Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130372e302f32342d3234203d3e203532343338.roa
File:                     3139302e3138352e3130372e302f32342d3234203d3e203532343338.roa (raw, json)
Hash identifier:          wGmip9/w/8fFjMHSR1sVpgu8zNY01FRsr28jrGoEGE4=
Subject key identifier:   B1:99:27:94:A5:69:33:9D:6D:73:66:3D:A8:E7:A9:45:F3:48:E3:34
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       36E30D55088EE4C92A821D6427D1E20F52824EC5
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130372e302f32342d3234203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:36 +0000
ROA not before:           Tue 05 Mar 2024 17:35:36 +0000
ROA not after:            Tue 04 Mar 2025 17:40:36 +0000
asID:                     52438
IP address blocks:        190.185.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e3:0d:55:08:8e:e4:c9:2a:82:1d:64:27:d1:e2:0f:52:82:4e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:36 2024 GMT
            Not After : Mar  4 17:40:36 2025 GMT
        Subject: CN=B1992794A569339D6D73663DA8E7A945F348E334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:7b:8c:54:98:63:77:20:f6:e5:47:31:d9:
                    ce:eb:e6:d3:d5:fd:69:2d:01:67:89:f6:52:82:fe:
                    40:e7:27:2c:fa:f6:71:38:f2:f8:1a:3c:82:db:d6:
                    1a:58:c0:31:6e:c7:5c:91:a0:34:64:7a:00:78:a1:
                    77:79:a7:4d:7d:bc:26:cb:94:78:c1:b4:62:27:b6:
                    bd:e8:be:70:f0:dd:8d:6d:72:ee:dc:07:43:3a:86:
                    f1:ba:ed:e5:c5:b1:15:80:84:ad:97:79:5f:43:df:
                    58:22:a9:08:ba:30:61:38:ea:57:4a:93:38:24:9a:
                    e6:02:ff:a8:5e:96:80:44:dc:b8:9e:2f:50:44:6d:
                    4c:73:bf:de:3b:92:e8:a4:33:8f:d3:ea:12:81:51:
                    aa:74:0a:70:28:f8:90:fa:2f:b9:32:7c:00:ca:22:
                    21:81:5a:6a:c2:89:0e:ec:20:53:2c:c2:46:85:57:
                    2c:78:11:8a:da:7a:cc:4a:0d:46:6c:b0:a8:1b:7a:
                    ab:c1:58:f7:22:74:96:cd:49:a7:29:c7:f9:95:85:
                    18:9d:66:de:6b:9f:ae:a8:19:cf:5c:1f:45:82:2f:
                    53:b8:19:f8:24:10:e8:d9:c2:61:3b:56:65:ee:72:
                    ba:63:86:3e:60:7c:bd:f0:a2:c0:72:3f:81:7b:b3:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:27:94:A5:69:33:9D:6D:73:66:3D:A8:E7:A9:45:F3:48:E3:34
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130372e302f32342d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:20:b6:f1:a1:7a:a3:1c:16:ec:2e:73:3b:7b:5c:59:2c:da:
         d7:7b:4f:44:8a:a9:1d:c2:69:cf:1c:42:bb:6a:44:28:e0:0a:
         b1:6a:8e:00:e4:0a:b0:8d:77:26:07:1b:54:02:d0:ad:88:ee:
         28:47:c7:b5:8e:14:bf:b4:b2:f0:5f:aa:a5:4c:50:25:08:54:
         23:2d:27:1f:80:ae:5b:52:36:22:7b:f4:f6:20:16:87:95:4d:
         63:a3:bf:d5:2e:ff:53:b2:23:f2:a8:11:2e:0a:08:b0:69:a2:
         3a:b0:3d:8b:df:54:43:1e:ba:1b:37:d7:0d:03:3c:5d:6d:18:
         0c:6a:84:62:85:af:91:03:73:ac:7f:c2:ff:ca:24:a1:9a:92:
         b0:b1:09:08:f6:a3:0d:75:2e:be:cf:f3:2e:7e:60:f2:14:57:
         54:3e:9b:cf:e1:4d:02:1c:ff:5e:21:27:89:0f:4e:0b:fe:67:
         60:81:3b:45:31:fb:c3:3c:ed:db:66:b0:f0:19:d9:d6:c8:ca:
         fa:45:19:0d:82:8a:a0:82:09:8e:86:20:e0:b3:17:a6:a7:39:
         c3:d5:55:2f:65:52:22:08:29:df:76:40:32:d2:3d:18:e5:6d:
         5b:b7:b7:81:c2:28:6e:eb:33:cf:f1:33:6f:be:89:b2:a3:fc:
         36:e0:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org