Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e35362e302f32322d3234203d3e203237373338.roa
File:                     3139302e36332e35362e302f32322d3234203d3e203237373338.roa (raw, json)
Hash identifier:          +CJz54A5mAmvgwII4ozYIudRd7zQ/Xijva/kQt5UIFE=
Subject key identifier:   14:18:96:EB:3D:F9:13:65:00:74:33:29:42:42:E2:5A:A7:80:20:56
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       392925CA4675B9EB68E2F6448DE06C0EE0C3B3A2
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e35362e302f32322d3234203d3e203237373338.roa
Signing time:             Tue 05 Mar 2024 18:16:20 +0000
ROA not before:           Tue 05 Mar 2024 18:11:20 +0000
ROA not after:            Tue 04 Mar 2025 18:16:20 +0000
asID:                     27738
IP address blocks:        190.63.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:29:25:ca:46:75:b9:eb:68:e2:f6:44:8d:e0:6c:0e:e0:c3:b3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Mar  5 18:11:20 2024 GMT
            Not After : Mar  4 18:16:20 2025 GMT
        Subject: CN=141896EB3DF91365007433294242E25AA7802056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:9f:53:43:e2:55:2f:be:1d:2a:16:bd:09:
                    41:ed:27:a4:03:57:e8:e8:3b:aa:cb:94:31:ee:11:
                    7b:6c:51:d9:81:d8:db:f7:55:c5:a3:ff:01:25:93:
                    24:76:6f:50:12:f0:69:64:d8:8e:8b:1a:5f:bb:75:
                    15:0f:fc:73:bf:7d:17:b0:41:6e:98:17:0c:18:7c:
                    1d:f7:fe:5f:b2:42:6e:5a:c0:de:18:e0:3f:d8:0d:
                    a5:98:f5:cc:6c:06:21:71:18:b5:d3:c6:07:a8:37:
                    0d:73:51:0f:37:e9:be:11:23:40:08:6f:c6:3f:06:
                    33:3b:b7:7d:72:8a:97:2c:4e:e5:8c:ee:e8:d6:6a:
                    cc:30:25:3b:a3:31:82:a1:d7:60:0e:12:31:e3:0a:
                    2f:35:1c:39:2c:0d:df:28:29:f6:07:62:72:8f:23:
                    30:1b:01:3b:10:bf:00:64:71:e7:a7:59:bb:92:aa:
                    1a:20:2c:d8:c1:f7:04:7d:70:78:e0:c6:d5:ef:0f:
                    67:50:a0:3d:4c:b1:92:15:52:4c:73:03:25:80:0d:
                    23:f2:44:1b:23:8c:60:2e:e7:2c:29:39:17:29:54:
                    ee:78:fc:58:d1:d7:d7:10:20:8c:69:91:d1:8b:67:
                    a9:33:7d:ea:18:99:be:dd:ec:b7:eb:f6:ec:70:40:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:96:EB:3D:F9:13:65:00:74:33:29:42:42:E2:5A:A7:80:20:56
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e35362e302f32322d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:b9:71:ca:a9:09:49:de:db:3e:e9:61:27:a8:5b:de:fc:
         61:16:8f:ff:eb:d9:c2:bb:e1:b7:bb:de:85:24:37:f7:46:d4:
         fc:3e:d8:cf:a4:80:08:c1:a9:d2:93:81:b0:6c:4c:84:7e:59:
         6b:f4:82:31:11:5c:ae:5f:c5:3e:83:fe:4c:27:4a:a5:39:40:
         46:76:d4:0a:60:e5:c2:5b:47:54:29:61:ec:ce:d7:8c:7f:63:
         65:42:ea:69:c7:29:ec:36:8a:ba:0f:7d:51:80:ac:1d:a5:64:
         43:88:fe:5b:ff:2e:06:3e:17:c2:c5:0f:40:c8:97:f4:6b:c0:
         37:21:8e:ad:ea:de:9c:8f:b5:11:6a:7c:60:d0:5c:0b:3b:d2:
         3c:64:9b:98:52:43:06:84:bc:90:33:0f:23:e9:e6:9a:a0:a7:
         3b:b6:a4:01:4b:01:5f:c0:d1:b6:43:03:b4:3b:c2:2b:84:45:
         4f:23:c4:6a:88:59:f0:e4:2f:a5:6a:0e:0b:46:b8:e3:18:44:
         6e:0b:cc:d6:4c:e0:4e:c9:fc:85:a0:0f:99:10:9f:a1:62:09:
         90:c0:7f:fa:ad:f7:1e:de:7d:32:d7:e1:fb:04:1e:a1:23:bc:
         bf:a1:02:4a:c6:26:ee:90:6a:66:36:fe:c1:80:72:f3:50:70:
         a0:da:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org