Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e302e302f31372d3234203d3e203134373534.roa
File:                     3139302e3134392e302e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          Ci0vVZ6MAqc+okI9ggybWQt/SHnSFpk1E5bPhF794nI=
Subject key identifier:   80:8D:E8:2A:D5:2E:72:6C:6A:78:0C:33:77:4E:52:F7:AC:50:85:07
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       523FD2C481F6555723EC89E2D6ECA24CB0E1BFCD
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e302e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:37 +0000
ROA not before:           Tue 05 Mar 2024 17:37:37 +0000
ROA not after:            Tue 04 Mar 2025 17:42:37 +0000
asID:                     14754
IP address blocks:        190.149.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:d2:c4:81:f6:55:57:23:ec:89:e2:d6:ec:a2:4c:b0:e1:bf:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:37 2024 GMT
            Not After : Mar  4 17:42:37 2025 GMT
        Subject: CN=808DE82AD52E726C6A780C33774E52F7AC508507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:d1:fd:a6:35:00:65:fb:e7:51:a2:8f:df:
                    5d:df:c4:90:cb:5c:4e:69:db:21:c7:99:41:e6:54:
                    8e:c3:16:f8:b5:d0:43:55:4c:0a:77:86:e5:d1:d4:
                    6d:db:ac:52:63:5f:d1:d5:a8:21:37:e4:66:cd:61:
                    a5:48:55:c6:e1:c7:75:72:00:79:15:3c:56:b0:14:
                    69:42:5f:51:c4:98:13:8f:03:a6:12:1e:5e:88:d9:
                    5c:a9:65:7f:30:0e:8d:bd:ca:33:cc:92:b6:bb:26:
                    27:b4:bd:c8:2b:35:25:f7:31:74:0b:6a:4d:c3:88:
                    94:8e:7a:92:0f:dd:19:50:35:6d:c7:1c:e6:72:eb:
                    d6:a7:0b:ca:b2:7c:4f:e6:65:a2:3c:2a:c1:c6:69:
                    cb:0d:26:ef:23:e8:19:3f:ef:19:2d:1b:72:84:17:
                    68:b7:f3:57:87:e4:cc:60:50:ea:90:9d:8a:4e:82:
                    65:c6:a9:36:cb:fc:01:87:be:b1:5c:1c:ad:2b:b6:
                    c8:89:87:15:c8:f1:f0:da:ae:cd:50:22:16:e4:ff:
                    2d:7d:4c:bc:d0:14:37:f1:8f:99:52:89:29:a3:22:
                    b6:3c:83:e7:f7:1e:94:8a:79:61:fe:f1:0b:96:5d:
                    08:cc:6d:50:c0:5d:50:68:52:7e:ce:f9:0d:b5:9a:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8D:E8:2A:D5:2E:72:6C:6A:78:0C:33:77:4E:52:F7:AC:50:85:07
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e302e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:2a:a5:b0:8b:a6:1c:c8:c9:5e:ad:f9:0e:00:1b:94:10:
         48:36:c5:f5:91:05:02:41:bf:3d:52:75:9d:53:88:fd:de:fb:
         be:42:82:1f:89:2e:8d:24:e5:85:62:d9:7b:83:ba:cb:73:0e:
         9e:54:9e:56:95:de:25:9d:99:ba:49:9f:c8:5d:4b:c2:5e:ce:
         d0:20:be:b2:9e:d6:03:2a:b4:83:e0:b5:1c:28:fb:d7:f2:01:
         06:5e:a6:71:b9:8f:3c:11:9d:68:e3:c0:13:4e:ba:b1:74:6b:
         b3:bc:c9:65:6b:25:d8:dd:32:78:6f:98:15:c7:1e:52:b6:3f:
         23:4c:a2:ea:b7:5f:6e:83:41:96:09:66:4a:54:cd:82:a6:7e:
         d5:ca:37:57:3c:ca:a1:92:a5:56:18:3f:b4:e4:f6:42:8c:51:
         be:fe:68:05:4d:67:db:bc:20:e4:3e:8a:41:22:ca:5f:25:1c:
         f9:9c:0a:d0:5c:48:63:86:a7:75:83:19:08:42:97:82:71:14:
         81:13:9f:26:c7:13:30:14:87:d6:7e:a6:f7:76:c6:95:87:aa:
         78:7b:f4:77:9a:4d:49:64:f0:71:7f:a0:99:20:66:17:d3:12:
         c4:cb:7d:c4:a9:02:b6:27:44:84:ee:a7:f8:70:74:ea:b4:58:
         e9:e0:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org