Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36302e302f32322d3234203d3e203238303936.roa
File:                     3139302e392e36302e302f32322d3234203d3e203238303936.roa (raw, json)
Hash identifier:          pZZ5OrpiuMWe2mhwUqutmax88YOys0xTJi9Eq9kt+4I=
Subject key identifier:   EC:BA:E3:D9:FF:77:14:33:77:56:F9:D4:68:56:56:FE:81:57:98:1F
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       6D9CFAF06F75DE75AA3A7C625C80E7C072E7AA11
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36302e302f32322d3234203d3e203238303936.roa
Signing time:             Tue 05 Mar 2024 17:58:34 +0000
ROA not before:           Tue 05 Mar 2024 17:53:34 +0000
ROA not after:            Tue 04 Mar 2025 17:58:34 +0000
asID:                     28096
IP address blocks:        190.9.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9c:fa:f0:6f:75:de:75:aa:3a:7c:62:5c:80:e7:c0:72:e7:aa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Mar  5 17:53:34 2024 GMT
            Not After : Mar  4 17:58:34 2025 GMT
        Subject: CN=ECBAE3D9FF7714337756F9D4685656FE8157981F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:d2:16:21:c1:18:9f:18:cf:72:92:47:c9:
                    1a:23:b0:9a:9f:93:a4:03:68:8f:13:5c:03:1d:eb:
                    21:da:7a:f2:0e:f2:4b:7a:40:14:1a:70:e8:a6:f6:
                    0f:69:e4:48:eb:0e:c2:e8:51:a2:df:a5:0b:5c:d8:
                    5f:55:55:76:f2:d6:f4:c4:7e:d5:9b:93:3e:8e:04:
                    c9:7b:d9:0d:36:26:02:f1:fc:32:61:8a:22:dd:ef:
                    f3:41:4f:a3:6d:90:78:43:89:ed:33:7b:a6:33:3a:
                    0e:a9:cc:da:0e:05:e0:d2:d6:cb:43:6e:4e:17:f7:
                    01:1e:9f:ce:7b:42:6e:df:b1:ab:24:7b:00:90:18:
                    e0:1d:29:d4:bc:14:bf:7f:7b:de:4f:1b:5c:ff:8e:
                    f2:9d:9c:e4:00:98:76:0e:a5:2e:45:78:1f:5d:79:
                    68:e5:f2:73:a2:46:c9:54:d9:cf:b4:6d:6f:59:a7:
                    65:54:da:46:8c:56:f4:b4:68:59:f5:f8:bd:85:94:
                    6a:3b:32:05:28:6d:4b:27:82:e2:e6:d0:9a:7a:24:
                    73:b6:e2:ae:05:f6:15:9d:23:48:79:d2:b4:b0:7d:
                    4e:c4:d8:05:cc:ad:31:e9:1f:a9:aa:05:d8:55:73:
                    d4:03:89:c2:0c:cf:c1:6c:c9:3f:67:af:97:76:90:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:E3:D9:FF:77:14:33:77:56:F9:D4:68:56:56:FE:81:57:98:1F
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36302e302f32322d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:ed:5e:ff:0f:7e:bf:bc:f8:ff:b8:5f:3a:48:2a:84:5e:
         f4:85:fa:01:85:6e:a4:07:dd:31:fb:01:fb:cd:38:48:a8:a4:
         81:a6:59:5b:b9:71:a2:a5:e7:d0:c6:e7:80:00:0e:4f:8b:ab:
         c8:eb:c7:8a:6a:a9:25:9b:76:6e:31:96:ac:6f:53:a6:1c:5b:
         0a:c8:2f:c6:44:e5:0c:f5:29:43:96:dd:90:0c:3c:a7:d8:0a:
         15:a8:fa:0b:b1:15:c0:3a:7e:a4:9f:24:48:db:62:e9:48:61:
         9b:9e:e2:55:dc:fb:cd:cd:5d:90:95:34:ed:2b:da:f9:66:02:
         88:19:56:40:5f:3c:c9:79:e9:d6:23:3b:5c:58:80:c8:24:7b:
         20:c3:43:8b:3e:0a:c0:9c:d3:08:ab:f8:b1:db:4b:40:af:b2:
         91:b0:cb:f5:26:1c:6b:f4:02:33:9f:70:5a:b9:20:b5:fe:58:
         3e:89:d6:aa:f6:0f:95:6b:dc:cf:34:60:24:03:22:2c:5d:fd:
         40:17:6b:be:42:35:7b:d6:14:59:6d:57:62:12:84:be:47:24:
         8e:79:6f:fa:bd:7b:a8:bb:e0:02:c9:ad:27:e8:03:52:aa:65:
         53:e3:fa:ac:d7:7b:d0:25:8d:96:46:4f:c7:d4:72:4f:a9:5c:
         9b:b9:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org