Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa
File:                     3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa (raw, json)
Hash identifier:          h/OSzLQg1m71arIP1BkvebZWJx95hIP01shuWP5jcQ4=
Subject key identifier:   B0:CD:FD:A6:86:BD:1D:36:0E:7C:66:96:CF:E4:F5:47:B2:EA:D2:35
Certificate issuer:       /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial:       339155807FC1031C0AEE31CA7DA910C2CD758137
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:13:32 +0000
ROA not before:           Tue 05 Mar 2024 18:08:32 +0000
ROA not after:            Tue 04 Mar 2025 18:13:32 +0000
asID:                     60022
IP address blocks:        190.121.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
                          rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:91:55:80:7f:c1:03:1c:0a:ee:31:ca:7d:a9:10:c2:cd:75:81:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
        Validity
            Not Before: Mar  5 18:08:32 2024 GMT
            Not After : Mar  4 18:13:32 2025 GMT
        Subject: CN=B0CDFDA686BD1D360E7C6696CFE4F547B2EAD235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:5c:14:eb:8d:cd:8f:51:60:3a:07:72:99:
                    64:6d:bb:a3:5f:e7:90:37:51:a9:4a:ba:0c:e6:27:
                    dc:7c:22:d3:bd:d2:78:0b:45:45:70:27:4d:b4:34:
                    3a:b5:ed:f9:7f:61:23:54:38:f3:a1:6f:42:86:6f:
                    53:29:41:d1:47:94:5d:3e:3c:c4:3e:7a:43:4f:83:
                    68:b7:8a:7a:7a:4b:a2:35:f6:f9:9e:ca:5e:a1:d4:
                    47:fc:95:86:95:fd:13:e0:8a:52:89:38:34:4c:1c:
                    b3:11:51:76:13:c8:9c:ec:d4:99:f7:09:2c:e5:77:
                    8c:22:45:7c:8f:b6:c1:be:11:3c:4b:fc:af:3e:24:
                    b1:a7:46:4c:fe:c0:12:12:77:70:9d:5c:f2:4d:21:
                    65:5d:d4:43:28:20:dc:76:90:40:ef:64:0d:f2:e0:
                    5c:ed:5e:b9:52:65:72:e5:08:c1:e8:a4:eb:c8:4b:
                    ce:09:26:a6:33:d0:28:12:60:b8:40:23:c8:9e:63:
                    80:0a:81:f2:46:dc:78:0f:3a:15:77:73:27:75:66:
                    97:61:5c:99:ac:4d:c2:71:0c:ef:a8:c3:13:a5:84:
                    34:8e:3e:6f:be:aa:e4:2b:6c:60:63:5a:0e:76:b3:
                    f0:6a:b6:dc:01:9e:5d:c8:30:9b:d1:e8:51:89:a7:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:FD:A6:86:BD:1D:36:0E:7C:66:96:CF:E4:F5:47:B2:EA:D2:35
            X509v3 Authority Key Identifier:
                keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234342e302f32322d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:48:95:5f:32:9b:35:88:64:66:b4:16:d0:da:90:9b:52:4b:
         a5:7e:47:38:4b:ef:d5:a3:65:c0:37:c7:7e:62:1a:c3:d3:e0:
         04:d7:b7:07:5e:47:27:e8:3e:56:6e:d9:56:fc:eb:f8:5d:38:
         14:e4:bd:9e:f5:ad:65:e6:14:8b:9b:b9:d1:be:e3:32:57:fb:
         ea:f7:b2:ba:32:16:5f:8c:bc:58:59:c0:6a:44:93:39:ab:ad:
         b9:20:f1:7f:81:a3:8a:c3:5e:19:fb:1c:34:71:be:e9:4b:b7:
         32:ae:5c:48:49:80:58:e9:7b:75:2d:69:f2:28:31:3a:13:81:
         ec:9a:72:81:42:70:bf:67:e1:95:a3:25:1a:cf:36:50:b2:17:
         c4:db:e4:53:a9:46:83:33:21:d5:73:d7:12:5b:14:da:e2:46:
         65:31:f5:86:85:56:b6:13:77:5d:63:a0:36:ef:43:33:29:e8:
         3a:fe:a1:fc:8d:1b:a7:3e:af:08:d8:a9:7c:a1:ab:f6:cf:c6:
         76:79:66:41:31:17:39:c1:9a:55:e1:01:39:fd:61:25:db:ca:
         fa:74:7e:15:59:ef:8b:88:eb:f8:0e:5b:27:cd:b1:67:f3:13:
         bf:a2:cc:8d:24:8d:95:06:36:34:73:8f:9a:ad:59:63:0b:eb:
         86:17:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:49:29 2024 by rpki-client on console-fra.rpki-client.org