Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa
File:                     3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa (raw, json)
Hash identifier:          kBH21w/sWTOA0MuEmJC8AbTgysHWmBJdobnvcsHaCIw=
Subject key identifier:   26:DA:99:8E:63:05:AF:D9:62:AC:1A:A8:FE:77:99:0F:4C:C7:69:E2
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       185A50EA4C50D396F0D22B2EB44CB573A50B6E56
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa
Signing time:             Tue 05 Mar 2024 17:58:19 +0000
ROA not before:           Tue 05 Mar 2024 17:53:19 +0000
ROA not after:            Tue 04 Mar 2025 17:58:19 +0000
asID:                     52295
IP address blocks:        190.211.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:50:ea:4c:50:d3:96:f0:d2:2b:2e:b4:4c:b5:73:a5:0b:6e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Mar  5 17:53:19 2024 GMT
            Not After : Mar  4 17:58:19 2025 GMT
        Subject: CN=26DA998E6305AFD962AC1AA8FE77990F4CC769E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:d5:f6:e0:6e:19:9d:72:b8:0a:c0:82:88:
                    ba:52:78:f5:82:63:52:7e:4f:74:f4:c4:d2:e2:97:
                    2e:e2:67:2f:25:57:85:26:d0:b9:77:e6:40:ed:09:
                    09:30:93:65:d4:cf:0d:f3:34:64:5e:ea:f4:24:72:
                    09:15:70:a3:21:9b:6f:91:d2:a9:6b:18:8b:a9:54:
                    1b:42:f2:c8:e1:04:6f:93:18:bf:9e:21:56:ca:44:
                    e0:94:8e:bf:3c:97:8e:dd:92:b7:f6:2d:94:74:ef:
                    43:0d:55:88:10:21:2b:6b:07:d2:f8:b2:92:f9:55:
                    16:7f:a3:3f:fe:b4:df:a2:1b:b0:78:4e:35:9f:29:
                    07:0c:1c:13:49:e9:6e:2f:26:b8:9f:a7:81:3d:8e:
                    95:d1:f5:70:1e:e5:05:3c:4c:d8:6d:ab:02:c1:2a:
                    df:7d:4b:09:6f:4d:ca:ae:dd:c6:a3:c7:3f:e5:d0:
                    96:96:f8:9f:30:82:10:d1:2a:05:40:1a:a6:3f:91:
                    18:b5:eb:bf:d1:a4:35:ab:11:62:ae:b8:ac:e9:3b:
                    dd:9e:06:37:7e:33:bb:a1:d9:3f:1f:53:78:2a:dc:
                    09:52:e3:c3:15:12:bb:42:78:54:a9:1f:f7:85:78:
                    54:9a:28:6b:e1:fa:dc:27:4d:6f:a6:68:92:95:2d:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DA:99:8E:63:05:AF:D9:62:AC:1A:A8:FE:77:99:0F:4C:C7:69:E2
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234372e302f32342d3234203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:b0:ee:15:07:da:6a:3a:3d:d6:ed:ab:97:50:5e:90:96:
         af:e7:da:4c:55:f4:7e:35:79:6a:ce:64:45:46:b0:6b:6c:8e:
         7c:96:06:0a:94:39:aa:bb:07:31:21:74:7a:69:b0:f9:26:46:
         6c:73:a6:9b:fc:21:54:5f:33:28:c6:42:9f:0c:9a:92:3a:c0:
         0e:92:a0:1f:9c:8a:c2:3b:4b:0a:c4:35:5c:65:65:66:de:a3:
         89:6b:c7:0f:4f:da:0f:ce:ea:bf:b9:13:64:72:6b:ef:be:fe:
         c5:01:83:09:59:c3:40:f6:ea:8a:1e:4e:64:6c:4f:97:e3:d2:
         aa:3a:89:0b:d2:ce:dd:ac:08:d3:b9:f9:0a:cd:3a:2a:8f:49:
         8f:57:aa:f2:44:ea:b5:cb:47:7d:55:8e:cf:93:fa:76:11:a2:
         07:a4:9f:40:92:a1:54:78:7c:0c:f1:3a:fc:cb:3f:12:c4:c8:
         e0:f3:ea:99:bb:c0:05:de:eb:11:27:3e:bf:80:5a:96:ee:6e:
         e8:b5:e1:2d:5d:ba:59:4e:8f:d1:5d:6b:4c:9b:3b:ea:b5:ac:
         b5:2e:67:c7:00:f9:3a:59:1b:59:f3:3f:86:c6:f4:b1:5f:f8:
         ae:98:ad:d7:27:27:77:ad:da:23:1e:58:ae:ea:be:6b:b0:36:
         71:40:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org