Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3139302e362e3131322e302f32312d3234203d3e203237373932.roa
File:                     3139302e362e3131322e302f32312d3234203d3e203237373932.roa (raw, json)
Hash identifier:          HWJFyLu2FgY4b5kcJ6mjiXQ4GZorKPXx1W3uqAzXLH0=
Subject key identifier:   3C:DE:A5:03:07:02:81:50:06:C5:07:67:16:17:41:4C:F5:57:B8:B5
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       43D1DA3D6CC15B6982E12EC6C93E6A56C1EB18C2
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3139302e362e3131322e302f32312d3234203d3e203237373932.roa
Signing time:             Tue 05 Mar 2024 17:56:44 +0000
ROA not before:           Tue 05 Mar 2024 17:51:44 +0000
ROA not after:            Tue 04 Mar 2025 17:56:44 +0000
asID:                     27792
IP address blocks:        190.6.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d1:da:3d:6c:c1:5b:69:82:e1:2e:c6:c9:3e:6a:56:c1:eb:18:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Mar  5 17:51:44 2024 GMT
            Not After : Mar  4 17:56:44 2025 GMT
        Subject: CN=3CDEA5030702815006C507671617414CF557B8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:a2:e6:19:26:c8:0c:26:4c:48:1a:05:9d:
                    4d:d8:bb:12:a9:ae:24:d4:80:12:4e:ae:65:89:9f:
                    7e:6e:fa:7c:fd:23:37:c2:7c:b0:21:20:97:50:1a:
                    f3:55:4f:24:32:35:fc:88:d4:a0:ce:a4:6f:c3:83:
                    9c:ba:d9:ed:5b:75:c8:fe:76:d0:4d:dc:77:ca:42:
                    4b:77:38:d4:e4:50:2f:fa:9b:ef:82:a9:6d:a8:65:
                    8e:1b:2f:d5:4c:77:55:a6:a1:0a:5f:6b:63:be:a5:
                    b9:81:02:9f:8f:ef:3b:60:0d:01:16:98:7e:51:99:
                    00:1e:25:c9:8b:b7:ce:87:a6:64:f0:c2:67:32:2a:
                    ae:5f:db:37:ac:54:8c:2a:a2:a9:7f:31:09:14:c1:
                    06:05:9f:34:d5:ce:90:fe:f9:89:56:20:83:99:f0:
                    01:fb:8d:72:9b:c1:ab:20:b2:e9:19:9d:be:8c:43:
                    03:ed:d2:6e:ee:61:eb:0f:ca:08:fb:37:49:d1:0f:
                    2c:51:7c:bd:89:83:55:40:14:37:39:ea:4c:6f:e5:
                    f4:6f:1d:39:8b:f3:4e:1b:82:1a:d2:ba:dc:f4:fc:
                    b3:db:68:61:70:ba:fb:33:e9:b4:c7:4e:a6:92:75:
                    63:a6:a7:eb:6c:f3:e7:ab:37:ed:e6:61:d8:40:75:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DE:A5:03:07:02:81:50:06:C5:07:67:16:17:41:4C:F5:57:B8:B5
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3139302e362e3131322e302f32312d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:a1:b2:3e:38:94:ba:dd:d6:a9:78:64:90:23:41:f5:69:
         3c:68:f0:33:8e:f8:aa:67:a8:ff:6c:fb:7a:79:40:7b:a3:12:
         6e:34:9e:58:a0:a6:2c:46:41:09:c4:99:d3:89:a1:ef:76:17:
         2b:97:e6:cd:67:ee:fc:d1:2d:05:e9:19:15:3c:46:a2:2e:cb:
         f6:49:fd:8b:68:9c:0e:37:9f:27:be:6d:3a:3d:21:03:e2:5f:
         8c:ec:e9:8a:ac:58:35:f9:0d:2e:d4:e1:19:7c:0d:f0:50:e9:
         21:28:4a:3e:97:49:85:96:8d:53:5b:2f:dc:16:19:aa:1b:94:
         f5:aa:21:be:4f:97:a4:c2:ad:34:b4:7c:5c:c2:66:90:c4:4b:
         b9:4f:a0:79:19:bf:d2:07:c5:4e:8f:21:48:8d:2e:d0:a7:8b:
         a9:ec:a4:24:27:16:37:14:5e:eb:51:84:ed:78:99:a6:03:8c:
         36:d0:02:fd:9a:8a:34:fd:ad:78:9e:cb:42:f2:da:81:33:56:
         34:e9:48:58:9e:c2:0d:0e:e5:4b:2a:e2:f2:1d:ae:96:3d:f0:
         6b:8c:d6:49:77:64:85:d9:fc:d0:27:01:0a:ad:04:74:2e:26:
         c2:e5:79:6e:be:25:f3:b2:17:d5:68:16:f0:9d:50:ec:2e:a7:
         f2:25:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org