Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232382e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3232382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          t0cHvQ2yBfhJ3kfQOHmT7KXhqCYlmKSwPdzSvwyQDSY=
Subject key identifier:   2F:94:E8:CE:C5:F8:ED:B6:C5:AD:86:30:17:F8:F1:6C:21:41:AE:74
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       16DEC0471E27791D320B1C1A8EE6CE9A612EA228
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232382e302f32342d3234203d3e203532333639.roa
Signing time:             Tue 16 Jul 2024 22:35:00 +0000
ROA not before:           Tue 16 Jul 2024 22:30:00 +0000
ROA not after:            Tue 15 Jul 2025 22:35:00 +0000
asID:                     52369
IP address blocks:        190.184.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:de:c0:47:1e:27:79:1d:32:0b:1c:1a:8e:e6:ce:9a:61:2e:a2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Jul 16 22:30:00 2024 GMT
            Not After : Jul 15 22:35:00 2025 GMT
        Subject: CN=2F94E8CEC5F8EDB6C5AD863017F8F16C2141AE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:9d:b5:f1:70:76:ff:a1:a9:35:7e:91:b4:
                    2e:60:2a:2a:d1:48:59:15:36:9a:01:8d:fd:6f:78:
                    18:ef:26:b0:0f:27:7b:58:22:c0:04:44:3d:60:89:
                    de:1c:89:30:f8:46:07:26:bc:dc:31:42:74:4e:57:
                    1e:1e:4c:f4:54:77:8f:8f:42:b6:ce:35:e6:41:8b:
                    b1:47:62:ea:53:f5:f8:66:17:18:3c:5c:45:ed:95:
                    d8:96:c1:ed:20:8a:dc:13:86:cf:05:61:8d:a3:6a:
                    d0:dc:4b:c3:38:a2:8b:60:f1:ff:94:c5:08:04:3f:
                    0a:44:30:e5:c0:55:6e:aa:36:fd:39:d9:4a:c2:67:
                    39:82:bd:0e:c2:ea:1d:ac:e7:71:53:82:4f:77:b4:
                    1d:28:67:8e:cf:40:94:91:24:0c:78:42:bc:16:b0:
                    03:48:7f:12:c4:f8:42:6d:94:c8:69:21:33:35:f1:
                    08:91:32:ef:9c:d1:83:fd:f3:b6:eb:3f:79:b8:f6:
                    bf:67:db:8b:fa:73:d8:4a:09:49:7e:c0:87:9f:23:
                    37:6f:63:96:f6:36:b0:5a:cb:d9:94:d8:04:c3:fb:
                    37:b5:41:1e:0d:07:d3:14:5e:da:44:c2:03:ba:55:
                    ea:a4:65:66:d4:74:f0:75:11:90:4f:36:2b:34:c9:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:94:E8:CE:C5:F8:ED:B6:C5:AD:86:30:17:F8:F1:6C:21:41:AE:74
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232382e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ca:5c:5a:4b:1d:d6:b0:33:5a:27:d3:18:10:ca:37:3e:ae:
         c5:83:77:35:f4:dd:b9:d3:bd:28:ed:f2:1e:3a:31:ce:b0:ab:
         43:d3:a7:de:88:cb:c6:59:ab:b1:77:f2:33:f7:2a:e4:26:2f:
         76:92:e4:b8:c4:34:1c:fa:bc:d2:f8:cc:a0:48:d7:6f:8f:43:
         3e:91:3b:2f:fb:c7:67:11:ec:f3:82:02:62:e2:03:0b:71:2f:
         a7:f6:e8:dd:c2:1c:8f:12:75:12:0e:ea:82:19:1c:fb:89:43:
         d0:08:b4:f8:c2:28:00:b3:3f:1f:0e:20:23:8b:6f:0d:95:fe:
         cf:91:d4:8e:91:8d:7c:b0:18:4e:ce:b1:b6:63:63:7d:cd:b8:
         4f:da:a9:0f:6d:91:9b:46:c1:8c:3b:51:30:34:ba:77:96:a9:
         2d:61:08:d1:7c:fe:59:b2:47:82:bd:e4:59:6f:53:ca:b8:fa:
         be:d3:7c:6a:6a:5d:bf:75:2b:be:f0:bb:3c:ab:7e:99:17:1e:
         dd:32:a4:20:24:d3:1f:c8:32:eb:18:64:15:d2:e7:03:39:85:
         11:4e:14:31:34:70:c4:8e:32:ba:26:ac:4e:bc:94:2a:13:61:
         01:10:da:f4:05:96:d1:44:67:47:50:de:59:7b:4b:3d:0c:33:
         52:83:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 16:31:02 2024 by rpki-client on console-fra.rpki-client.org