Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38302e302f32322d3234203d3e203134373534.roa
File:                     3139302e3134382e38302e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          9aotvN9Q2c7bBixq2tdwBFyn8WuE9CZVO9A90/jcEhY=
Subject key identifier:   B9:C8:D3:84:99:05:46:9C:80:BF:E7:1B:1D:85:13:3F:A9:04:65:99
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       58BE484B20076333E6D52D01DDAC946CBBF54B25
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38302e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:41 +0000
ROA not before:           Tue 05 Mar 2024 17:37:41 +0000
ROA not after:            Tue 04 Mar 2025 17:42:41 +0000
asID:                     14754
IP address blocks:        190.148.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:be:48:4b:20:07:63:33:e6:d5:2d:01:dd:ac:94:6c:bb:f5:4b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:41 2024 GMT
            Not After : Mar  4 17:42:41 2025 GMT
        Subject: CN=B9C8D3849905469C80BFE71B1D85133FA9046599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:f8:91:39:92:f8:95:f4:23:da:66:41:6f:
                    46:39:18:42:f6:79:f4:b6:63:e6:d6:2e:08:0a:01:
                    86:0f:17:08:4c:99:18:c0:b5:0d:69:63:24:6e:7f:
                    30:aa:81:c0:32:46:5d:4c:4f:8b:a8:c6:a7:8c:d6:
                    5c:6f:41:52:f6:4c:f9:b6:37:b5:15:72:d6:59:24:
                    65:6d:ab:83:2d:e4:c6:d1:37:1c:ed:33:3e:29:f0:
                    4c:bd:22:92:a6:5a:68:2d:94:be:e8:02:d5:e2:09:
                    7a:e6:f2:66:4a:fa:2d:f3:a1:fb:8a:cb:82:6d:cf:
                    22:23:dd:8d:a1:57:cc:00:25:04:4d:99:0b:95:3d:
                    98:68:93:70:3c:f6:10:4d:f2:1e:56:be:74:4d:4d:
                    6d:91:29:04:64:f3:3a:1d:9b:eb:92:b8:f1:02:9d:
                    7c:9b:1e:57:f5:25:4e:c2:26:d8:81:a2:50:b3:2d:
                    59:30:d6:32:67:9a:d2:ad:db:bc:1d:d2:ed:da:7c:
                    99:9a:dd:f9:29:f7:31:43:66:a6:5b:07:5a:57:b1:
                    db:0d:c6:d2:2d:b2:09:bf:2e:c8:bc:df:c8:a4:cc:
                    f7:e5:b4:31:7c:b7:a5:a5:f7:a8:fb:a7:f5:9f:a2:
                    e1:98:31:f6:90:b5:01:95:97:67:ae:7c:54:4e:0c:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:D3:84:99:05:46:9C:80:BF:E7:1B:1D:85:13:3F:A9:04:65:99
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38302e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:5b:3a:67:98:8a:8d:ba:0a:58:67:4a:22:bb:4b:87:ae:59:
         d8:55:93:7e:eb:68:d0:ab:bc:38:47:ff:ad:6e:5b:fb:b8:ea:
         7a:6a:29:c1:04:41:61:d6:6f:15:d0:a6:83:b9:48:44:22:93:
         64:0b:ea:e9:1b:e3:61:15:cd:d1:05:32:3b:b3:3c:90:7f:06:
         ac:b6:4e:07:48:56:1a:07:da:59:40:aa:7c:fb:eb:59:3f:eb:
         65:42:f2:a7:b3:37:4d:8a:84:24:57:af:7a:15:ae:37:00:02:
         32:27:f2:00:65:7e:15:3c:46:37:50:ab:86:ab:55:47:ea:bb:
         12:31:9d:4b:1a:ef:d5:22:3e:71:ae:dd:68:fc:c9:e8:53:12:
         d3:27:e8:47:ff:49:c3:5a:15:b7:d9:2b:8a:0d:9f:58:ef:08:
         41:ed:f3:e4:c0:d6:70:28:a1:73:ac:d1:91:77:79:27:d4:f6:
         fc:4c:f7:8e:64:5a:75:66:48:e5:df:fb:c2:08:93:7c:bf:2a:
         a1:3e:49:07:7f:50:41:a5:c5:a7:bf:50:b3:54:71:01:5a:d5:
         97:69:ed:cf:0f:ff:87:f5:eb:ad:d4:d9:29:f5:f6:45:ed:91:
         8d:a4:c3:c3:42:6f:9a:0e:8e:19:1d:fb:f6:e5:46:f7:b3:2c:
         bd:41:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org