Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa
File:                     3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          hKo8ks6k0gq0WG24bG0iEKS1WqQykAAu1ifJatdq67k=
Subject key identifier:   91:6C:F7:96:A2:47:C0:52:8D:13:F7:CC:EB:DF:A0:E0:C3:72:95:01
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       30404674B9EA9825DCD9491ACDE104D9E46ACE5D
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:06 +0000
ROA not before:           Sun 31 Mar 2024 03:20:06 +0000
ROA not after:            Sun 30 Mar 2025 03:25:06 +0000
asID:                     52369
IP address blocks:        190.110.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:40:46:74:b9:ea:98:25:dc:d9:49:1a:cd:e1:04:d9:e4:6a:ce:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:06 2024 GMT
            Not After : Mar 30 03:25:06 2025 GMT
        Subject: CN=916CF796A247C0528D13F7CCEBDFA0E0C3729501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:72:73:df:e2:13:be:08:be:bd:4f:4d:49:
                    cf:f7:05:97:9e:ba:e5:8f:7e:1a:64:a5:af:7b:e7:
                    47:42:0f:53:dc:26:66:8c:25:c4:29:26:54:16:dc:
                    83:82:34:10:e5:74:84:88:6a:06:f4:9d:be:c1:8d:
                    35:31:18:39:d1:4f:ba:c7:a9:35:02:4e:76:2f:be:
                    d6:a4:6e:1f:5a:fc:3d:4c:b6:1d:6d:33:63:41:5b:
                    9a:e6:ad:59:a1:c4:ce:df:86:b1:16:e8:ce:d9:d3:
                    05:4c:70:25:d9:28:73:66:0d:68:42:01:12:ef:23:
                    14:d0:2d:60:e8:90:55:5e:fd:28:1e:54:be:f0:00:
                    b1:58:0e:40:94:0f:9d:4d:b4:57:aa:60:0c:59:b8:
                    6f:69:59:4f:93:34:a2:78:dd:f0:a8:2b:47:b0:f0:
                    a9:eb:2c:98:66:f7:1a:7f:0e:24:95:90:70:9e:12:
                    e5:e4:f1:05:3b:b9:fb:e7:5d:89:b1:47:0e:c4:05:
                    36:71:b7:6a:ec:f4:84:38:dc:07:cd:4c:a8:16:a8:
                    6e:e3:2d:85:84:18:1f:cf:f5:0c:ae:06:45:15:24:
                    82:b0:2a:e9:ad:5c:30:18:74:31:c2:cd:6f:8c:ce:
                    88:1c:c5:01:e6:ad:0d:72:20:40:b6:9a:4c:9d:e7:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6C:F7:96:A2:47:C0:52:8D:13:F7:CC:EB:DF:A0:E0:C3:72:95:01
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:e4:f0:1d:c8:97:06:54:1a:b9:72:30:70:bc:07:19:b2:
         07:1b:71:e7:79:79:c2:17:66:b9:b2:75:d5:0c:96:0d:7b:47:
         9a:03:b2:4b:c7:2f:57:d5:b7:7d:7a:b5:69:b8:be:df:90:c2:
         68:9f:b9:84:9e:8d:13:10:70:49:20:5b:fb:8d:56:c7:ab:e4:
         df:a3:61:99:60:ac:f6:9b:7d:91:3d:8a:0c:10:59:a1:7b:89:
         2c:ca:6a:43:9f:56:ee:50:a9:e7:50:76:19:e4:8b:92:4c:66:
         fe:f4:bb:5a:bf:8c:91:2c:96:f2:9e:a0:e4:a9:4e:8f:1b:60:
         23:e2:d8:0f:9e:7a:c7:87:b4:40:84:7b:00:7a:30:af:6d:19:
         fb:01:a6:a3:9b:6d:16:fe:30:5d:1a:57:bc:f6:c8:3a:6e:50:
         29:39:06:d7:6b:00:47:a3:0e:53:f1:ce:2b:11:30:68:45:d5:
         f6:d1:51:44:14:e0:58:57:1f:62:5b:4b:b9:56:97:72:60:7c:
         a1:95:af:33:65:6b:ff:0e:e0:72:12:88:26:b0:e4:ff:f3:66:
         83:c0:84:5e:3c:ec:19:16:cd:2d:6b:87:c7:e4:78:ad:4d:06:
         f7:60:b0:67:42:0e:8b:3b:1e:9e:c1:9b:11:4b:90:2c:24:57:
         73:f2:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org