Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa
File:                     3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa (raw, json)
Hash identifier:          8QW5sozb9cOrzghsuF091KeDVfaSoyZyEMHSTb5Bb1U=
Subject key identifier:   7C:84:CE:2E:0B:45:42:E9:28:AF:CE:A3:51:65:3D:CB:7F:F8:E6:C8
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       795612BEAEA5026667394D52DD9AED47CDEDF7FC
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa
Signing time:             Tue 05 Mar 2024 17:58:20 +0000
ROA not before:           Tue 05 Mar 2024 17:53:20 +0000
ROA not after:            Tue 04 Mar 2025 17:58:20 +0000
asID:                     52295
IP address blocks:        190.211.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:56:12:be:ae:a5:02:66:67:39:4d:52:dd:9a:ed:47:cd:ed:f7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Mar  5 17:53:20 2024 GMT
            Not After : Mar  4 17:58:20 2025 GMT
        Subject: CN=7C84CE2E0B4542E928AFCEA351653DCB7FF8E6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:4d:5d:84:1b:9f:69:66:67:53:5a:b9:d2:
                    5b:87:70:12:ba:a9:b7:51:67:d5:87:9c:30:fb:0f:
                    85:a5:6a:ee:46:ab:ad:8a:05:75:0b:6e:2d:10:04:
                    ef:a1:dd:8e:b7:97:35:0c:f1:24:68:99:8a:f0:41:
                    01:52:9e:92:5f:c8:27:fc:36:c6:b2:db:c6:64:ac:
                    26:19:22:14:82:66:c7:aa:48:1e:f1:2b:00:4f:b9:
                    e3:07:a7:06:d4:81:d9:4a:3f:0b:11:18:f3:7c:b3:
                    9b:ba:59:89:db:8c:86:84:c2:4a:4e:18:2e:f7:26:
                    f6:2a:04:d5:13:b0:10:d6:18:80:ed:f7:d0:f0:4e:
                    42:32:a3:44:12:f6:79:b2:2a:81:63:54:ad:c7:70:
                    d4:ca:8d:18:8c:0c:4c:ed:f5:8b:01:0e:27:2a:a3:
                    7e:96:69:b2:f8:c4:d3:f4:ea:63:fd:5b:bb:0a:3c:
                    ab:f9:63:9e:1b:61:b5:bd:63:12:da:5b:2b:d1:2a:
                    23:5c:27:e2:16:bb:54:82:04:d7:01:5f:8c:f6:e8:
                    07:03:5a:1a:ab:02:2f:2f:52:e1:72:5b:51:57:7e:
                    70:8c:64:2a:8e:10:7d:41:ad:1e:de:7e:35:68:c0:
                    3f:2a:c9:73:a7:eb:51:da:72:13:6a:30:42:dc:26:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:84:CE:2E:0B:45:42:E9:28:AF:CE:A3:51:65:3D:CB:7F:F8:E6:C8
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:0b:2c:8b:f9:ec:3c:d0:70:a5:59:10:77:c7:3e:0e:05:
         72:bc:0a:71:94:88:37:f3:c0:23:57:a6:d0:2b:2f:c8:5d:dd:
         5e:1b:9a:dc:ef:2c:4d:f3:fa:a4:9a:1b:6a:bf:cd:7d:2d:00:
         15:af:06:7d:f3:70:97:d4:af:fd:f3:02:04:e4:61:c0:97:28:
         e6:50:16:9b:e4:87:19:9c:b5:60:6c:e7:0a:31:1a:c7:aa:ce:
         a9:c2:66:b4:cc:5d:72:eb:9b:10:05:ff:b5:51:1d:f6:e0:7d:
         83:88:67:e9:b7:d1:30:f8:e9:1f:d4:8b:e8:1b:5b:27:5a:06:
         d0:3d:d1:45:15:63:57:9b:19:52:a6:e0:dd:1a:9a:4a:c8:ea:
         7c:3f:8a:87:8b:cf:97:04:29:56:81:d4:cb:62:41:ad:35:ea:
         ef:8d:11:38:e7:da:71:a6:c2:6d:c4:2f:ae:72:f6:cd:56:29:
         1d:fc:f5:0c:0c:71:eb:ee:d3:a8:e6:e1:1d:2e:4a:48:32:7d:
         ec:42:dd:a6:c5:b9:65:90:38:65:2c:4e:28:b5:31:d0:7b:01:
         d8:7d:8f:b6:50:54:3d:7d:19:2e:d9:09:90:e0:06:ed:3b:56:
         21:30:bc:90:c5:8b:a0:cb:2a:cd:3c:a8:73:82:60:e1:c8:af:
         39:6e:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org