Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa
File:                     3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          wYKQsZ+hUZzdPhiA77tmafJmRJ09b3Rn2XCsq3N+vY4=
Subject key identifier:   04:B6:0E:27:89:69:EB:C7:78:E6:27:32:53:D2:08:16:2B:18:58:F9
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       17961212E6C92770540AF64D406D63BAF234536B
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 05 Mar 2024 18:06:24 +0000
ROA not before:           Tue 05 Mar 2024 18:01:24 +0000
ROA not after:            Tue 04 Mar 2025 18:06:24 +0000
asID:                     269931
IP address blocks:        190.110.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:96:12:12:e6:c9:27:70:54:0a:f6:4d:40:6d:63:ba:f2:34:53:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Mar  5 18:01:24 2024 GMT
            Not After : Mar  4 18:06:24 2025 GMT
        Subject: CN=04B60E278969EBC778E6273253D208162B1858F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:29:ba:ae:b9:35:3e:d9:0d:4a:e7:90:d7:
                    c3:28:02:e7:01:2f:4d:bb:95:a9:d0:9b:2a:1e:ad:
                    db:6c:38:af:b5:e5:ad:9d:bd:30:4a:c3:20:ef:e8:
                    ab:d5:fe:b2:fe:d9:c4:80:d0:fd:b2:26:77:e5:74:
                    0a:49:cc:f0:6c:5f:f3:3b:5a:42:4d:91:72:15:ff:
                    e5:70:3d:59:46:11:75:2d:7b:60:1d:cb:75:d4:57:
                    cb:8d:76:01:82:33:22:5d:a9:67:02:bd:40:f4:85:
                    7f:90:27:d1:0c:6e:8a:bc:e2:c4:89:e8:a6:f3:73:
                    b9:28:48:b2:9e:25:5e:5c:c6:80:06:3f:40:54:1a:
                    97:c4:6c:7b:77:78:22:16:5d:30:95:3b:a9:a0:c4:
                    e2:7c:a3:b0:fa:8a:91:28:55:95:e8:fd:9f:7f:71:
                    70:75:b9:f4:03:92:e4:63:55:33:11:24:d7:c2:22:
                    92:f4:34:68:1e:0c:d1:07:e6:ee:01:48:7d:9d:5e:
                    9f:aa:41:37:2e:a5:aa:18:a7:e7:2a:98:d9:99:f2:
                    23:23:ec:ac:32:74:cd:fc:ac:e6:f5:32:2d:b8:1a:
                    46:55:04:57:47:31:42:ff:28:ba:de:a9:c8:bb:0e:
                    21:1a:af:58:cf:db:35:94:23:ea:1c:18:b7:c6:dd:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:0E:27:89:69:EB:C7:78:E6:27:32:53:D2:08:16:2B:18:58:F9
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33342e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:5e:89:e5:4e:ce:8e:5d:ea:ab:b8:07:e9:23:d9:e7:77:fb:
         8a:8c:83:0d:a2:30:b4:a4:ce:c8:8c:88:0f:a9:7b:6c:f5:35:
         f9:d0:5c:b2:46:dd:f4:82:85:06:6f:6a:1d:03:c0:a4:71:dd:
         9d:ec:f3:57:46:be:57:7b:ab:d9:32:1a:83:3f:84:da:78:c3:
         db:cc:68:44:c5:16:63:88:4a:63:27:d9:6a:e3:56:a2:f6:0c:
         64:58:23:18:69:91:14:2c:66:10:64:77:88:1c:59:bf:69:e0:
         a4:87:f1:38:12:e4:b9:c6:50:8a:2d:e2:6c:7a:77:74:31:c4:
         3e:ed:a3:11:d7:f1:bc:04:c5:e4:06:98:3a:9f:f6:1a:9b:b7:
         67:93:fe:31:cf:52:a0:fd:e1:39:fc:71:35:5a:3d:60:10:fb:
         5f:57:13:fa:41:50:85:64:14:3e:12:10:9f:6e:53:fb:8a:5d:
         af:c2:d6:69:2f:b2:96:c8:cc:99:75:43:4c:6b:1f:cf:52:37:
         81:af:29:ed:45:60:aa:75:aa:ea:6d:9e:23:3a:5a:07:93:a0:
         a5:91:8f:fc:2a:b0:3b:50:8a:e1:cc:99:b9:9b:0e:36:95:d8:
         ad:de:7f:96:72:82:51:ad:8c:44:ef:86:3b:e4:35:9c:eb:90:
         36:ae:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org