Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          v9eS6VGy0uYtujpBYSRA4WSGvOzggeSHlBLq0w0rc0c=
Subject key identifier:   76:12:04:73:9F:AE:88:38:63:E7:3A:CC:42:E4:21:51:1C:F4:8A:BC
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       0B9B614C2AA568F139524C1B55511BD27BFB1683
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:04 +0000
ROA not before:           Sun 31 Mar 2024 03:20:04 +0000
ROA not after:            Sun 30 Mar 2025 03:25:04 +0000
asID:                     52369
IP address blocks:        190.184.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:61:4c:2a:a5:68:f1:39:52:4c:1b:55:51:1b:d2:7b:fb:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:04 2024 GMT
            Not After : Mar 30 03:25:04 2025 GMT
        Subject: CN=761204739FAE883863E73ACC42E421511CF48ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:89:cb:78:a5:29:a5:ae:75:50:ff:00:fb:
                    d3:a0:87:be:ff:54:bf:86:ba:3f:ba:35:58:3e:48:
                    78:66:28:40:2d:1c:10:de:6c:ab:3a:2d:3f:30:03:
                    e4:a7:fb:0d:12:ad:d7:b8:8f:84:59:c3:b9:63:dd:
                    c2:44:36:95:49:64:7c:61:e8:48:06:4a:e1:02:c1:
                    c6:f3:e5:a1:70:41:c2:48:51:f3:36:20:33:d6:23:
                    16:1c:b1:d2:87:0a:8b:cd:3a:80:73:85:29:fb:4a:
                    ee:bb:fe:46:63:25:40:bd:c3:2a:e0:39:52:31:f1:
                    93:ff:19:8d:f6:86:87:86:5d:1e:4d:32:4d:25:d3:
                    b3:87:42:5c:f0:8e:98:e1:50:57:74:c8:ca:4e:cc:
                    6e:4a:e4:e9:63:cf:c5:3d:3b:80:0b:b8:5c:b1:38:
                    23:dc:94:02:3b:fb:d0:29:15:e9:9c:0a:58:a4:d6:
                    f3:e5:2d:1d:68:30:e1:99:f9:f5:9b:5e:f6:96:69:
                    04:8b:4d:4d:72:d6:79:2d:7f:ea:ec:65:6a:99:8f:
                    0c:72:7b:0a:95:14:8f:ce:50:9f:f1:5c:5b:52:18:
                    ba:b2:36:e5:af:17:c3:fe:5b:40:b9:19:13:de:e1:
                    02:35:24:96:0e:59:d3:9e:5a:11:53:eb:68:f9:ac:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:04:73:9F:AE:88:38:63:E7:3A:CC:42:E4:21:51:1C:F4:8A:BC
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:28:d9:fb:49:16:6d:a1:16:4e:b8:16:92:4a:90:6e:7c:b8:
         3e:30:23:cc:99:a5:84:d6:41:b2:f0:f0:98:7f:fc:54:d9:86:
         51:f5:ba:5b:45:67:7a:0c:96:c1:8b:bb:fe:71:f1:71:43:58:
         9c:fb:11:3d:fa:57:d7:b9:f5:ad:34:bb:74:8c:ce:c9:3c:f4:
         44:4d:e1:0a:77:e2:d0:e8:49:45:4a:86:70:d6:25:6b:42:96:
         e0:02:b9:9a:9b:76:2c:1c:5a:05:68:75:09:b1:eb:05:aa:e9:
         a9:a2:c2:97:16:bc:c4:a4:9a:9c:0c:70:6c:2f:ec:43:c7:79:
         68:9f:c1:e4:0f:81:14:29:72:78:ed:1b:de:fe:54:71:00:f4:
         e6:ce:80:88:a6:92:54:84:02:57:a7:81:96:63:64:b1:3a:64:
         7c:ce:04:11:5f:cd:f1:7c:48:4c:fa:7a:9d:c9:d9:a4:eb:4f:
         34:fe:f5:f7:a7:e5:3f:91:b1:ad:0d:f0:0b:55:33:19:21:69:
         36:cd:0d:53:ad:18:69:7c:59:79:da:de:3d:72:07:58:c7:25:
         bd:65:73:29:be:cc:29:da:66:88:9a:ea:ca:e7:3c:01:f1:83:
         ad:31:04:27:86:ba:84:89:0a:7d:59:a4:b5:53:38:da:0c:d8:
         55:dc:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org