Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e322e302f32342d3234203d3e203238303132.roa
File:                     3139302e3231372e322e302f32342d3234203d3e203238303132.roa (raw, json)
Hash identifier:          FWDCrn0lj+V6dSB+MkOqt/V6OGJxkpIYMuKq+9Cd6z0=
Subject key identifier:   EF:A1:40:78:5D:AB:96:7B:1D:BC:69:91:4B:12:B8:C7:3E:B8:B5:47
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       43A0E5B269016757EAD366EC334381F3C457276B
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e322e302f32342d3234203d3e203238303132.roa
Signing time:             Tue 05 Mar 2024 18:00:56 +0000
ROA not before:           Tue 05 Mar 2024 17:55:56 +0000
ROA not after:            Tue 04 Mar 2025 18:00:56 +0000
asID:                     28012
IP address blocks:        190.217.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:e5:b2:69:01:67:57:ea:d3:66:ec:33:43:81:f3:c4:57:27:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:56 2024 GMT
            Not After : Mar  4 18:00:56 2025 GMT
        Subject: CN=EFA140785DAB967B1DBC69914B12B8C73EB8B547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:4b:f1:91:f8:1a:82:0c:1c:ec:90:3b:5a:
                    56:27:a6:c3:d3:03:d2:f1:19:98:fc:95:56:6f:96:
                    77:e6:5c:b8:f1:3b:14:a1:22:31:d1:64:e0:7d:97:
                    38:06:e9:96:ad:23:7a:41:b3:63:0d:c8:d8:85:30:
                    80:39:3f:a0:fa:53:d9:d0:f5:1b:29:e4:af:15:19:
                    73:dc:cb:09:fa:e2:07:92:55:05:81:40:c1:4e:70:
                    1a:83:bf:b8:42:a8:4a:9f:ed:63:29:4f:6c:56:ca:
                    e6:b4:cb:ec:16:22:d3:38:c9:c7:d9:4c:13:3f:eb:
                    ae:9b:ab:0c:2f:02:9d:55:45:94:95:47:e8:e0:97:
                    6f:29:ac:a8:b9:39:86:ad:6f:30:a1:ce:ea:30:52:
                    a6:ed:b8:44:9c:d4:7d:11:f4:d1:f8:88:bf:7f:f6:
                    6f:b6:a3:d8:38:70:87:48:c7:43:21:59:b8:2b:30:
                    1c:2e:5f:52:4f:e0:1f:7b:6f:d8:eb:3a:74:40:90:
                    ae:99:57:1b:bc:9e:70:0b:67:5e:3f:59:14:e0:49:
                    c4:11:59:7e:44:2e:eb:da:68:9b:55:0a:0b:fd:08:
                    ec:e9:36:ae:1c:53:f1:60:56:f2:e6:af:34:e8:ac:
                    b8:69:d3:6b:9b:70:39:66:29:44:56:f6:d1:fc:1d:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A1:40:78:5D:AB:96:7B:1D:BC:69:91:4B:12:B8:C7:3E:B8:B5:47
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e322e302f32342d3234203d3e203238303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:b9:0f:86:f6:3b:16:87:81:9b:fa:8f:b0:26:c6:61:37:
         b9:a0:0b:17:ca:ed:7b:88:ed:30:91:e5:a0:ee:e7:4a:3a:a6:
         d1:4b:86:06:90:37:54:ba:04:11:40:0b:60:c9:6f:ab:36:57:
         39:a6:f9:31:cd:e3:30:9f:d5:2d:cd:12:5d:77:a8:c0:46:d5:
         df:cb:57:ee:c0:46:95:39:33:1b:eb:2f:d1:9d:61:b7:57:d8:
         a2:1b:81:9c:8c:55:b4:b1:d4:8f:4c:6a:aa:f6:c9:fe:93:c3:
         c6:7f:bb:08:c3:2e:7f:34:75:ca:15:07:b2:59:2f:62:a5:1d:
         ea:36:b0:62:77:f4:29:f0:5e:41:18:83:38:a9:df:5d:65:e8:
         c1:c0:6f:07:33:be:ca:9a:d3:94:58:70:01:c0:e8:79:cb:82:
         92:9e:bd:d6:2c:ed:f3:22:a3:c1:16:82:52:d1:84:1e:0a:a8:
         4e:6f:a0:96:a5:eb:66:e2:58:e3:3c:02:2a:7e:e8:2f:75:00:
         0a:1e:c3:ef:b3:ae:4f:f9:15:61:ae:2f:d1:c0:8e:21:96:a0:
         f1:f0:0d:d0:24:a4:ad:80:69:58:9d:89:1f:b2:c0:01:6e:56:
         1a:85:ed:da:ec:18:e0:be:50:e3:11:bd:2e:36:ca:ab:eb:c0:
         9c:1b:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:46:47 2024 by rpki-client on console-ams.rpki-client.org