Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa
File:                     3139302e3138362e302e302f31362d3234203d3e203235363230.roa (raw, json)
Hash identifier:          CpsC0uXIdkqPoxoailJxN35mJ1JlZsHUo3PV/UsDMPc=
Subject key identifier:   79:3D:5C:10:0A:C4:58:16:E8:8B:BA:BB:95:15:E9:60:37:55:9A:BD
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       4F9EB53159C019EC4BD2FDEBCB4631F044A798B5
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     25620
IP address blocks:        190.186.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9e:b5:31:59:c0:19:ec:4b:d2:fd:eb:cb:46:31:f0:44:a7:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=793D5C100AC45816E88BBABB9515E96037559ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:99:e8:f3:0e:1f:50:a5:20:26:fc:af:1c:
                    4b:88:c5:ca:d1:bb:9a:80:8a:1f:47:d5:a4:af:ba:
                    f8:49:2b:94:79:c0:d8:77:1f:82:75:0f:9f:bb:27:
                    a1:9a:96:a9:52:f1:e2:39:cd:ba:a5:c8:9c:17:a9:
                    72:81:36:49:eb:b8:27:fd:88:b0:b5:10:7a:8c:74:
                    b2:ec:70:45:c0:e8:9e:f0:06:98:e6:7a:83:81:ab:
                    a5:07:cc:d8:84:79:1b:45:9d:c7:2d:f3:ac:fb:c6:
                    bb:cd:68:ad:9a:eb:5a:1b:03:93:b1:de:f8:88:ea:
                    aa:cc:c8:46:54:54:00:a2:c7:bb:6e:2a:b5:c5:df:
                    e1:42:0a:88:c2:62:cc:6b:b7:5d:8b:3e:54:92:63:
                    54:84:b6:d3:a1:dd:4f:2f:75:49:e9:96:47:9f:b5:
                    9d:71:18:89:d8:ae:cf:7b:e1:5f:df:d7:2b:34:5f:
                    0f:ec:51:d7:27:de:22:45:9f:ea:17:18:99:69:8a:
                    41:69:b9:7c:8b:d5:62:e2:88:81:1d:0a:e8:71:dd:
                    f7:7c:63:f6:10:75:51:20:c1:a4:68:8f:10:1a:64:
                    8a:1c:6b:10:72:b6:18:d6:ba:c2:73:a6:59:6d:a8:
                    29:37:2f:56:d7:23:48:b4:4e:fb:22:8d:1a:dd:cc:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3D:5C:10:0A:C4:58:16:E8:8B:BA:BB:95:15:E9:60:37:55:9A:BD
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:ea:e6:c6:12:72:61:fe:af:3e:44:b8:81:f3:c7:91:e2:
         8b:29:4a:88:80:c2:2f:d5:13:0d:e7:52:a2:67:32:10:1d:a1:
         0b:66:cc:f5:a8:86:f4:25:77:0e:87:6a:45:c1:be:a7:fe:4e:
         17:0b:c6:d5:3d:51:4d:46:f9:b1:01:7b:6d:7b:22:f4:84:c3:
         01:d0:40:59:62:e0:d3:19:ac:21:f6:89:b8:d2:ad:b0:47:ed:
         51:79:b9:9b:fe:bf:21:7b:5f:02:6f:25:8d:2f:b1:09:7a:c5:
         a9:f1:96:ae:b2:09:8b:36:f9:84:b7:40:59:66:5c:ce:de:de:
         26:15:a8:08:27:a9:2d:d9:35:ff:5b:b3:6c:e3:15:d1:21:a1:
         47:7e:8c:d0:2a:04:ba:5a:7b:ad:3a:73:64:20:c2:0b:0f:12:
         e3:b4:c8:19:a5:dc:e6:71:e5:08:90:bd:ee:77:70:bd:2a:e3:
         34:25:91:f4:c6:0f:18:c8:37:c2:9a:ff:a8:5f:36:34:84:5d:
         b5:10:4d:4a:aa:97:86:3f:64:d4:07:61:c0:22:40:a2:c7:44:
         8d:26:f7:a8:14:7b:5c:d9:da:92:41:ea:d9:e1:72:5b:fb:80:
         7a:f2:31:f4:18:bf:41:97:1c:db:8c:5d:ba:95:a9:20:5c:52:
         2c:ea:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org