Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38302e302f32342d3234203d3e203634323030.roa
File:                     3139302e39392e38302e302f32342d3234203d3e203634323030.roa (raw, json)
Hash identifier:          +xwwFW7vXUH7aSksgacOGUY7+/ldiGhsiGYytwYzWOw=
Subject key identifier:   8D:44:B9:AD:F5:6C:C7:12:D9:EE:0A:39:2A:DB:7D:86:BA:4C:E5:6F
Certificate issuer:       /CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
Certificate serial:       591553D3BB5DB77A280466B37E00F914DB8D055E
Authority key identifier: CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38302e302f32342d3234203d3e203634323030.roa
Signing time:             Tue 05 Mar 2024 18:22:05 +0000
ROA not before:           Tue 05 Mar 2024 18:17:05 +0000
ROA not after:            Tue 04 Mar 2025 18:22:05 +0000
asID:                     64200
IP address blocks:        190.99.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:15:53:d3:bb:5d:b7:7a:28:04:66:b3:7e:00:f9:14:db:8d:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
        Validity
            Not Before: Mar  5 18:17:05 2024 GMT
            Not After : Mar  4 18:22:05 2025 GMT
        Subject: CN=8D44B9ADF56CC712D9EE0A392ADB7D86BA4CE56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:ce:b9:f8:3f:1f:9a:93:55:df:04:0f:1f:
                    8f:7f:9a:43:e7:48:83:05:8f:7c:c5:76:3f:65:bd:
                    ca:3e:26:19:40:91:50:10:7e:de:e8:bd:f6:f7:db:
                    21:ec:b8:8f:f1:64:c8:ee:67:23:77:81:bd:0d:53:
                    9e:25:c8:64:2d:7b:93:f8:7d:50:33:f4:29:47:f1:
                    bf:8f:f9:88:3c:c3:87:b6:41:08:da:8e:a8:ee:54:
                    3e:6d:9a:ac:d5:6f:ba:c4:32:89:42:c0:74:70:34:
                    99:a5:bf:b3:c1:16:f8:21:58:d4:32:2b:b9:72:3a:
                    c9:3f:6e:7c:06:64:a3:4c:44:e3:6e:2d:32:a6:45:
                    77:2c:d6:12:df:a4:64:6c:66:a1:db:1a:bc:03:87:
                    89:b5:4b:44:81:38:7f:59:d5:80:6c:63:39:fe:e5:
                    e2:8a:5f:21:15:f8:67:4b:6e:49:db:87:c1:33:ae:
                    8e:e7:e0:d8:6c:b3:49:7d:09:6a:30:9f:01:5e:9a:
                    7a:95:05:35:37:97:0a:fb:ab:55:98:fa:30:ac:e0:
                    cd:dc:df:87:99:95:ea:18:64:23:94:03:3c:63:08:
                    16:91:95:ac:30:4d:08:d1:a4:f5:be:9b:95:b8:b4:
                    01:20:98:65:62:56:26:44:e9:de:5b:b0:36:82:85:
                    4c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:B9:AD:F5:6C:C7:12:D9:EE:0A:39:2A:DB:7D:86:BA:4C:E5:6F
            X509v3 Authority Key Identifier:
                keyid:CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38302e302f32342d3234203d3e203634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:9a:2e:00:a6:8d:b6:8c:b2:3e:e6:fd:fc:b0:75:70:7e:11:
         af:48:92:4e:46:09:99:81:ba:91:c3:d0:1d:86:f4:f0:3a:4e:
         f8:8a:cd:10:58:7e:11:fc:8a:40:58:20:b0:2e:21:02:38:03:
         45:09:d9:e3:c9:b4:b4:74:4b:20:db:98:6c:79:f0:f3:6a:8d:
         e7:09:0c:c2:05:67:70:d6:2b:0f:15:4a:4f:ce:33:06:0f:89:
         04:6d:32:c0:c7:85:1f:94:db:e2:dc:ce:f1:39:b4:4f:96:d6:
         f6:33:75:b6:ac:ed:e0:d5:23:14:e9:84:89:ac:81:4b:3a:a1:
         3e:5e:b3:42:26:a0:a0:f6:b6:b5:01:aa:8d:2f:e3:d1:1f:fb:
         79:0f:ec:3e:d3:9a:ce:86:61:87:f8:cc:68:25:39:53:dc:87:
         99:8a:04:e8:d9:0e:1e:e7:80:32:d8:2e:b0:6f:b6:f4:b5:9b:
         cd:37:e8:a9:1e:f2:b6:29:ee:db:7d:bd:b2:79:4f:64:6c:8b:
         fe:dc:a3:30:0c:b2:18:fe:07:92:30:fd:93:a3:19:dd:eb:16:
         6a:9f:10:57:6a:7b:21:67:6c:95:0b:72:96:b9:55:97:58:8d:
         7f:d8:73:f7:3d:bb:c5:d5:32:90:3e:2b:8c:c5:44:62:4f:c6:
         b7:33:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:34 2024 by rpki-client on console-ams.rpki-client.org