Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232342e302f32322d3234203d3e203233353230.roa
File:                     3139302e3133312e3232342e302f32322d3234203d3e203233353230.roa (raw, json)
Hash identifier:          LjezxHIat5PxCTgeVEX/SkCA4ohe7gihLgIRRwGjeRs=
Subject key identifier:   0A:6D:7E:54:79:8A:C6:EC:33:9A:BC:C7:DB:EA:37:C3:23:B2:F3:00
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       351224A10F37E1CADE4969E07B7E4C477E06BDB6
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232342e302f32322d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:16:19 +0000
ROA not before:           Tue 05 Mar 2024 18:11:19 +0000
ROA not after:            Tue 04 Mar 2025 18:16:19 +0000
asID:                     23520
IP address blocks:        190.131.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:12:24:a1:0f:37:e1:ca:de:49:69:e0:7b:7e:4c:47:7e:06:bd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:19 2024 GMT
            Not After : Mar  4 18:16:19 2025 GMT
        Subject: CN=0A6D7E54798AC6EC339ABCC7DBEA37C323B2F300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:7c:c0:af:ef:a7:70:f8:9d:2d:c7:ba:64:
                    95:41:eb:29:9a:30:d6:14:69:08:6a:24:7b:df:6b:
                    63:f4:27:71:14:b4:e4:35:df:65:7e:7d:7c:d4:78:
                    66:66:23:fc:f4:f9:24:14:86:3a:91:26:e9:ce:72:
                    74:e2:9f:df:6d:91:9e:3e:d6:bb:89:ef:94:12:d9:
                    43:42:71:06:85:49:73:e2:eb:03:0c:d3:58:38:c4:
                    81:b6:2c:69:86:49:2a:87:4d:75:02:5c:67:42:af:
                    41:15:8e:55:b6:8c:b6:ed:ff:8e:70:69:bb:21:d3:
                    dc:e0:97:e8:db:e8:2f:13:f4:23:33:67:dc:ee:3d:
                    56:11:40:28:85:69:45:45:a4:3b:30:43:0a:9c:4f:
                    1b:89:6b:08:e6:03:30:cc:8b:cc:f0:bc:16:65:5b:
                    ad:cf:d5:d1:19:18:13:54:8e:56:1a:14:bf:a8:54:
                    61:f8:f8:56:18:97:a1:d9:3f:ca:26:50:d0:ed:36:
                    40:9e:e1:a9:b3:79:f9:0c:34:e8:38:7f:56:7d:e0:
                    b6:13:18:08:85:85:7e:aa:6b:ae:9f:cf:67:5f:40:
                    29:ca:21:99:b2:dc:a9:60:f8:61:f5:ca:1a:a1:04:
                    5f:85:30:75:f5:a1:a6:fa:f3:8f:1a:8a:1a:9a:b4:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:7E:54:79:8A:C6:EC:33:9A:BC:C7:DB:EA:37:C3:23:B2:F3:00
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232342e302f32322d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:3b:c0:b5:12:e1:89:2f:44:54:4e:a0:8b:05:14:64:36:d2:
         9d:10:92:02:38:f4:f7:3a:38:f5:95:4d:ee:f5:23:63:bd:39:
         cc:b9:8a:71:08:54:21:33:88:7b:cd:dd:9e:3d:1c:ba:33:e2:
         fe:83:22:d3:52:4c:4e:05:22:35:22:a1:78:64:bd:85:22:f9:
         e4:58:1a:f2:74:22:7a:92:96:eb:9b:d4:d2:d0:e3:b2:ce:c1:
         c5:a7:64:60:f4:fc:1a:75:06:90:7a:74:f2:e3:72:07:f2:0d:
         ec:7f:15:2e:9d:3b:6c:c2:20:09:88:74:c8:07:e7:78:d3:50:
         6f:d0:d0:19:76:10:d3:0f:2a:69:53:d6:94:cc:d0:b1:88:89:
         4f:a2:59:e9:5b:d9:91:22:12:d1:3d:32:2f:a3:c8:2e:82:65:
         dd:cb:22:ed:34:24:f8:6b:9a:9a:11:3b:3d:c5:77:af:bf:a8:
         b6:e7:d4:d6:10:56:e9:54:7f:00:7c:3d:70:f8:e8:c7:d1:54:
         0d:5d:63:3a:95:40:b9:32:70:fd:72:ac:59:b9:c6:36:83:04:
         1b:0f:51:fb:ff:4a:43:7c:6a:d7:d0:9d:dc:b2:22:5f:e5:f8:
         5e:26:af:7a:79:ab:21:08:2a:3c:4d:7a:6e:26:24:47:02:a6:
         86:4b:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org