Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          GnA6Uh1gnBFxoB7YPJxnlWmxo5kXaW28YkPpVt7quMU=
Subject key identifier:   B8:DD:2F:5A:FA:3A:1E:E8:BC:E1:5E:FA:28:92:33:4E:5F:23:DD:4C
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       7E45A19EC2BADA15BAD324280886D12B99CC911E
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:07 +0000
ROA not before:           Tue 05 Mar 2024 18:11:07 +0000
ROA not after:            Tue 04 Mar 2025 18:16:07 +0000
asID:                     262191
IP address blocks:        190.131.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:45:a1:9e:c2:ba:da:15:ba:d3:24:28:08:86:d1:2b:99:cc:91:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:07 2024 GMT
            Not After : Mar  4 18:16:07 2025 GMT
        Subject: CN=B8DD2F5AFA3A1EE8BCE15EFA2892334E5F23DD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:85:e6:94:e3:8e:bb:fc:c2:88:dc:ee:e9:
                    a2:89:32:ff:9a:af:6c:a2:d9:50:12:35:98:b8:65:
                    59:20:f4:51:95:9b:87:aa:d2:3a:4b:03:e8:0a:96:
                    da:83:36:2e:91:7c:8e:c4:b5:ef:51:59:86:73:94:
                    06:d9:b4:c2:7c:9a:c7:3f:72:be:9b:fd:8b:ce:8b:
                    f5:cd:18:d8:24:56:db:c9:1f:e1:ba:69:41:4e:a0:
                    8a:f3:e0:48:50:61:3d:9e:30:7f:52:f8:53:47:d3:
                    4e:21:cb:c8:47:4f:32:cf:37:17:82:be:31:2d:48:
                    d2:48:de:95:6e:17:a2:d5:83:c2:c3:92:f6:38:9f:
                    a6:35:d1:ac:29:88:4b:d7:fc:cf:e8:bd:b0:c7:11:
                    9d:ba:1b:0d:9c:09:06:ab:32:2d:14:39:30:4b:7e:
                    dd:37:cf:ef:fb:37:cc:70:06:cf:4c:9c:90:78:f1:
                    7c:9f:d9:95:da:ab:06:db:84:d7:b5:56:96:1e:bd:
                    8f:b6:ac:24:b5:9b:92:09:9f:d8:fe:18:8d:f2:b0:
                    8e:b2:b3:f3:99:52:63:f9:15:c9:07:04:f9:67:d6:
                    7e:c3:56:0c:2c:51:ff:f6:70:77:b9:2a:f4:f4:fc:
                    c0:40:86:99:dd:c6:2a:d8:f8:55:e2:3a:16:14:bd:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DD:2F:5A:FA:3A:1E:E8:BC:E1:5E:FA:28:92:33:4E:5F:23:DD:4C
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:25:67:b9:93:93:3e:99:bb:c2:ad:41:c5:5d:fb:03:80:
         8b:75:df:ab:0d:be:cb:c4:14:b2:4e:f4:8b:6b:61:6a:8a:4c:
         f6:3a:60:a6:e7:db:78:d3:15:f7:89:2f:60:9c:4f:ec:69:d1:
         77:c3:eb:bb:1f:59:87:0f:8d:01:b1:8f:88:3e:7b:0f:a2:b1:
         d4:8a:ac:e0:59:c4:07:45:d2:7c:ea:b1:ac:a0:94:43:bb:93:
         a2:1e:ac:45:22:f7:f0:3c:39:a9:e8:ea:15:8d:32:ce:d8:40:
         c8:d1:0e:85:3f:66:0d:07:5f:ff:5b:2c:5e:d3:45:e7:ee:52:
         31:58:d1:86:93:bb:17:b8:82:54:89:cb:17:d2:0f:ed:ad:a4:
         4a:22:23:c1:83:88:e4:49:39:63:d3:94:16:45:81:35:ad:17:
         2f:de:84:35:76:17:76:59:37:54:e2:47:e5:83:1a:b9:7f:d3:
         c2:74:9d:ab:4d:b5:72:c6:52:75:53:32:31:9e:1b:16:6a:43:
         4d:02:89:cb:a7:8d:a7:06:6e:4d:9f:9f:f3:8a:19:23:5b:6a:
         de:26:ce:48:ba:c7:0f:ce:b3:af:7e:5e:a7:8a:d7:61:f8:e4:
         2f:83:bd:a7:2a:95:e8:dd:38:50:dd:1f:08:8b:86:97:5c:63:
         ef:64:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:51 2024 by rpki-client on console-ams.rpki-client.org