Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3230392e302f32342d3234203d3e203233353230.roa
File:                     3139302e3133312e3230392e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          DmPWxXkrVq/I7vqGEUgIjLvjd0gyv6h3pXMhxy3qZ3E=
Subject key identifier:   8E:3B:77:6E:BD:6D:C9:D3:3C:91:1B:84:22:D2:8B:2E:B6:8C:BB:83
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       3AE39DD1637391803DD447195DB40174A18D1AF0
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3230392e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:16:09 +0000
ROA not before:           Tue 05 Mar 2024 18:11:09 +0000
ROA not after:            Tue 04 Mar 2025 18:16:09 +0000
asID:                     23520
IP address blocks:        190.131.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e3:9d:d1:63:73:91:80:3d:d4:47:19:5d:b4:01:74:a1:8d:1a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:09 2024 GMT
            Not After : Mar  4 18:16:09 2025 GMT
        Subject: CN=8E3B776EBD6DC9D33C911B8422D28B2EB68CBB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:da:fc:15:3c:49:5a:92:04:ee:cc:c1:32:
                    7b:1d:df:9f:a6:cf:79:fd:df:a9:a6:e2:a1:83:ba:
                    02:3a:c4:11:a7:0e:a1:e3:1c:f0:05:f2:dd:71:3f:
                    5f:52:a1:00:1b:cf:c9:ce:3c:6a:53:48:b2:6f:7f:
                    0e:c7:3c:88:9e:1b:90:ac:c4:90:84:0a:da:7b:59:
                    1c:48:ce:42:69:5b:a1:89:6a:d7:01:f2:0b:bd:b2:
                    49:99:2c:b7:17:2c:77:3c:2a:0a:b5:20:f5:ca:26:
                    82:da:f8:ed:8f:53:73:36:4d:b5:35:b3:e0:7b:a3:
                    e2:eb:b8:7d:ed:ac:2b:ce:62:dd:99:38:6f:c4:6a:
                    32:1b:54:f4:96:b0:00:9f:cc:99:8f:2a:bb:6e:bd:
                    4f:b8:8e:cf:3b:82:55:06:87:dc:59:90:f9:04:ba:
                    d4:07:a6:fb:e6:e8:bf:0e:53:cf:e3:c5:da:de:d9:
                    8e:4e:2d:fe:28:7e:fb:dd:4d:03:ba:34:0a:e3:a1:
                    d3:f9:9f:b1:b1:67:ed:a3:4b:2a:a0:72:d4:19:79:
                    72:e0:41:f6:30:66:e3:b4:7a:8a:31:a3:ee:9d:dd:
                    1e:a9:bc:6c:5a:25:9b:dd:34:e9:06:23:db:86:08:
                    4b:07:e3:fc:ff:2e:fa:2f:b8:57:de:07:d0:85:06:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3B:77:6E:BD:6D:C9:D3:3C:91:1B:84:22:D2:8B:2E:B6:8C:BB:83
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3230392e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:a4:78:18:9e:8e:cc:63:51:4a:70:9b:a6:76:c5:fb:42:
         b0:95:b3:34:f2:15:bb:43:32:74:6f:d3:24:9f:b7:0f:1b:d5:
         f8:98:ce:c6:94:93:e9:ba:19:12:01:a8:ff:1a:7a:fd:c1:d5:
         84:c4:8c:5f:64:ee:8e:98:52:a1:60:36:1a:c1:65:cf:c1:1a:
         3a:10:33:91:98:ee:56:bd:ae:b3:2b:65:70:df:dd:2c:93:94:
         71:89:9f:e4:5b:7e:b6:c7:45:7e:bc:df:19:e4:5a:a6:3b:60:
         ee:7f:03:87:ed:cc:57:c9:1a:02:e1:0a:e2:00:83:e8:c2:46:
         ea:e4:08:f9:d0:62:57:73:55:39:35:14:58:46:ec:79:1e:1d:
         7a:a1:91:3a:4c:29:dc:b7:87:7c:c4:9b:af:cc:f5:ad:f6:cb:
         24:ec:3f:6c:a3:98:55:ef:e4:41:d0:7d:99:0b:07:e5:c6:12:
         bb:5a:f2:5c:98:b5:a5:30:d2:86:b0:68:5a:ee:b8:81:86:21:
         52:7a:4f:c2:4d:ba:08:30:0f:74:25:b6:e0:94:c5:15:3f:c3:
         b3:d2:21:e6:8f:f7:38:33:b5:ed:e1:26:ea:bb:12:25:8c:fc:
         4d:16:c4:4c:67:13:a6:f1:17:82:46:70:c7:e3:12:e0:84:ff:
         dd:98:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org