Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa
File:                     3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          koICjuU4khXI1qcpcOubhe+AbPCzNz6kVjBdhe+k978=
Subject key identifier:   04:BF:6B:8F:5E:43:80:94:5F:49:A6:E6:3B:73:66:5F:D8:28:57:8A
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       59594523A8E23D0693A2506F88C137434207632D
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa
Signing time:             Tue 05 Mar 2024 18:00:36 +0000
ROA not before:           Tue 05 Mar 2024 17:55:36 +0000
ROA not after:            Tue 04 Mar 2025 18:00:36 +0000
asID:                     271904
IP address blocks:        190.216.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:59:45:23:a8:e2:3d:06:93:a2:50:6f:88:c1:37:43:42:07:63:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:36 2024 GMT
            Not After : Mar  4 18:00:36 2025 GMT
        Subject: CN=04BF6B8F5E4380945F49A6E63B73665FD828578A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:56:e2:a3:c4:c7:ff:07:ed:e0:0b:f1:63:
                    d3:fb:26:b5:44:76:3d:8e:79:f2:2c:3b:db:be:34:
                    1e:9f:05:c0:49:23:b0:d7:69:bd:0c:b0:ce:03:83:
                    b3:bb:10:d1:18:38:f1:4f:7d:6e:66:14:b5:2d:d0:
                    99:69:85:ee:e3:62:f6:e8:db:96:c5:72:02:da:fc:
                    6f:6d:e8:0a:e1:88:23:6d:9a:45:7a:5b:08:68:79:
                    6e:08:89:18:2f:39:c8:d4:97:cf:65:ab:0b:6b:c3:
                    e0:c3:44:8a:2a:60:1d:28:f6:f2:85:30:0f:81:5f:
                    31:a4:8f:8a:4b:db:d6:64:e1:69:c2:84:2e:a2:a0:
                    e5:bb:89:28:42:e0:43:f1:d2:f5:64:47:9d:e8:15:
                    86:45:43:31:24:59:6e:9a:be:0d:fb:e9:d2:72:c4:
                    d2:81:09:c4:16:c1:d3:a3:92:92:cf:ac:ab:7d:ad:
                    7f:5d:bc:9a:bf:22:9f:10:75:cd:87:2a:5d:80:b1:
                    eb:3a:6a:e0:60:66:bd:c5:eb:5c:4e:ac:7d:64:34:
                    21:18:3d:22:d2:d2:46:bb:19:ab:f6:4f:e9:6a:b4:
                    5e:59:f5:54:55:42:80:2b:84:fb:ff:2f:80:7b:9d:
                    a4:56:cc:9c:c5:8e:63:39:23:6f:1d:86:cc:c4:2f:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:6B:8F:5E:43:80:94:5F:49:A6:E6:3B:73:66:5F:D8:28:57:8A
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:de:65:f2:6f:0d:c0:c8:1c:16:57:61:39:66:05:2e:29:04:
         ce:a7:d4:0b:aa:8e:f7:ad:ee:16:b1:78:13:2a:2b:10:d0:94:
         3a:84:a2:76:8e:d5:21:ca:82:a9:5e:13:15:e9:37:04:d5:5a:
         07:9f:4a:4b:86:a3:63:26:42:4d:cd:18:b7:8e:f2:55:a4:59:
         e2:c7:b0:25:3a:f1:6e:e9:e7:05:da:06:95:89:c2:c5:25:9d:
         47:51:6a:20:48:e8:d0:d4:5f:f6:77:ca:bb:c3:64:7c:80:5d:
         04:b9:1b:74:3c:ab:7b:c6:0e:1f:ff:38:e7:8f:ec:1a:44:f3:
         3d:a2:d5:ae:3d:33:b0:2e:94:99:a2:93:1b:08:5d:d6:2d:5d:
         fd:5b:89:1c:37:6c:ab:2b:d9:4d:7c:80:dd:04:99:97:9c:f0:
         07:f7:06:b6:10:26:81:9a:ef:ed:3f:1e:bc:50:aa:00:26:3b:
         4a:0f:22:9f:b1:fb:da:12:87:4c:a7:2f:e7:0a:1b:88:db:1c:
         36:e4:e2:95:36:46:a7:6e:46:f9:66:a9:61:44:42:73:fc:1e:
         8b:aa:00:bb:34:92:cd:63:34:29:b7:09:ae:97:fe:98:a9:5e:
         d1:ca:8e:9d:00:3a:8d:95:02:c8:47:7a:88:1c:5b:da:7b:d7:
         e5:96:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org