Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e31362e302f32322d3234203d3e203238333138.roa
File:                     3139302e3130332e31362e302f32322d3234203d3e203238333138.roa (raw, json)
Hash identifier:          8ldBEcoBvLfyHTS3pLvi4Ip6ezM+HVk/yd0BarPOcds=
Subject key identifier:   44:E8:BD:93:CB:CA:31:88:FC:71:D1:53:65:F1:AE:9B:31:21:EC:DA
Certificate issuer:       /CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
Certificate serial:       679D8E39B914A531F42E9741367A40568466140D
Authority key identifier: 69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e31362e302f32322d3234203d3e203238333138.roa
Signing time:             Tue 05 Mar 2024 18:22:03 +0000
ROA not before:           Tue 05 Mar 2024 18:17:03 +0000
ROA not after:            Tue 04 Mar 2025 18:22:03 +0000
asID:                     28318
IP address blocks:        190.103.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:8e:39:b9:14:a5:31:f4:2e:97:41:36:7a:40:56:84:66:14:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
        Validity
            Not Before: Mar  5 18:17:03 2024 GMT
            Not After : Mar  4 18:22:03 2025 GMT
        Subject: CN=44E8BD93CBCA3188FC71D15365F1AE9B3121ECDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:84:aa:d0:90:86:ef:ad:29:1d:15:66:92:
                    c4:62:36:64:fb:87:a9:f7:93:82:e5:28:1a:66:1d:
                    61:51:fd:28:3c:22:2a:dd:78:25:82:17:e7:83:32:
                    9d:a2:f3:96:f4:1a:e2:bc:5a:c3:1a:19:7e:61:34:
                    ab:3d:ef:46:58:c7:b1:ce:b2:f0:55:38:5a:bc:8d:
                    07:72:c0:a6:ee:a4:3e:86:a1:3c:33:e1:6b:a1:1b:
                    00:bc:f9:a6:aa:00:e5:68:7b:4b:36:07:07:85:52:
                    67:d4:e0:ed:de:54:29:dd:55:97:6a:bc:f8:c0:bf:
                    0c:a0:ed:cb:c8:43:2c:34:06:0a:c1:65:d1:32:97:
                    53:a3:80:2c:48:97:f4:03:0b:b8:41:38:54:9c:cd:
                    40:62:84:57:06:37:95:e1:b9:e6:75:52:79:08:2b:
                    ba:c8:23:51:25:3a:ee:bd:ad:3f:40:b6:9d:20:4b:
                    fc:ae:c3:e7:94:4d:90:ba:f1:65:8f:71:17:2b:ce:
                    7f:2b:03:6f:c2:53:f2:8e:48:c4:68:f5:dc:06:ae:
                    ce:6c:ca:b4:61:86:9d:fb:16:a2:f8:a5:eb:c9:a3:
                    53:02:7d:85:bd:0a:d6:ff:9c:70:f2:ed:f4:28:a0:
                    8f:37:1f:3b:ae:ef:1c:10:78:eb:0c:33:cc:65:af:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E8:BD:93:CB:CA:31:88:FC:71:D1:53:65:F1:AE:9B:31:21:EC:DA
            X509v3 Authority Key Identifier:
                keyid:69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e31362e302f32322d3234203d3e203238333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:d1:7d:90:0c:da:f8:21:4b:10:24:59:81:b7:2a:ab:a6:
         db:d4:3b:a3:e6:99:e6:fc:b1:0f:9d:f9:52:b1:06:24:06:35:
         7d:a5:ef:94:66:10:ef:41:35:2f:83:3d:ad:79:12:50:e3:8a:
         12:a0:40:75:61:b8:d1:8e:43:ef:69:65:f5:d0:8e:ab:de:50:
         a6:f3:01:5b:58:c8:e8:76:c9:6a:f9:7f:84:f5:63:c2:a5:1a:
         24:9a:ab:df:b6:42:99:b4:9d:7d:60:90:a2:67:09:19:31:7b:
         05:c4:79:32:2d:65:38:13:ce:a8:a0:1f:af:33:fd:88:b9:fe:
         e1:85:6d:3b:dd:2c:03:2d:22:92:06:d3:57:bd:e1:64:77:5e:
         76:bf:e6:90:1b:de:04:9f:55:85:04:43:79:72:6b:07:9d:73:
         0b:bd:d1:34:9f:7d:15:b8:4f:68:50:cb:67:9f:1b:3e:a6:73:
         47:b1:97:8f:a0:a0:73:d8:b2:9e:c2:c9:91:93:51:61:44:a6:
         25:ed:3d:cd:58:b4:d7:53:a5:de:77:39:5d:8d:c8:b4:44:3e:
         54:66:7b:9b:10:40:3d:8b:14:1f:ec:d7:14:b4:d0:6e:19:45:
         f7:04:1b:b6:86:a0:c4:3c:97:79:fd:b2:d1:27:28:c7:dc:e8:
         36:e9:ac:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org