Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e382e302f32342d3234203d3e20323633313733.roa
File:                     3139302e3230382e382e302f32342d3234203d3e20323633313733.roa (raw, json)
Hash identifier:          G38iRpm7B7gcPXWqlfZHGJPhgvviFYShSwueqa7InqA=
Subject key identifier:   1A:37:F2:D1:24:84:1E:24:82:ED:CF:D6:B6:E7:4C:FE:2D:0E:4E:73
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       5249AAF21D9FF98AA0982697A4F666FE565A32A1
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e382e302f32342d3234203d3e20323633313733.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     263173
IP address blocks:        190.208.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:49:aa:f2:1d:9f:f9:8a:a0:98:26:97:a4:f6:66:fe:56:5a:32:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=1A37F2D124841E2482EDCFD6B6E74CFE2D0E4E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:1c:58:39:e2:7e:9c:32:3a:18:fd:e8:2a:
                    6b:37:09:5a:15:a0:ca:3a:86:3d:37:ca:64:4b:de:
                    13:ac:81:21:58:31:af:ca:7d:18:fe:3e:a0:d5:2f:
                    e4:99:80:79:e2:f7:8c:45:55:d8:d8:e9:fe:53:49:
                    b1:bd:7e:ce:df:08:de:40:25:a9:21:8a:c4:df:43:
                    03:23:7f:84:a3:c6:60:ad:70:90:59:25:a5:99:69:
                    1d:a4:8e:cf:70:f2:3f:d2:88:aa:6a:8a:a3:9c:41:
                    ca:61:46:db:78:4f:ff:15:0b:8f:4e:45:4e:c0:fe:
                    5d:44:eb:1c:18:1e:44:64:99:a5:57:a6:ea:34:a6:
                    13:46:22:2b:cc:30:26:5b:a6:d4:d1:97:6c:64:52:
                    57:4a:fb:5e:23:9e:60:4b:a1:9b:6d:5f:db:04:3b:
                    67:af:70:76:4c:85:a3:89:eb:19:20:15:31:22:e6:
                    8f:1e:6a:86:86:90:f4:1d:18:5b:86:6d:59:c0:e8:
                    da:e9:fa:75:2e:0e:c4:5e:07:31:28:b3:cc:65:80:
                    3c:f7:94:43:06:32:d8:11:cb:4c:b7:cd:81:62:f0:
                    44:6e:d2:cf:bd:1a:a4:7c:a0:20:7b:1f:97:22:24:
                    b7:30:2c:8b:a0:ff:2a:7f:6f:3b:f1:08:8c:5a:1c:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:37:F2:D1:24:84:1E:24:82:ED:CF:D6:B6:E7:4C:FE:2D:0E:4E:73
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e382e302f32342d3234203d3e20323633313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.208.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:11:60:6e:b9:63:35:0c:7b:fc:43:42:4f:22:e5:d2:9b:94:
         e2:35:c5:5e:e5:6f:19:c4:f6:70:d9:af:e1:fe:d6:26:1c:a1:
         be:a9:00:e2:b8:cb:46:c2:04:5f:4a:2a:97:42:cb:e5:ce:ec:
         fa:5f:ea:03:fd:6e:58:37:a2:27:b2:6c:9c:16:08:3f:08:7f:
         d3:67:99:9b:ac:9b:c3:95:89:b5:e9:0d:13:5f:7b:f3:7e:87:
         62:96:8a:41:43:a7:23:66:c8:03:1f:f2:91:09:70:19:6d:40:
         d3:69:13:65:2b:97:a4:e2:15:05:b5:9d:13:b3:06:dc:48:cf:
         00:f6:b7:57:e6:04:b4:78:a0:96:cb:19:72:ce:07:12:69:f6:
         e2:f1:cc:47:c3:ab:45:13:df:f8:01:3f:6a:f0:e1:f8:a0:a9:
         c0:89:bb:f8:25:65:c0:b7:85:c0:b1:6a:ea:82:d1:3a:8d:44:
         09:03:aa:08:83:d3:03:56:1f:14:d9:c0:57:28:ad:1c:2b:91:
         f9:69:47:d3:6d:bb:9d:92:e1:cb:9f:22:6c:ff:22:c7:db:9e:
         3f:db:db:f7:cd:86:86:08:55:57:22:27:7d:e9:ec:25:c2:eb:
         da:b3:61:b9:1c:8b:0e:90:28:ec:3c:e8:ce:7f:22:12:af:3c:
         ca:24:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org