Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3235332e302f32342d3234203d3e203131353134.roa
File:                     3139302e3131302e3235332e302f32342d3234203d3e203131353134.roa (raw, json)
Hash identifier:          a9syg0K6TlKzdVY6JDJLN8IJmL1zP9ocspWSonOmc8k=
Subject key identifier:   70:BB:4D:60:06:12:75:E0:D8:B6:17:E0:D3:43:62:84:81:D4:54:04
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       6FF57F5F47B74603890A406CED35EF3B8297EA26
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3235332e302f32342d3234203d3e203131353134.roa
Signing time:             Tue 05 Mar 2024 18:21:57 +0000
ROA not before:           Tue 05 Mar 2024 18:16:57 +0000
ROA not after:            Tue 04 Mar 2025 18:21:57 +0000
asID:                     11514
IP address blocks:        190.110.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f5:7f:5f:47:b7:46:03:89:0a:40:6c:ed:35:ef:3b:82:97:ea:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:16:57 2024 GMT
            Not After : Mar  4 18:21:57 2025 GMT
        Subject: CN=70BB4D60061275E0D8B617E0D343628481D45404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:f0:fa:8a:3e:08:7b:84:9a:34:5f:38:38:
                    ef:2d:a1:ee:48:db:2d:98:18:e4:00:93:24:29:b3:
                    ee:d8:ba:ce:dc:81:aa:44:e4:ce:4e:f5:88:6c:e0:
                    fc:57:d3:ad:d2:9f:13:51:50:81:5b:c4:7d:ab:2c:
                    44:07:39:7d:d8:5f:6e:5b:dc:bc:cc:a0:e7:e8:ae:
                    52:94:df:ea:65:a6:54:97:4d:03:b4:15:f1:8f:35:
                    1c:69:c0:ce:e2:64:51:66:57:c2:00:3e:fc:89:68:
                    26:d7:18:1e:26:7b:0e:af:54:21:ba:10:fb:ac:ec:
                    ac:ca:2d:6c:7f:f8:41:31:84:ef:8e:b1:11:4f:73:
                    56:67:e0:68:02:6d:6a:9c:96:1c:91:8d:23:5e:af:
                    c3:7f:92:dc:f6:13:bb:1e:37:09:87:bf:b5:89:2f:
                    ee:81:40:6f:dc:3c:94:86:e7:4f:9e:05:4f:3a:41:
                    c9:8c:5c:d0:da:e7:fa:e5:aa:22:21:33:ae:56:67:
                    ce:70:6c:e5:7c:b1:11:7c:c3:a6:a4:96:be:dd:63:
                    7e:76:f2:d7:87:4c:3a:8e:a9:3c:4b:5a:a6:68:27:
                    1c:fd:7e:cc:f8:5d:f2:57:35:cd:e1:f6:c4:c6:fe:
                    13:39:7d:1b:bd:91:c8:b2:b9:ff:2d:d7:dc:8c:9c:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:4D:60:06:12:75:E0:D8:B6:17:E0:D3:43:62:84:81:D4:54:04
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3235332e302f32342d3234203d3e203131353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:e4:a4:05:00:46:0d:5e:20:56:24:43:aa:92:90:1f:e5:
         11:56:e5:3b:96:43:ad:ef:8d:c7:44:19:bb:f1:77:2c:e7:0b:
         fb:1f:41:fd:1b:5c:4f:ff:c2:06:e8:d2:0f:ba:e0:d3:35:dd:
         d2:d2:28:68:2b:d1:b7:11:2b:26:6e:33:eb:64:9b:fb:1b:dc:
         c7:3a:64:79:88:cc:20:ce:9e:46:ae:8b:9b:88:78:18:0f:10:
         b3:9c:0a:9e:f1:3f:92:d8:3b:f7:02:9e:50:58:5e:9d:c1:42:
         f4:4d:e7:b6:36:b0:b7:72:15:89:2a:1b:0d:92:99:e2:78:c1:
         67:1e:f8:45:2a:b7:0a:72:2a:b6:a9:e1:f7:20:91:fe:18:62:
         84:68:19:ae:35:9e:45:2d:56:4a:4a:b2:86:85:8a:be:57:e3:
         a5:95:3b:47:c3:59:5e:cf:08:c3:70:38:a0:58:d0:c8:eb:e8:
         61:47:84:f2:c8:3a:7a:13:d7:42:ba:88:8d:da:26:f1:a0:be:
         5d:d2:53:42:bc:e5:a2:57:d6:6a:a3:9d:3d:06:1c:8f:3c:64:
         7a:6c:eb:d5:0d:2f:6e:6c:3e:61:3c:06:1e:90:a2:5f:5b:2b:
         83:b4:1d:0b:eb:77:5e:57:43:c4:16:bf:df:73:3e:19:d2:1d:
         0c:14:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org