Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa
File:                     3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa (raw, json)
Hash identifier:          iK7F6rzLhNRjYfgE1R06K324EUfN4KFGRGZj9a8Jc4k=
Subject key identifier:   76:EC:35:FC:A5:3C:AF:40:96:04:A7:44:A2:4C:03:CE:54:45:43:08
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       68B2C4C2DF5AF2C4C8939B54AC6A50EBAADF9D99
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa
Signing time:             Fri 25 Oct 2024 16:50:00 +0000
ROA not before:           Fri 25 Oct 2024 16:45:00 +0000
ROA not after:            Fri 24 Oct 2025 16:50:00 +0000
asID:                     272970
IP address blocks:        190.110.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:c4:c2:df:5a:f2:c4:c8:93:9b:54:ac:6a:50:eb:aa:df:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Oct 25 16:45:00 2024 GMT
            Not After : Oct 24 16:50:00 2025 GMT
        Subject: CN=76EC35FCA53CAF409604A744A24C03CE54454308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:14:a3:6b:42:65:cb:94:ad:73:77:eb:c6:
                    e0:35:2e:21:c0:51:b3:a1:6b:a4:10:e9:12:0a:e5:
                    93:47:9d:fe:42:cf:c7:6f:1f:8d:40:87:a8:82:70:
                    d7:3e:95:f0:4d:3b:80:39:66:69:37:52:ab:e0:60:
                    0b:71:81:ba:dd:18:0d:4c:9e:f0:e5:cb:74:52:c0:
                    cc:f9:21:ba:33:e5:83:f5:f6:16:7f:30:14:fc:75:
                    11:4d:7e:7a:34:ae:7d:3b:3f:f1:05:0f:83:91:56:
                    37:0a:4a:ca:92:b2:aa:7c:4d:6d:43:37:f9:60:d2:
                    8d:b8:cc:a1:39:0d:03:2d:da:1e:a0:9a:9f:c2:bf:
                    af:cb:1d:11:cd:64:0b:dc:e0:61:48:22:a2:b9:7b:
                    e1:85:46:87:85:c5:03:fb:93:c0:ae:cf:44:ff:c9:
                    2f:50:fa:b8:e2:83:e7:ae:f8:7f:b2:4d:60:f4:4d:
                    67:e9:aa:1f:dc:4d:00:c1:6b:31:1b:99:43:cd:b4:
                    4f:1f:5d:c8:73:cd:43:9b:f5:45:b4:0a:1a:e8:c4:
                    05:aa:d9:89:bc:a3:3d:12:3b:aa:2d:10:9b:0a:a3:
                    5d:3e:fa:2e:fb:2d:1c:86:38:6f:27:ff:d8:69:1f:
                    ca:c8:54:95:56:b9:18:d1:a2:c5:e9:f6:04:2b:99:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EC:35:FC:A5:3C:AF:40:96:04:A7:44:A2:4C:03:CE:54:45:43:08
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233382e302f32332d3234203d3e20323732393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:66:44:12:ef:1f:ad:f3:86:86:81:e2:7d:e5:22:15:cf:
         58:ff:b0:39:2b:7c:5a:06:5a:d5:72:9c:b6:2b:8d:2c:51:b0:
         09:d8:59:e2:ea:d2:6c:fd:5b:a5:b4:db:60:26:0d:89:6c:36:
         07:66:55:d6:d9:6a:5e:94:5f:35:47:57:ac:94:57:ae:ae:cf:
         b2:6c:ae:4a:b7:cd:b8:71:3c:08:38:d7:9e:cf:64:32:46:6f:
         ba:37:89:af:71:f8:a8:79:48:00:06:14:f7:64:3d:ef:27:4b:
         8d:14:9e:9a:41:85:84:41:2f:60:de:f7:8d:89:a4:81:6e:07:
         18:74:b5:18:6c:2f:da:e5:bb:2f:7e:e9:d2:62:87:9c:cf:62:
         32:98:58:41:09:ae:bb:0e:e6:06:1e:a1:03:93:6d:e5:57:a7:
         af:56:59:76:18:4e:9b:c9:cb:5c:7c:07:81:b2:7b:be:94:47:
         e3:6d:88:48:84:ee:a5:64:29:83:8b:00:e3:be:55:75:e7:9d:
         95:4f:65:f2:1d:e6:57:90:3b:66:b7:94:6c:55:5a:28:8e:13:
         e4:ae:0b:3a:5c:77:c8:e8:36:1e:df:29:fb:77:38:87:44:b4:
         00:bb:4a:1b:2c:f6:28:a3:c8:32:ba:df:5d:15:0b:e6:b2:78:
         23:3c:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org