Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38342e302f32342d3234203d3e203134373534.roa
File:                     3139302e3134382e38342e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          0lwih+C94nMRuBlJNWxnSNt2xzqEiH0NxXdaSpL+Rfc=
Subject key identifier:   D4:A7:B9:6E:39:39:CA:E1:D4:4F:8A:8B:C1:3F:88:56:5C:BC:10:7F
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       5C86F72B92ABF370A1520A6E071836CF1EF27E21
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38342e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:32 +0000
ROA not before:           Tue 05 Mar 2024 17:37:32 +0000
ROA not after:            Tue 04 Mar 2025 17:42:32 +0000
asID:                     14754
IP address blocks:        190.148.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:86:f7:2b:92:ab:f3:70:a1:52:0a:6e:07:18:36:cf:1e:f2:7e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:32 2024 GMT
            Not After : Mar  4 17:42:32 2025 GMT
        Subject: CN=D4A7B96E3939CAE1D44F8A8BC13F88565CBC107F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:f4:79:36:f6:56:63:56:3c:54:df:5c:4d:
                    b4:2b:7b:39:96:d2:39:90:b2:93:0d:3e:00:a8:94:
                    4e:c4:be:12:5e:ae:94:db:30:3f:ee:d3:ac:6f:4a:
                    f1:44:c2:75:5d:71:1b:b6:f4:fb:0c:23:eb:60:3c:
                    0d:28:d6:d0:53:f8:0a:e2:50:4d:2c:18:85:b0:ed:
                    ce:d3:3b:6a:02:5f:4a:17:41:95:25:d7:ed:b4:30:
                    f4:81:13:ee:e2:fe:4d:b6:92:3d:00:02:7b:87:99:
                    7c:20:b0:77:60:f6:8e:3d:79:22:29:ff:83:df:96:
                    cc:3a:a8:61:ef:16:e4:08:f6:05:9e:8f:a0:53:d6:
                    64:27:3f:d1:1b:3d:94:6a:98:43:30:2d:1f:5b:25:
                    2f:17:f6:32:37:28:ed:54:9f:ca:8e:5e:6d:c5:dc:
                    b0:d3:b4:d2:98:90:0e:bb:2e:6c:e1:2b:95:a4:6b:
                    22:33:d0:d2:49:59:36:08:54:2a:b0:1d:ec:f8:1a:
                    eb:17:13:d5:8f:09:bf:ee:2c:19:6b:97:d4:a0:b6:
                    ca:4a:8c:64:3a:10:38:47:ed:f4:10:73:e6:20:86:
                    05:96:24:fb:43:f1:aa:ff:f3:e2:c4:3b:d7:ac:8b:
                    7e:b4:ae:fa:6a:66:cd:96:0b:d1:52:5a:e0:69:ed:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A7:B9:6E:39:39:CA:E1:D4:4F:8A:8B:C1:3F:88:56:5C:BC:10:7F
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38342e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:be:91:69:fe:d1:9f:4c:63:eb:36:7c:4f:df:c4:77:a8:ff:
         b5:c3:68:fe:ca:54:99:cd:07:00:33:2a:bb:c0:b1:9d:4a:97:
         2b:d2:f1:fc:8d:29:f8:36:bb:79:34:dd:26:9d:05:fc:7c:3f:
         44:30:c8:81:a5:82:46:92:56:26:9c:f8:bf:89:63:3f:d8:5d:
         96:31:8c:3c:cb:47:95:90:82:2c:4c:41:fc:9c:d9:44:60:d5:
         b9:99:b7:ad:43:65:73:2a:a5:ae:cb:34:40:59:4d:9c:79:44:
         5b:b2:ea:32:81:5a:c4:41:e8:68:1f:d3:03:36:97:e3:ea:37:
         17:41:24:15:d1:67:4e:d8:9d:20:01:61:81:69:f8:f6:d3:b7:
         8d:0c:12:52:33:62:f8:67:c2:3a:31:31:01:10:ea:dd:55:e4:
         59:d3:81:82:38:94:d9:7a:83:54:a7:5d:cb:fa:fa:85:dc:0c:
         5a:b4:be:07:3b:07:df:d6:99:7e:c4:8c:e1:3a:30:e5:e8:cc:
         a6:6d:35:b0:9c:29:43:ec:3e:4c:38:48:1d:95:8a:17:d8:e7:
         c7:4b:4d:60:45:a1:7d:c9:a1:fa:be:33:d3:a4:f4:9c:bb:99:
         9e:1e:61:1b:da:79:c7:2d:68:b2:76:25:64:90:dd:99:ef:d4:
         6e:80:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org