Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36312e302f32342d3234203d3e203238303936.roa
File:                     3139302e392e36312e302f32342d3234203d3e203238303936.roa (raw, json)
Hash identifier:          rxmiKq8U8rKlMfFW7+KgV3gcJ0ppd1DiJQ1Y90AApzo=
Subject key identifier:   1F:2F:0D:27:EE:8A:F7:B5:23:4B:CE:22:8E:27:7D:EF:D9:50:85:0F
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       1B08D338162BB039EAE0B9BDB9B3FDF0A93A3E59
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36312e302f32342d3234203d3e203238303936.roa
Signing time:             Tue 05 Mar 2024 17:58:34 +0000
ROA not before:           Tue 05 Mar 2024 17:53:34 +0000
ROA not after:            Tue 04 Mar 2025 17:58:34 +0000
asID:                     28096
IP address blocks:        190.9.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:08:d3:38:16:2b:b0:39:ea:e0:b9:bd:b9:b3:fd:f0:a9:3a:3e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Mar  5 17:53:34 2024 GMT
            Not After : Mar  4 17:58:34 2025 GMT
        Subject: CN=1F2F0D27EE8AF7B5234BCE228E277DEFD950850F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:cb:c4:8a:c8:7f:bc:c8:72:e7:66:28:39:
                    46:31:8b:34:97:1c:0a:1c:79:08:63:af:70:ca:ba:
                    7d:29:fc:6d:e2:02:73:0d:a8:e3:6e:af:df:bc:6c:
                    ce:a5:1a:d4:66:51:63:52:20:e5:af:5c:01:60:cd:
                    07:46:d8:95:fb:a3:0c:32:5f:9e:4c:4b:a6:db:78:
                    12:4d:d4:8b:d4:09:b4:79:9f:d0:c1:89:7f:d4:5c:
                    6d:3a:d7:b8:96:0f:18:3e:31:57:3b:b1:e4:a8:3c:
                    9f:64:cc:cd:6b:fd:c7:bf:fb:7c:bc:07:ad:9e:38:
                    af:be:0d:53:3f:33:b9:e6:9a:37:86:9f:cb:20:b8:
                    df:5c:9f:23:32:cc:7f:b1:de:3b:2f:d0:6e:dd:79:
                    8b:21:70:b2:5a:67:61:b9:8b:90:8a:4f:b7:8c:54:
                    a3:eb:51:93:91:ef:04:ca:55:7d:9e:74:7e:59:c2:
                    0f:86:f9:e1:01:44:91:8f:85:6d:2f:2b:50:7b:d5:
                    b9:09:83:e7:11:54:3b:09:89:1f:ab:b1:6e:f0:d1:
                    c9:dc:fc:74:a9:31:66:fb:e4:eb:83:20:ba:54:3e:
                    6f:dc:e5:f8:4e:69:d0:bc:82:69:80:2c:ba:8d:03:
                    e8:b7:23:64:ff:65:55:f0:4e:6b:40:e3:a8:97:e7:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2F:0D:27:EE:8A:F7:B5:23:4B:CE:22:8E:27:7D:EF:D9:50:85:0F
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36312e302f32342d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:02:e3:07:66:78:6a:19:f4:a3:82:26:83:3b:56:93:3f:
         18:8d:f6:37:8f:e3:b6:23:37:c8:86:c8:39:bb:80:c3:7e:c7:
         28:00:07:79:05:e0:42:9c:3c:e3:54:44:02:1a:af:bb:60:a4:
         3f:9a:4d:76:32:f8:41:16:fd:5f:9c:2a:bd:14:a2:16:fe:1f:
         9d:7f:75:d5:43:c4:a3:40:dd:09:f5:90:e6:b1:b9:e3:52:ea:
         87:9a:cd:9f:66:29:31:8d:2c:37:98:ef:68:4b:73:8b:21:2f:
         b3:c5:1b:db:a0:74:4e:79:f5:b2:35:3f:07:e4:ca:b5:a5:f1:
         c0:3b:8c:40:fb:c0:e5:d8:e7:ef:3c:d4:60:ee:7a:d3:36:f0:
         8c:27:c6:07:46:9b:07:c0:fe:53:be:b7:e0:f1:d0:bd:29:9b:
         cb:39:aa:ce:d2:61:3f:4a:a3:99:31:9a:cd:3e:8f:93:ee:5c:
         09:92:77:64:be:b2:95:4c:47:b4:ba:65:b3:f6:e7:ff:5d:77:
         8b:45:d4:e5:2e:13:16:2a:65:33:9e:97:b0:68:bb:bf:c6:03:
         4d:0e:9c:cb:af:d0:9f:70:d9:37:b6:29:48:9a:66:59:35:d9:
         8d:a4:49:a2:f3:73:76:61:34:5d:fa:d2:71:91:30:11:05:bf:
         08:ea:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org