Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3234342e302f32342d3234203d3e20323633373731.roa
File:                     3139302e3231362e3234342e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          NfcC+/HqDZtyIgDTZJFcrkd6mDaaSUkBeajmbNgODCc=
Subject key identifier:   E4:CB:FB:AF:FE:91:79:53:E4:FF:9C:00:77:F6:D0:7E:AF:F7:F5:1C
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       2A02EDE8B4BDF8DB6D5B889C5B269678AB6D92E4
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3234342e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 05 Mar 2024 18:00:53 +0000
ROA not before:           Tue 05 Mar 2024 17:55:53 +0000
ROA not after:            Tue 04 Mar 2025 18:00:53 +0000
asID:                     263771
IP address blocks:        190.216.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:02:ed:e8:b4:bd:f8:db:6d:5b:88:9c:5b:26:96:78:ab:6d:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:53 2024 GMT
            Not After : Mar  4 18:00:53 2025 GMT
        Subject: CN=E4CBFBAFFE917953E4FF9C0077F6D07EAFF7F51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:3d:c2:74:6a:9e:b2:0a:2e:39:53:ef:04:
                    cb:48:4f:9c:f4:fd:51:e2:d2:27:3c:c0:c9:b3:af:
                    5b:d5:23:ee:00:e0:75:5b:cd:7a:36:ce:5b:23:3a:
                    40:2f:c1:cf:49:90:46:6d:16:1e:6a:fe:4b:62:4a:
                    cb:55:43:50:ca:6d:81:f6:72:ae:7b:80:ba:bd:b9:
                    9b:d7:e3:2c:50:19:cd:17:c8:59:61:09:f8:ae:fc:
                    70:24:04:41:ce:2f:8c:51:59:06:a5:a2:e3:e7:af:
                    65:4c:39:92:e6:ba:54:a9:86:b3:04:62:8f:d7:ac:
                    8c:89:3b:b5:9a:ee:03:f7:e6:9c:06:11:75:0c:86:
                    6d:4c:e9:d4:0d:73:c7:b1:2e:8e:41:b2:40:94:b3:
                    59:fe:4c:75:a5:6d:d2:6a:f5:b1:1b:9a:a8:a4:01:
                    06:80:91:65:be:3c:7b:4e:10:ab:06:4a:71:d2:4a:
                    7e:31:66:b6:f3:23:1c:fc:87:a7:59:8d:10:a6:d8:
                    38:1d:f2:dc:df:fd:2c:8b:d3:fc:98:93:70:6c:dc:
                    35:0e:48:46:ec:ae:b3:7c:6a:7d:80:68:89:d4:ce:
                    c6:19:97:e1:54:5f:f2:be:96:e4:f4:ac:89:da:53:
                    45:ff:3b:37:f2:76:29:10:33:71:b9:37:04:a7:fc:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:FB:AF:FE:91:79:53:E4:FF:9C:00:77:F6:D0:7E:AF:F7:F5:1C
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3234342e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:24:cf:e8:8e:00:a5:7d:d4:74:9a:5d:40:d1:37:93:27:
         e1:7b:b0:fd:10:be:ca:8a:53:1b:84:30:8b:cd:f9:46:f7:15:
         2e:64:6b:b1:e8:61:f9:ec:b2:6b:72:fa:24:6f:a3:7d:0d:d4:
         46:64:0e:57:7d:3d:32:12:d6:c5:a9:28:91:43:27:19:03:5a:
         9b:ab:41:95:30:f1:da:9f:64:d0:ea:66:39:c0:e4:15:8a:be:
         0b:e3:6e:72:76:d8:c8:c9:05:28:ab:1f:e9:82:bf:93:97:2e:
         be:3d:0e:65:5f:81:88:6e:29:3b:42:e0:a8:25:05:ac:ae:78:
         5b:db:79:07:c6:14:64:44:88:ba:7d:39:ea:03:1f:c0:bf:cc:
         92:df:c2:b0:fd:c0:65:dc:d5:04:c4:89:75:a5:ef:a7:d5:97:
         d9:92:b5:ec:9b:52:a3:27:ae:da:74:0b:b8:12:fe:4b:8f:0d:
         1c:c6:76:e8:84:af:44:8b:54:1c:0e:09:3f:2d:ef:99:7c:3f:
         03:2b:9c:5e:59:66:7c:0a:d6:aa:8b:85:bf:09:e6:e8:db:ba:
         d8:9e:34:11:04:52:fe:49:66:08:af:1d:62:0b:bc:32:37:8b:
         1e:6c:28:05:b6:d6:85:84:6a:ca:69:cb:09:57:be:38:2b:c6:
         c9:11:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org