Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa
File:                     3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa (raw, json)
Hash identifier:          WxsqnJBilpFsSFq63XSUhNGmmji+J2ZXewJ8JMnSARQ=
Subject key identifier:   DE:C9:FC:70:07:C5:E6:F3:F8:00:E3:9B:46:8B:24:C7:AC:11:5D:35
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       6F3850C0E48A188126FDD3CE14AD1519B27E8224
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:29 +0000
ROA not before:           Tue 05 Mar 2024 17:59:29 +0000
ROA not after:            Tue 04 Mar 2025 18:04:29 +0000
asID:                     267848
IP address blocks:        190.97.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:38:50:c0:e4:8a:18:81:26:fd:d3:ce:14:ad:15:19:b2:7e:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:29 2024 GMT
            Not After : Mar  4 18:04:29 2025 GMT
        Subject: CN=DEC9FC7007C5E6F3F800E39B468B24C7AC115D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:70:98:5c:a9:30:eb:f0:fa:2c:dd:27:8d:
                    f1:fe:0f:58:3c:dc:7c:13:ee:07:ee:eb:26:b3:07:
                    84:fe:d4:a1:e7:81:90:e0:94:06:90:43:76:fb:39:
                    87:a1:ed:60:de:81:ac:d2:5f:4b:bc:97:8b:09:27:
                    c3:63:20:da:4f:02:cd:bb:0a:46:ce:3c:a7:07:3b:
                    0b:de:6b:73:70:aa:74:f6:69:0d:53:3f:22:40:35:
                    ff:eb:b4:88:b7:98:12:1f:32:4b:4a:7a:8e:7c:ee:
                    53:5a:7f:e2:20:57:74:41:b9:f9:b4:f0:0a:fb:3d:
                    83:43:25:b3:20:2d:44:30:c6:50:20:90:8c:02:d7:
                    9a:f3:b4:d7:77:a9:b1:0f:01:19:ce:a6:dc:4a:c0:
                    41:80:a9:64:fd:a6:d3:8c:09:e0:1e:f2:b1:3d:ec:
                    15:37:ff:56:86:3a:a8:8d:95:45:1c:ed:16:ce:11:
                    1b:0c:4f:49:73:1a:ef:e4:f7:9b:ae:31:2a:95:73:
                    73:a4:66:0d:54:88:75:d9:54:d2:ca:ed:d5:8a:45:
                    c8:9a:64:6a:83:07:7b:5d:79:e8:d0:6c:2c:22:ee:
                    81:00:f4:26:5b:83:6c:8a:1e:07:fc:ab:ba:5c:75:
                    54:6c:d5:bc:25:c3:b1:66:03:2a:4e:14:ba:f5:fe:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:FC:70:07:C5:E6:F3:F8:00:E3:9B:46:8B:24:C7:AC:11:5D:35
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137302e302f32342d3234203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:42:e7:9d:b2:21:43:0d:a3:42:a8:44:b7:59:61:05:76:
         65:26:39:c8:1a:70:2c:92:80:d5:68:d8:ce:7f:e2:be:92:e4:
         d2:8a:71:72:d1:ec:8c:e6:5f:36:4a:32:f2:1e:6c:01:66:64:
         eb:80:d4:a7:f5:f6:24:c4:45:f8:c4:7e:12:9a:c1:05:2d:89:
         d8:cc:a6:4e:f1:a2:2c:9f:4f:73:2f:ad:9b:d2:af:79:17:00:
         24:5c:fd:47:9f:f7:b5:a1:a2:01:84:d7:ce:fe:7c:9f:e0:5e:
         d5:46:80:0a:32:2c:86:d8:29:7d:70:a6:f3:0a:21:c8:6d:b1:
         4e:01:3d:15:66:58:3b:af:f2:e3:f4:92:6c:fa:d2:7f:d0:a8:
         f4:b3:1a:64:2f:47:74:13:cc:5b:99:8e:40:a4:d7:c9:0f:57:
         ad:b2:77:60:ac:16:4a:03:4d:4f:08:71:cf:dc:bc:1a:91:b7:
         4b:2a:6c:72:bf:55:5e:85:20:13:c5:81:79:50:8a:75:d1:a8:
         a9:f2:67:1f:74:d0:f2:68:f4:55:c4:6d:61:b3:13:8c:3e:6e:
         01:12:1c:a2:12:12:d1:6f:cb:27:32:32:d0:fd:e2:9e:25:66:
         d2:67:db:03:b1:9c:b1:2d:68:90:29:eb:e3:7a:9e:1f:57:22:
         c2:90:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org