Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38332e302f32342d3234203d3e203634323030.roa
File:                     3139302e39392e38332e302f32342d3234203d3e203634323030.roa (raw, json)
Hash identifier:          gp5SCQttZ+k/M893uD4Jh7vmL+sYdXYDUvCIN3nVbnw=
Subject key identifier:   9B:62:F1:36:98:2A:71:3C:D1:3F:86:7F:93:C6:07:CB:22:50:A5:07
Certificate issuer:       /CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
Certificate serial:       60EAFEB76F723BF91637E1629967C46642AD9D60
Authority key identifier: CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38332e302f32342d3234203d3e203634323030.roa
Signing time:             Tue 05 Mar 2024 18:22:04 +0000
ROA not before:           Tue 05 Mar 2024 18:17:04 +0000
ROA not after:            Tue 04 Mar 2025 18:22:04 +0000
asID:                     64200
IP address blocks:        190.99.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ea:fe:b7:6f:72:3b:f9:16:37:e1:62:99:67:c4:66:42:ad:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
        Validity
            Not Before: Mar  5 18:17:04 2024 GMT
            Not After : Mar  4 18:22:04 2025 GMT
        Subject: CN=9B62F136982A713CD13F867F93C607CB2250A507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:93:ad:45:d2:19:5b:15:64:50:e3:74:f6:
                    1b:11:20:7c:6e:56:8b:76:4e:73:d3:11:d1:de:1c:
                    e3:6e:f8:39:8f:24:42:c7:bb:d0:e2:5f:b1:54:26:
                    90:16:7a:64:15:17:2c:b1:bb:0f:6c:c9:7a:cb:6d:
                    1c:0a:6b:8a:85:3f:29:1a:6e:87:07:86:6c:2b:09:
                    ad:d5:f1:f9:7f:01:2b:e5:f9:b3:3d:44:46:f1:31:
                    44:61:fc:4d:18:e3:b3:31:3e:ca:b0:7b:af:80:ba:
                    9e:2e:b6:69:a3:73:61:b6:42:79:ad:6a:82:4c:58:
                    ab:f2:e5:d7:f8:b8:9a:84:40:99:03:84:04:ee:96:
                    8c:31:6a:5f:30:9c:10:23:c4:4b:1f:24:01:3d:72:
                    50:23:fe:d9:7d:18:18:7f:b5:d8:1f:e5:30:f7:0e:
                    1e:5b:c8:bf:a8:ca:cc:25:b6:b9:a1:6d:74:7b:e1:
                    96:49:df:a7:71:c3:ea:5c:fa:42:5d:e6:cb:9b:98:
                    54:70:c4:31:12:a4:73:bf:66:f6:18:ca:40:41:22:
                    b4:71:d4:f5:72:44:8c:8d:cd:f1:28:46:35:b6:fa:
                    70:3d:79:ce:b9:3b:a8:6a:6c:25:50:12:fe:f4:87:
                    0a:32:4b:48:f7:e6:d5:65:01:0a:f7:36:69:8b:4a:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:F1:36:98:2A:71:3C:D1:3F:86:7F:93:C6:07:CB:22:50:A5:07
            X509v3 Authority Key Identifier:
                keyid:CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/3139302e39392e38332e302f32342d3234203d3e203634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:db:5e:b9:c0:b8:a5:40:35:39:c8:c5:1a:6a:cc:e5:de:53:
         85:95:fa:6a:62:bc:00:a4:9e:d0:b6:3a:fd:59:fb:57:45:65:
         9c:ef:c0:7e:91:8b:a8:0a:e9:9a:5e:f2:fa:75:12:9d:a8:f6:
         6b:15:34:c8:14:c3:e6:dd:ea:e4:3b:46:ce:52:e2:a3:fd:c4:
         dc:84:78:68:9e:54:90:98:75:b8:6d:d2:05:19:3c:63:9c:84:
         6a:4c:37:04:b9:94:57:4e:7e:ec:7a:d2:1b:d4:d1:3e:c4:22:
         e4:a7:a8:f4:11:dc:69:4a:81:07:59:59:36:4e:4a:ec:34:1a:
         df:ac:0d:a0:3a:ed:8d:62:5e:08:14:55:e5:6e:b6:46:77:41:
         cb:6d:0f:07:2a:1b:07:cc:89:4f:7f:76:17:04:6d:fb:2d:d3:
         dc:15:b7:5b:05:5d:80:62:77:1c:bf:63:e4:a1:6a:17:6e:03:
         8f:3c:bf:01:90:b4:69:62:20:51:05:0e:60:a9:ea:98:d4:62:
         2f:2c:ae:72:95:c0:d6:36:ce:50:3b:90:f9:78:39:c1:dc:f4:
         d5:57:ae:b5:56:89:44:ee:2f:5e:eb:1a:ea:d8:df:e0:27:3b:
         5f:73:de:df:e7:a8:2a:01:f9:f8:ac:db:c4:63:6a:e3:f2:ca:
         d0:f9:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:15 2024 by rpki-client on console-fra.rpki-client.org