Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa
File:                     3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa (raw, json)
Hash identifier:          sUn07yLisdwTGcqk4MYVGQTxGETWOFPgp+DKPOQ3qFE=
Subject key identifier:   FF:18:59:AD:27:C7:E6:F5:CA:42:95:53:9C:C2:16:8E:8E:1A:D0:E1
Certificate issuer:       /CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35
Certificate serial:       5A94A167402E39B8938A51B07C121E0271BE96BE
Authority key identifier: C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa
Signing time:             Tue 05 Mar 2024 18:07:03 +0000
ROA not before:           Tue 05 Mar 2024 18:02:03 +0000
ROA not after:            Tue 04 Mar 2025 18:07:03 +0000
asID:                     262231
IP address blocks:        190.103.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:94:a1:67:40:2e:39:b8:93:8a:51:b0:7c:12:1e:02:71:be:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35
        Validity
            Not Before: Mar  5 18:02:03 2024 GMT
            Not After : Mar  4 18:07:03 2025 GMT
        Subject: CN=FF1859AD27C7E6F5CA4295539CC2168E8E1AD0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:d4:b9:5a:a2:8d:27:0b:7c:f3:b2:11:17:
                    f2:74:dc:2a:88:7e:91:31:ff:48:7b:0f:1d:bf:4e:
                    b8:64:a9:da:f4:34:96:9a:2b:18:c1:18:95:36:e5:
                    67:c7:b0:58:28:a5:a7:ec:d1:93:71:38:8b:fc:c0:
                    01:46:8f:ed:16:10:8b:9a:a3:56:70:7a:32:55:c2:
                    72:8f:f6:6b:fe:94:d4:c3:8c:16:d9:bf:b3:e4:db:
                    49:8b:77:c1:d9:b9:dc:e6:50:2a:8f:08:7b:5c:94:
                    a8:a1:b5:f9:fd:38:c2:b9:2d:f6:e3:22:fc:74:32:
                    98:5d:d0:f5:c8:a3:bf:1d:21:1d:14:0f:43:5a:ef:
                    47:8b:06:bf:2e:cf:ca:04:83:2e:69:22:f0:ce:05:
                    92:0e:47:02:5d:69:a7:20:6b:2a:2b:33:bf:fe:b9:
                    09:b3:5f:74:d7:d2:eb:ff:5a:c5:36:8b:a3:af:8b:
                    b9:dc:67:4e:44:d1:8b:4b:25:1e:c3:dd:62:ef:ec:
                    7c:3a:f9:35:73:3d:77:a3:cc:c8:4e:67:84:46:ed:
                    ba:ed:37:49:49:24:57:2e:13:b5:3f:00:0b:e8:d0:
                    26:85:71:4b:66:51:66:77:34:e2:0c:08:95:34:d3:
                    e1:fb:c5:a1:c8:ce:40:0b:0c:9c:15:a9:84:38:79:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:59:AD:27:C7:E6:F5:CA:42:95:53:9C:C2:16:8E:8E:1A:D0:E1
            X509v3 Authority Key Identifier:
                keyid:C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:c1:5b:96:df:7e:0f:5c:58:de:81:02:c3:5d:0a:43:83:
         45:62:ad:26:45:ab:f4:15:24:44:86:3d:e6:5c:d9:f3:60:52:
         f0:69:1b:3b:59:53:dd:ef:89:43:92:2c:94:9d:6d:b1:a8:ed:
         d1:70:a2:a5:22:d7:69:21:5d:38:b0:7a:58:88:a6:02:ff:1e:
         bc:dd:84:31:d1:e2:52:16:05:ee:eb:61:65:7b:cb:a7:1a:02:
         14:e6:6e:0d:9a:01:96:df:59:6f:74:df:72:55:f0:fa:17:7d:
         a1:57:c3:b8:47:9a:5d:3d:59:e6:2f:4c:4c:f8:ee:d7:b0:65:
         f3:d6:ac:47:90:b4:23:6f:4f:96:34:7d:37:48:81:ed:a9:f4:
         2a:68:dd:fe:44:48:15:ec:71:52:a9:e4:5e:6e:46:a3:30:12:
         c3:14:4a:db:40:ca:d9:75:3b:a7:9e:2b:f5:e6:0b:d0:f2:29:
         44:c4:46:d5:4b:ec:b8:9f:4c:c4:a8:8d:e1:5b:f4:61:62:90:
         96:1b:e5:e5:dd:52:59:e4:eb:4a:02:e7:c4:e0:57:e5:d4:5f:
         91:81:a0:a2:58:96:c2:fa:94:ec:ff:e8:67:5c:b1:97:0b:36:
         0a:f8:1a:e6:85:a1:fd:eb:8c:4e:24:ff:58:c9:3e:9a:19:71:
         2f:26:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org