:40:cc:86:da:18:d4:18:f5:77:b1:06:5a:
         6b:55:4b:ef:73:8b:96:cc:d0:d8:09:7a:e6:5e:11:87:a5:bb:
         4a:2d:cf:d6:00:5a:64:41:e2:53:80:f8:87:de:51:b8:97:e7:
         4f:19:27:19:24:65:55:cf:10:72:80:c6:ca:88:e5:f4:eb:36:
         d0:fd:f5:9f:48:ea:36:29:22:96:1c:2a:65:1a:2f:b4:33:d2:
         cc:13:81:0a:51:12:e8:fd:f5:24:b1:c8:0e:70:df:86:d3:20:
         ed:80:eb:86:01:e2:c0:e4:1d:96:85:10:07:78:80:17:3b:1e:
         3a:f4:74:35:ef:bd:d5:7f:8f:f1:99:58:44:d2:ba:4a:c2:b9:
         cb:ae:07:0b:3f:23:ce:71:f9:5e:54:50:1d:94:c5:a9:50:34:
         05:5e:8e:13:3c:c1:86:76:fa:c0:8f:2c:00:9f:c3:24:db:20:
         98:ea:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org