Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3232372e302f32342d3234203d3e20323731393034.roa
File:                     3139302e3231362e3232372e302f32342d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          OrMcoVgqP9USUX790blq/YlG3nA8CqYOw/QR9fSlUYE=
Subject key identifier:   5B:39:B0:D1:BE:A6:4B:70:04:22:D1:ED:E5:D5:30:1A:87:FA:B2:88
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       4F0306AC2BAD3EF96911BE9D5A40217CCD1CE132
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3232372e302f32342d3234203d3e20323731393034.roa
Signing time:             Tue 05 Mar 2024 18:00:38 +0000
ROA not before:           Tue 05 Mar 2024 17:55:38 +0000
ROA not after:            Tue 04 Mar 2025 18:00:38 +0000
asID:                     271904
IP address blocks:        190.216.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:03:06:ac:2b:ad:3e:f9:69:11:be:9d:5a:40:21:7c:cd:1c:e1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:38 2024 GMT
            Not After : Mar  4 18:00:38 2025 GMT
        Subject: CN=5B39B0D1BEA64B700422D1EDE5D5301A87FAB288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:22:42:9b:8c:5f:6b:cb:19:f6:bc:03:53:
                    f5:48:1c:ac:f5:2d:37:3e:69:47:9c:a7:0b:fe:ca:
                    61:ea:41:a4:a8:77:9d:50:38:ed:84:a3:56:68:9a:
                    aa:be:b0:27:4e:57:b9:97:e6:26:63:8c:1f:0b:0e:
                    f4:0c:48:8d:81:45:c9:2f:fb:73:3b:bf:d3:03:11:
                    39:06:da:c9:fa:30:2e:3f:70:48:f2:e9:9f:63:0f:
                    f5:e4:ce:5f:aa:cb:de:03:96:89:38:3d:0f:50:a3:
                    e5:07:0a:82:4c:fc:75:4e:a5:9f:0e:cf:46:c0:14:
                    51:62:8e:64:72:30:da:35:17:1b:0c:2f:55:b6:82:
                    15:cf:05:81:28:f4:bc:39:20:f4:4d:d0:10:22:d8:
                    49:e8:bf:4d:ba:39:10:38:79:75:39:9a:c0:9a:27:
                    f3:d1:9f:96:73:fe:78:93:4f:3f:94:1f:e7:93:13:
                    43:8e:0e:66:6a:80:a2:d4:fa:9e:fe:d1:43:be:e7:
                    62:54:01:5d:85:e3:30:36:23:06:93:84:16:b8:c9:
                    f9:3c:0d:5f:2d:34:9f:6b:50:9b:05:b3:99:ff:61:
                    db:97:8f:da:9a:81:42:bd:88:22:b1:87:0e:59:ff:
                    db:a9:51:29:b9:da:ee:e9:98:76:ad:4e:00:0d:6e:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:39:B0:D1:BE:A6:4B:70:04:22:D1:ED:E5:D5:30:1A:87:FA:B2:88
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3232372e302f32342d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:35:ab:3a:8b:64:25:ed:32:6b:d8:16:99:10:f5:15:a2:
         c5:58:e2:0c:48:86:d0:bd:d8:77:da:86:39:03:11:8f:ef:7f:
         07:eb:d7:80:39:10:a1:d3:dd:e8:69:2f:ad:b3:a7:73:cf:51:
         b9:74:ec:f7:dc:e0:fc:6e:bc:00:c2:ea:9f:16:79:2a:7c:59:
         38:b0:eb:b6:09:07:69:65:22:9e:e6:9f:93:65:db:65:14:57:
         6c:2a:bb:dd:1a:4a:4b:13:e7:6b:48:2c:5e:28:11:e1:e2:3d:
         59:4a:46:81:bb:98:be:c4:a5:12:b0:eb:57:28:cc:18:65:8c:
         28:d0:10:7e:bc:00:f5:09:4c:bf:5d:c0:28:83:bf:34:56:5d:
         fe:11:8f:e9:c5:2f:0e:1a:15:8e:88:b1:1f:c2:a6:25:75:45:
         fa:93:d0:a9:85:f7:8f:6c:5b:df:4f:60:16:b0:a8:0f:9f:51:
         44:77:9f:13:58:b1:ac:a7:a1:d2:e0:cc:48:b4:10:8d:40:8f:
         6b:57:dc:6d:66:9b:b3:00:62:bc:40:b4:a5:b1:20:a8:4b:68:
         43:7a:22:98:88:37:af:0a:e6:88:4b:b4:ba:46:57:e1:e8:f3:
         82:05:6e:5b:68:bb:f4:91:55:7f:a6:b4:cf:0c:df:43:1a:38:
         f2:a3:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:10 2024 by rpki-client on console-ams.rpki-client.org