Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e31382e302f32342d3234203d3e203230323037.roa
File:                     3139302e3231362e31382e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          rxI/ujrhAupCjIU2tpqnwinE7vDg3c/QRxRkB/vP1x8=
Subject key identifier:   D2:F7:F7:99:12:AB:C9:56:89:EA:3F:6E:5F:69:8B:BC:99:14:21:05
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       671BD506C1C717E8ACCDEDCBFA54BAE995686BD9
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e31382e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:00:51 +0000
ROA not before:           Tue 05 Mar 2024 17:55:51 +0000
ROA not after:            Tue 04 Mar 2025 18:00:51 +0000
asID:                     20207
IP address blocks:        190.216.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1b:d5:06:c1:c7:17:e8:ac:cd:ed:cb:fa:54:ba:e9:95:68:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:51 2024 GMT
            Not After : Mar  4 18:00:51 2025 GMT
        Subject: CN=D2F7F79912ABC95689EA3F6E5F698BBC99142105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:0a:e4:f8:17:c4:eb:10:81:22:e4:c5:51:
                    f2:a2:29:3d:9b:df:fd:f7:ab:f0:5c:7e:43:3c:dd:
                    66:f2:03:31:a7:73:cf:3e:14:75:b9:9f:71:c6:78:
                    de:3f:0d:94:98:0f:90:86:b8:d7:bd:bd:f6:42:25:
                    d4:36:c1:02:74:4c:2f:6b:88:37:72:14:85:e4:b4:
                    2a:01:ab:44:5a:c4:b3:60:f5:1c:ae:40:e1:c6:ab:
                    87:8b:b3:07:e1:2a:61:ac:21:16:d4:a9:e0:64:20:
                    e9:55:f3:c6:b1:cd:4d:55:71:6f:82:d1:57:31:34:
                    1c:4c:87:a0:65:b7:b4:95:6d:2f:c7:58:8b:3f:b7:
                    5d:ff:df:17:13:67:15:bc:01:a2:94:c8:5f:0b:2a:
                    31:90:0a:bf:a3:8f:32:9a:e7:0d:dc:60:aa:79:4f:
                    10:e8:86:5f:8f:4f:85:50:ed:bf:a0:af:28:56:55:
                    88:0d:f6:85:21:08:63:ed:5b:9e:60:45:79:aa:99:
                    c1:f2:0c:9f:08:97:77:7e:44:1f:26:8d:6a:6f:c2:
                    d2:79:ee:44:97:4f:bd:33:58:fb:61:e8:e8:32:57:
                    e1:eb:99:15:9e:ed:d1:54:08:a1:ca:01:18:11:56:
                    99:50:0b:df:52:89:ef:cc:2b:1a:2d:d5:5b:56:df:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F7:F7:99:12:AB:C9:56:89:EA:3F:6E:5F:69:8B:BC:99:14:21:05
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e31382e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:6f:cb:6b:66:53:5f:66:29:49:b6:51:59:a9:28:02:73:
         81:ec:0d:56:2b:f3:24:cb:62:d1:ba:94:5d:d6:8c:16:28:1a:
         8a:52:9d:a5:07:e9:fc:93:91:48:61:83:70:0f:0d:c4:4b:95:
         21:4c:0f:ba:30:3c:73:50:f5:3b:04:bd:a0:d4:96:3f:36:ca:
         e3:f6:c0:ad:d3:b3:e6:15:8c:71:28:23:e6:03:55:78:70:aa:
         a8:18:ea:75:ef:25:71:77:8c:cf:22:fb:e0:04:10:30:02:7a:
         45:ea:db:88:d4:fd:e3:e7:80:e1:ee:53:46:7b:bc:1f:5d:8b:
         46:ea:98:de:43:0a:ae:d0:97:d8:a4:7a:47:bd:95:01:67:e9:
         fe:48:19:3f:5a:82:a1:ed:2c:52:6c:21:66:d2:93:80:38:0a:
         d4:e5:bd:3c:d8:fe:ae:4f:75:5f:4d:5d:51:e1:5f:59:b7:cf:
         30:8f:5a:fd:53:a2:08:8e:4e:fc:18:bc:67:48:34:15:7d:17:
         34:b9:64:ea:5e:d5:5a:0d:bf:72:50:87:78:fa:a0:1c:5a:19:
         05:22:ea:e2:ba:56:15:b6:b8:0c:ee:e2:3c:4f:41:78:43:33:
         9c:43:a9:da:a4:c0:c9:70:66:c6:2d:11:8d:95:1e:9c:35:97:
         a0:fd:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org