Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
File:                     3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa (raw, json)
Hash identifier:          It8gtdY35NW/5ZecuBIVEU47Rwgv/DteOMk6sw+tc0Q=
Subject key identifier:   CE:0E:61:1F:80:59:37:44:FB:7C:22:DD:E0:26:E0:A9:78:09:FE:57
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       1B26B93ED0ACA1D0D466B7F556102CC570FC3F3E
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:12 +0000
ROA not before:           Tue 05 Mar 2024 18:02:12 +0000
ROA not after:            Tue 04 Mar 2025 18:07:12 +0000
asID:                     52330
IP address blocks:        190.184.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:26:b9:3e:d0:ac:a1:d0:d4:66:b7:f5:56:10:2c:c5:70:fc:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:12 2024 GMT
            Not After : Mar  4 18:07:12 2025 GMT
        Subject: CN=CE0E611F80593744FB7C22DDE026E0A97809FE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:78:ed:16:ba:33:fa:75:31:38:1e:39:f0:
                    6c:90:af:27:ba:5f:04:56:db:2b:3b:51:37:7d:b6:
                    39:75:33:7a:9b:a9:cb:a3:56:8d:e1:78:64:11:4e:
                    0f:e9:72:3f:c7:02:c0:9b:ac:d2:f6:d0:29:0d:e9:
                    19:5b:bf:1e:48:a0:e5:7b:9d:e9:47:f3:63:9b:e1:
                    1f:08:91:0b:06:72:72:c3:a0:b8:7b:e0:36:4d:13:
                    b6:35:0d:56:43:32:b2:af:83:22:ba:11:e4:5a:04:
                    8c:90:2d:b8:90:20:af:e6:60:b7:1a:0c:5a:ea:4f:
                    f3:e0:7a:b1:00:13:56:03:51:ce:13:a9:2b:d4:39:
                    ae:c0:58:f4:6b:c1:e9:68:4d:8e:03:1f:38:59:e8:
                    8e:06:f1:0e:a6:77:d0:a7:3b:27:33:f3:dd:25:46:
                    3b:d6:7e:ea:06:bf:e4:3b:21:53:d7:e9:1c:28:54:
                    f4:a7:ae:8e:36:49:a6:49:42:d0:9f:8d:93:68:67:
                    d4:ea:ce:75:2a:8c:58:e6:de:4e:df:3b:aa:4c:ed:
                    3e:57:b9:66:ea:c9:35:96:29:e9:d3:bf:b5:6a:75:
                    5c:8e:d3:4d:7c:ec:7b:a4:2d:4a:3c:11:c5:4d:7f:
                    49:71:32:4f:74:c7:ba:65:ea:50:74:5d:7a:26:2e:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:61:1F:80:59:37:44:FB:7C:22:DD:E0:26:E0:A9:78:09:FE:57
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:86:cf:49:ce:a0:55:33:8f:ce:8e:f1:66:fc:73:e6:66:cf:
         67:77:81:a2:30:00:97:43:77:b1:ec:54:5c:d3:9d:30:13:ad:
         58:1d:63:d1:d6:e0:87:a0:61:83:3d:84:78:bd:ff:37:35:81:
         76:6b:ab:13:b1:e8:ec:65:07:92:bc:43:01:0b:85:80:79:ea:
         99:c4:59:8a:10:d0:84:2b:20:b0:a7:6a:4a:fe:82:04:5e:5a:
         a6:84:10:33:f5:67:f3:a9:69:02:18:ee:10:61:da:cf:06:1a:
         25:5f:7f:92:dd:a4:2a:9a:60:1a:5c:b7:a4:58:d9:eb:19:cc:
         f3:85:d9:8a:bf:b6:fd:4f:7c:e8:cd:72:34:2b:76:e6:8d:ea:
         98:aa:96:a0:13:45:40:72:fa:63:d8:8b:b1:47:62:be:d3:f4:
         8c:31:05:58:41:67:6f:1c:40:a8:37:e4:be:3f:b0:d2:6e:a5:
         25:44:81:7e:88:9e:f7:86:60:a9:b3:da:5a:d4:de:7b:1a:f4:
         c1:90:84:51:fc:89:17:d6:6e:6a:be:c2:bc:5d:72:6c:48:bb:
         76:40:95:ed:ec:70:37:61:f7:5e:73:52:cf:a8:ae:6d:11:1d:
         8d:bf:80:9a:50:57:7f:da:96:02:e5:e6:3b:ed:a5:f2:fa:94:
         45:50:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 14:08:40 2024 by rpki-client on console-ams.rpki-client.org