Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234322e302f32332d3234203d3e203630303232.roa
File:                     3139302e3132312e3234322e302f32332d3234203d3e203630303232.roa (raw, json)
Hash identifier:          gWYXHzWhilcD7uOxEZhMm7/hZA2XX+ss6NKHA6mZxYM=
Subject key identifier:   93:1F:57:77:CD:67:83:BD:EB:51:3D:BD:C6:C1:8E:58:F6:E3:57:17
Certificate issuer:       /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial:       4466D3D3498F559561BD00A8B2338E2907EE238D
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234322e302f32332d3234203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:13:33 +0000
ROA not before:           Tue 05 Mar 2024 18:08:33 +0000
ROA not after:            Tue 04 Mar 2025 18:13:33 +0000
asID:                     60022
IP address blocks:        190.121.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:66:d3:d3:49:8f:55:95:61:bd:00:a8:b2:33:8e:29:07:ee:23:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
        Validity
            Not Before: Mar  5 18:08:33 2024 GMT
            Not After : Mar  4 18:13:33 2025 GMT
        Subject: CN=931F5777CD6783BDEB513DBDC6C18E58F6E35717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:e8:39:c4:fc:27:3a:9d:b9:1d:25:c5:c9:
                    be:4d:af:91:b6:e1:18:6d:30:38:c6:8e:ab:44:0e:
                    df:25:bd:e6:6d:d3:76:92:15:13:ff:2a:09:5e:e7:
                    10:84:8e:ad:b1:9e:9c:51:4b:bd:04:84:45:bd:63:
                    59:55:eb:fb:73:75:11:da:de:02:3f:8d:37:96:81:
                    41:bb:8e:e0:6a:b5:dc:6d:41:9f:d7:30:00:84:6b:
                    87:29:b3:5a:8d:a5:88:90:ee:ae:ac:4c:01:ea:ce:
                    bd:66:5e:ae:99:f2:a8:0f:6e:34:b0:59:98:80:d3:
                    6f:a1:7a:42:05:66:69:fe:fe:dc:ae:df:2f:9a:be:
                    a3:d2:fa:22:d6:0d:77:93:a8:8e:83:f2:ad:c1:74:
                    11:43:72:e5:0e:99:8c:8d:d2:ab:f7:4f:ee:a8:35:
                    ed:cd:1f:e1:13:c6:be:4b:3c:15:53:bb:a9:51:03:
                    b4:82:39:36:05:2d:65:58:00:6f:0e:e2:53:59:47:
                    71:6f:b0:8e:fd:0e:f1:9a:c5:a3:93:97:53:5e:39:
                    ef:fc:a8:9e:1b:a7:df:91:5d:58:2c:27:3c:54:80:
                    ef:1c:5b:07:7c:c8:de:bb:e2:c9:e6:7a:96:9a:35:
                    01:ec:c6:37:38:9e:fc:66:42:dc:a3:f0:a1:f9:c8:
                    ab:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1F:57:77:CD:67:83:BD:EB:51:3D:BD:C6:C1:8E:58:F6:E3:57:17
            X509v3 Authority Key Identifier:
                keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234322e302f32332d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:9e:e6:d6:c2:72:cd:a0:26:5b:cf:fc:78:7b:58:cd:a3:af:
         b6:0a:ad:a3:ff:a4:c2:d5:5a:d0:2a:3e:43:a5:7d:6a:db:e5:
         d3:67:26:1a:42:3b:01:29:51:73:f5:23:ce:b5:10:38:92:50:
         3c:ab:7b:0f:91:dd:90:e4:ee:92:64:5e:ea:15:3e:70:b4:cd:
         d2:3e:b4:a8:07:1b:45:81:cb:18:15:e9:d8:db:1f:c1:e7:6f:
         01:62:53:64:be:cb:ba:2b:dc:09:ad:1b:0c:21:dd:ef:b2:98:
         61:f7:92:6a:b6:75:82:fc:60:08:29:4b:1f:b8:ef:5f:36:ee:
         08:1b:02:40:02:ec:2a:10:6d:65:a7:df:95:88:be:17:ba:25:
         d6:ea:a4:53:90:69:f6:dd:6a:3d:c3:75:0d:18:36:a9:6d:41:
         72:3a:71:7c:e9:e7:99:e0:32:f5:34:e4:c5:71:92:63:19:a7:
         ef:1f:84:39:3d:54:5a:ed:ba:34:bf:1f:b5:8d:7d:e0:f1:77:
         2f:da:ec:cc:ab:b6:42:97:d6:4b:67:1a:2f:af:b8:a0:0b:42:
         34:5a:9d:9b:0f:3c:af:d3:c4:c6:d8:01:fe:36:a1:05:ae:e4:
         f5:e9:77:50:e1:c0:d3:67:83:a8:05:bc:26:8b:e8:09:c6:6c:
         83:bc:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:23:57 2024 by rpki-client on console-ams.rpki-client.org