Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa
File:                     3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa (raw, json)
Hash identifier:          Go2ecCjpOZxYyrnlYubB2XKJmf3+CuMBekdlXRLAR4I=
Subject key identifier:   70:1C:94:E2:ED:C4:00:6A:D9:E7:62:93:1B:73:D9:90:44:8A:03:18
Certificate issuer:       /CN=4919DADC9655A6AC651084EE7AED896819F08F76
Certificate serial:       27198AC02389EFE1120925BCAE3C91EE7DB093E9
Authority key identifier: 49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa
Signing time:             Tue 05 Mar 2024 17:45:42 +0000
ROA not before:           Tue 05 Mar 2024 17:40:42 +0000
ROA not after:            Tue 04 Mar 2025 17:45:42 +0000
asID:                     265751
IP address blocks:        190.108.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:19:8a:c0:23:89:ef:e1:12:09:25:bc:ae:3c:91:ee:7d:b0:93:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4919DADC9655A6AC651084EE7AED896819F08F76
        Validity
            Not Before: Mar  5 17:40:42 2024 GMT
            Not After : Mar  4 17:45:42 2025 GMT
        Subject: CN=701C94E2EDC4006AD9E762931B73D990448A0318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:4b:1f:44:c7:04:f9:0c:31:c1:f8:97:87:
                    e3:2e:00:bc:fe:c4:20:50:47:d6:82:9c:0e:ab:2e:
                    12:9d:cb:f8:66:1a:5c:6f:d0:51:74:6e:22:bc:3e:
                    62:b5:86:99:e8:6f:93:7b:65:0d:a9:cd:28:e2:79:
                    03:6d:00:31:6d:09:66:dc:fd:b1:1b:58:6c:1a:be:
                    3b:4b:2a:8e:de:b4:bc:d6:c1:3e:62:4d:6b:69:9f:
                    1f:04:e1:c4:b9:09:e1:3c:3d:e0:e4:6b:b3:ad:85:
                    2f:b2:ab:82:42:39:0e:b6:b5:71:aa:3f:04:5d:d8:
                    e7:53:98:cc:98:80:17:f4:0a:23:8b:da:8f:1e:f6:
                    c8:f8:96:a8:a7:21:7b:3c:bc:7d:7c:52:9d:be:89:
                    18:64:fa:d4:31:72:3d:6d:5e:4a:a2:72:f1:c9:ad:
                    b9:33:4b:f5:f7:d1:d1:3f:fa:3a:7f:4b:e7:6d:ec:
                    d8:98:29:93:a4:f7:9c:e9:bb:eb:c7:bc:48:91:07:
                    3c:d1:c1:f6:bf:e5:07:18:ec:6a:dc:a6:12:2b:bf:
                    27:63:aa:ab:cb:99:a7:60:25:eb:cd:b1:07:af:42:
                    60:44:30:76:ac:59:71:33:0d:18:b6:4c:83:74:d4:
                    6e:37:c8:f7:58:6f:de:f5:e4:78:6c:59:c3:33:6b:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1C:94:E2:ED:C4:00:6A:D9:E7:62:93:1B:73:D9:90:44:8A:03:18
            X509v3 Authority Key Identifier:
                keyid:49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:71:57:22:6b:37:de:18:77:68:5f:2a:83:10:79:64:cc:19:
         72:86:d4:f2:43:35:9f:3f:56:a6:06:17:c6:74:08:53:27:69:
         ac:94:c3:81:ab:54:b2:10:36:fe:df:d3:f6:ca:40:25:32:57:
         1b:a4:ff:59:97:2b:95:f9:d3:98:3e:bb:58:3e:be:38:4f:00:
         7d:8c:96:d6:7e:97:22:ea:1d:1a:cc:fb:f6:70:b2:dd:94:1a:
         24:4f:2d:12:2d:68:c2:23:54:39:f6:e7:5c:23:eb:fd:fc:65:
         8e:d2:13:2f:b4:3f:18:1b:fe:b0:d0:7b:0a:e4:a6:0e:51:23:
         3b:6b:9c:98:70:8c:55:1d:39:57:67:ae:44:6f:43:05:4e:e2:
         4c:6c:98:d8:eb:e2:f0:6c:2d:d2:89:31:67:a2:a3:68:83:1e:
         58:a6:83:a4:e0:81:9a:23:8b:41:3b:12:35:20:04:ab:6f:99:
         d9:81:bc:c6:bc:55:1e:95:20:3a:6c:67:87:e9:48:25:a9:d0:
         2e:55:68:c1:49:34:9b:91:04:08:45:f9:e3:3a:c2:16:4b:00:
         d1:2e:e6:67:15:fd:30:7e:b4:84:5e:61:73:34:a6:54:72:fe:
         b4:7f:1d:5a:16:02:84:ea:0c:27:94:db:12:0a:bb:ee:90:a1:
         f4:6b:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org