Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa
File:                     3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (raw, json)
Hash identifier:          mcoY0M7+zJlR0trgz582fpvJPfFnSnH9owxDP+UbzmU=
Subject key identifier:   E7:CB:31:A5:C1:8A:A0:12:5F:C3:1F:53:4E:4C:04:A4:ED:2C:27:19
Certificate issuer:       /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
Certificate serial:       1C8C4000C7B79E8652AABAF0FFC577439C504359
Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa
Signing time:             Tue 05 Mar 2024 17:43:17 +0000
ROA not before:           Tue 05 Mar 2024 17:38:17 +0000
ROA not after:            Tue 04 Mar 2025 17:43:17 +0000
asID:                     263698
IP address blocks:        190.113.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8c:40:00:c7:b7:9e:86:52:aa:ba:f0:ff:c5:77:43:9c:50:43:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D
        Validity
            Not Before: Mar  5 17:38:17 2024 GMT
            Not After : Mar  4 17:43:17 2025 GMT
        Subject: CN=E7CB31A5C18AA0125FC31F534E4C04A4ED2C2719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:c6:b2:81:a8:4d:05:c4:54:31:55:fc:71:
                    47:ae:c1:bf:45:c4:02:48:3d:8b:3c:6a:1f:6d:bf:
                    39:5d:25:4b:6f:02:22:64:4e:5e:df:e0:60:72:f2:
                    85:97:db:84:eb:6f:d8:c1:41:4b:fd:97:31:ca:f6:
                    11:a4:e0:df:3c:45:80:47:68:c6:0d:13:9d:11:07:
                    ca:59:96:9c:7c:12:53:65:de:58:dd:97:2a:a3:e7:
                    95:d7:34:fe:8a:f3:ec:ba:54:57:ba:94:2a:20:ea:
                    7d:44:ed:de:c3:00:f7:5b:7e:ad:fd:2b:ec:1f:48:
                    e8:1d:51:57:0a:2a:f9:0f:4d:14:39:37:19:fd:8d:
                    c7:42:c8:89:6b:e3:a3:d3:de:bc:3e:e3:c5:21:72:
                    dc:7d:fb:35:7e:2e:e4:9b:bc:94:9c:a4:47:b8:42:
                    23:7b:57:4b:c1:01:c0:5d:bb:9c:04:4d:67:4d:f3:
                    33:d7:3d:19:f3:56:e8:ae:ce:51:d2:f0:b8:0c:43:
                    4c:b8:eb:69:6d:fa:8e:37:c7:aa:77:c9:61:6e:08:
                    c8:d2:7c:44:88:bb:a6:8d:b1:38:40:76:ef:52:c1:
                    6f:db:37:59:5f:94:11:c4:c4:55:d6:30:a4:8b:20:
                    c6:b4:9f:79:58:42:e6:72:76:08:d3:74:02:cb:d1:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:31:A5:C1:8A:A0:12:5F:C3:1F:53:4E:4C:04:A4:ED:2C:27:19
            X509v3 Authority Key Identifier:
                keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:4c:ce:f0:56:5b:7e:19:9d:f3:ec:f2:06:27:11:09:4b:
         62:a5:cb:f6:d3:23:ef:d1:5e:1b:d7:55:f8:df:1b:5f:fb:d9:
         94:a9:14:b3:1a:4e:2d:f7:2e:ea:9e:2b:45:c7:bf:a4:ec:84:
         06:38:c4:9a:94:9e:4a:73:9f:4b:49:31:5d:a6:7c:e1:11:fc:
         bf:77:18:83:bb:a2:f6:41:b0:ec:fc:e3:60:66:6c:bd:d2:3c:
         bb:72:dc:58:eb:63:bf:d0:b3:2e:f2:ce:7f:1d:14:0e:a8:f0:
         e7:17:c2:4d:94:17:c1:18:09:e6:bf:10:46:32:f3:31:2a:41:
         39:c2:96:f2:ae:27:7a:ef:63:6c:7b:82:d3:fa:82:7a:2c:71:
         8d:d9:28:46:ec:83:ed:ee:62:5b:20:98:11:b4:83:42:c7:56:
         af:1f:de:64:1c:72:b5:98:01:e2:30:b9:3c:e0:f6:1d:b6:67:
         61:20:39:c0:f0:10:14:2b:29:a3:5c:68:0e:59:9c:6f:f9:1b:
         d8:7a:19:98:dd:f4:18:65:64:a5:f5:b9:b2:ac:4f:bf:e0:ec:
         56:a8:a9:bd:f5:1f:0c:5d:fa:16:58:52:9c:3c:91:57:e0:77:
         bc:17:a9:af:0b:c4:1e:5e:05:73:10:58:73:3d:56:15:a7:75:
         15:99:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 14:05:00 2024 by rpki-client on console-ams.rpki-client.org