Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232352e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3232352e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          8+V4lwL5k5OiUdU497Miw2H127uV8xYLC4zL+/sxyJw=
Subject key identifier:   BF:0C:A6:6E:97:7B:EC:E3:9C:B6:D3:0F:59:C3:8A:65:0E:06:89:49
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       28AEC59E42B27AA6FA1F69BC682F0CE222B4BFE8
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232352e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:09 +0000
ROA not before:           Sun 31 Mar 2024 03:20:09 +0000
ROA not after:            Sun 30 Mar 2025 03:25:09 +0000
asID:                     52369
IP address blocks:        190.184.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ae:c5:9e:42:b2:7a:a6:fa:1f:69:bc:68:2f:0c:e2:22:b4:bf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:09 2024 GMT
            Not After : Mar 30 03:25:09 2025 GMT
        Subject: CN=BF0CA66E977BECE39CB6D30F59C38A650E068949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:0a:7f:fa:d0:f5:df:60:63:ac:09:e8:06:
                    8b:09:93:07:8e:cb:45:8a:2c:29:47:10:ac:ce:ef:
                    94:1c:2c:67:1d:b3:5d:e1:4e:19:cd:86:95:40:29:
                    65:73:cd:40:82:36:42:df:6b:e3:e6:66:f4:bf:ac:
                    28:b8:45:90:92:ae:fa:3b:33:cf:82:68:bd:4b:46:
                    75:55:17:ac:a9:b7:8e:87:40:02:3d:c6:6e:da:c5:
                    6b:91:49:23:ef:28:e8:02:94:d5:0d:8d:e4:b5:83:
                    f2:12:36:19:76:2b:0f:15:95:a6:fc:be:6e:91:4b:
                    41:4b:a6:8c:ae:9c:e6:08:76:60:39:49:38:18:91:
                    aa:8f:0a:7a:e8:4f:b5:89:85:b1:1e:64:72:fa:d3:
                    b3:c2:2a:ac:c5:24:79:81:90:3c:a5:10:4b:1e:aa:
                    27:90:de:a5:0e:75:c8:bf:71:05:ca:c2:16:5d:89:
                    55:ca:df:3d:ca:6d:d7:3a:10:3c:61:9f:2a:ed:f8:
                    ba:d5:03:1e:4d:40:9e:7a:99:14:71:57:0b:5c:6d:
                    89:45:4c:84:c4:5c:43:ee:24:bd:b6:20:44:50:44:
                    b9:65:f3:ec:41:d6:80:6d:96:a4:9e:9b:3b:9b:bb:
                    0b:5f:8e:f3:63:e3:40:bf:6f:1f:31:f8:68:87:61:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:A6:6E:97:7B:EC:E3:9C:B6:D3:0F:59:C3:8A:65:0E:06:89:49
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232352e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:b6:3b:20:64:37:66:de:53:3b:32:0a:f5:77:0b:22:44:
         82:9b:6a:3a:f1:d9:e6:8b:6b:0e:a8:9e:90:1b:23:ba:c8:c5:
         22:51:97:b7:e2:56:fb:df:43:06:c7:1d:dc:e5:a7:97:db:04:
         cf:f9:81:d5:c5:ef:cc:8a:2e:4b:dd:49:67:aa:02:01:d4:14:
         e4:7c:4c:fc:0a:81:fd:cb:dd:7b:91:82:d1:ec:1d:33:e2:9f:
         da:75:81:4e:f4:c3:ed:40:31:e4:30:32:29:4a:24:09:2f:d9:
         a3:00:4a:90:19:f3:f2:ff:c6:06:eb:3e:1e:48:0b:d4:43:ea:
         0f:0d:25:2f:6d:02:57:b6:12:88:13:5e:c5:be:32:21:49:23:
         3d:27:34:86:11:03:4a:1a:64:38:49:bb:15:f7:0f:68:ff:96:
         89:46:7e:38:cf:16:c3:4c:fe:07:e2:ca:24:ff:d5:fc:35:0b:
         f6:54:50:78:e6:4d:10:5d:8f:35:65:23:f4:68:d7:eb:8a:36:
         8e:ab:a4:8e:2d:22:48:fc:28:e4:99:35:95:58:72:83:24:5e:
         60:a1:d5:56:b2:f6:08:69:1b:f8:c8:8c:5f:8d:d5:92:00:2b:
         3d:9d:a5:bc:fe:ad:6e:8d:ea:16:16:a2:6d:35:0e:0e:f2:cd:
         aa:28:a6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:26 2024 by rpki-client on console-fra.rpki-client.org