Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32342e302f32342d3234203d3e203230323037.roa
File:                     3139302e3231362e32342e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          unimrkNFDDtD6mhpINmpuEcNKaJHQY82+rnJDYtc398=
Subject key identifier:   CB:FC:92:63:F8:D8:71:45:13:10:6E:2A:E7:36:00:C4:96:D0:D3:A8
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       5E8893E04C2B861A3A5813BE21AB8559888DAF04
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32342e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:00:39 +0000
ROA not before:           Tue 05 Mar 2024 17:55:39 +0000
ROA not after:            Tue 04 Mar 2025 18:00:39 +0000
asID:                     20207
IP address blocks:        190.216.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:88:93:e0:4c:2b:86:1a:3a:58:13:be:21:ab:85:59:88:8d:af:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:39 2024 GMT
            Not After : Mar  4 18:00:39 2025 GMT
        Subject: CN=CBFC9263F8D8714513106E2AE73600C496D0D3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:58:71:43:b5:86:29:fe:87:56:bd:7d:6f:
                    f9:d0:fb:2d:b0:ac:46:7e:82:88:dc:e1:1a:0c:82:
                    16:75:d5:25:c9:bf:f5:d6:bd:05:78:16:2a:24:fb:
                    7f:ed:8d:50:e4:2e:0f:d9:05:0c:e8:00:df:9f:2f:
                    6a:33:b2:f7:ae:d0:e3:a5:3e:b4:a4:a8:6a:17:e3:
                    b0:a4:e9:7d:59:a7:c1:c3:a0:2d:3c:52:01:1c:dd:
                    f2:48:95:f1:42:36:d8:bb:29:d3:98:ed:65:c3:e1:
                    f1:16:6c:8b:c3:f8:34:35:b6:a4:44:3a:98:d5:e8:
                    37:b8:19:10:bc:84:35:fa:03:9f:e4:ae:5a:65:97:
                    c7:44:7c:29:9a:fe:39:d5:0b:6a:a7:bb:25:c3:83:
                    3c:59:be:9a:89:68:7f:00:0e:73:78:f1:83:e5:39:
                    7b:e1:2a:9e:ee:fa:7b:07:c4:b0:b5:45:82:ee:6a:
                    af:9c:46:5f:d1:c5:32:7c:cd:cf:95:aa:b4:2a:96:
                    cb:62:d4:5f:dc:17:89:28:61:60:3a:23:6e:0f:ce:
                    19:1f:cd:fd:8f:3b:17:84:50:28:a1:1b:a1:cb:03:
                    7a:fc:50:1c:d6:18:d4:f7:9c:37:a2:5e:4f:a1:6a:
                    3a:50:ea:e4:65:55:8e:48:cc:84:d2:e6:62:ea:63:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:92:63:F8:D8:71:45:13:10:6E:2A:E7:36:00:C4:96:D0:D3:A8
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e32342e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:56:23:b5:62:00:b3:37:04:c5:e0:ea:92:cc:a9:c4:6f:
         26:8f:74:c7:0f:50:c7:84:47:87:65:b5:d0:73:94:2e:c4:80:
         4b:64:4e:68:26:4c:f8:a9:d7:50:3b:f2:e5:d9:3b:88:4f:25:
         c9:c3:f5:0f:a7:82:e4:0b:5f:32:34:0a:28:6d:1f:8e:0b:49:
         56:bf:61:cc:cb:46:39:8d:7c:fd:df:7c:12:fc:ef:4b:a6:f3:
         4c:25:7f:76:d9:c3:50:cb:29:b2:ff:ee:99:c7:d4:7f:05:64:
         57:b5:b6:40:8d:6b:f4:73:08:02:1d:5a:95:45:d2:59:6d:72:
         09:fe:61:d9:f9:e4:e0:6f:97:14:5e:2d:c5:8d:f7:1a:b4:bf:
         23:cd:9b:53:09:63:a6:6e:3a:92:ca:f1:a8:fb:65:aa:c9:19:
         87:9a:ad:e2:2a:bd:94:f1:10:95:fe:c2:4c:9d:b1:ba:65:a5:
         7f:78:d7:f2:49:99:c7:6e:5b:32:53:e1:b9:f8:7d:00:01:79:
         47:ef:ad:d5:1b:d2:62:75:4f:58:6c:2e:29:65:d3:53:ea:bb:
         04:aa:c8:da:14:25:1f:a8:02:0f:75:4a:18:b2:bd:d2:9b:76:
         9f:4a:75:89:96:a9:85:7d:19:1e:53:d7:fc:73:7d:5d:c8:fd:
         e8:62:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org