Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa
File:                     3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa (raw, json)
Hash identifier:          R68frRBQDZSeqes+i0tOcep8ZiYSq7f2ZqmHj9kbiyw=
Subject key identifier:   93:C0:75:4F:AE:D4:24:E8:D8:6F:33:AF:01:B1:79:F2:46:AF:2F:99
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       79E201072AE9438A1C761BDD27FED1E6675FF82D
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa
Signing time:             Tue 05 Mar 2024 17:58:15 +0000
ROA not before:           Tue 05 Mar 2024 17:53:15 +0000
ROA not after:            Tue 04 Mar 2025 17:58:15 +0000
asID:                     273019
IP address blocks:        190.12.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:01:07:2a:e9:43:8a:1c:76:1b:dd:27:fe:d1:e6:67:5f:f8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:15 2024 GMT
            Not After : Mar  4 17:58:15 2025 GMT
        Subject: CN=93C0754FAED424E8D86F33AF01B179F246AF2F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:ef:8f:fe:4b:40:c8:e3:a3:ad:4b:47:37:
                    4e:de:53:4c:2c:0f:ac:ea:65:43:8f:07:49:0a:e4:
                    b0:0f:37:bf:74:91:76:c1:4c:47:5f:fb:e7:e5:2c:
                    e7:12:77:8d:93:38:eb:b8:bf:bb:23:ba:61:7b:c5:
                    7c:75:19:e8:ee:98:ac:21:28:61:32:79:93:7d:50:
                    c9:89:2c:49:0b:f8:6b:46:03:8c:99:ab:08:9c:8b:
                    83:af:4c:f8:ac:81:1b:5b:bf:a0:67:8f:50:62:88:
                    85:3e:4c:6a:9c:20:7b:c2:60:66:9b:55:be:94:45:
                    5a:a2:bb:6a:67:1f:ab:8a:fa:f2:a1:76:cd:58:fa:
                    29:94:ae:e8:71:83:1a:8e:c2:61:d3:33:bf:12:15:
                    ca:d5:ae:78:61:79:4c:bd:4b:c0:78:ef:44:cb:10:
                    15:23:ba:56:b8:4a:15:fe:ff:b9:90:c8:10:df:71:
                    74:1c:bb:f0:f2:b6:49:f2:af:90:fd:5e:5b:a2:b3:
                    56:4c:03:5b:b3:bd:ae:e2:28:19:36:71:10:3c:eb:
                    c6:c8:05:fb:81:f3:cb:f7:75:1c:e8:23:68:24:bc:
                    02:e8:b3:ef:6e:8b:16:21:43:92:2e:87:55:a4:d7:
                    cd:ca:18:9f:0b:ac:8a:c6:0c:8f:04:92:45:8e:f4:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:75:4F:AE:D4:24:E8:D8:6F:33:AF:01:B1:79:F2:46:AF:2F:99
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:94:58:dc:cb:d9:db:63:9c:24:ce:ef:c0:7c:c2:fd:5a:
         03:73:f9:e1:69:1e:ae:6c:18:b4:0a:72:a3:2b:38:e8:0d:01:
         c9:34:47:4f:43:76:0d:94:2d:02:26:d0:b4:67:3d:63:a4:67:
         00:2c:6e:ee:25:0d:ec:4e:2f:88:57:0a:73:f8:8d:d1:df:bb:
         4b:5b:9a:13:d6:b2:79:6a:04:db:d2:be:fe:c7:98:ce:45:e4:
         14:99:80:2d:74:2f:b3:a1:dd:4e:5e:4c:d7:79:ef:c1:79:db:
         dc:71:b8:f1:70:d2:ea:af:2f:5a:bf:7d:31:ab:9b:47:f3:db:
         23:c7:b0:f6:af:8d:47:98:ba:d5:80:4a:18:21:fc:a1:5b:3d:
         f2:51:ef:b8:0a:77:bf:1a:0d:43:af:9b:1d:22:ac:06:9b:58:
         9c:7d:57:b8:94:a0:95:f0:fc:1f:bf:00:49:f6:fe:c9:7a:5e:
         c0:be:cf:0d:cc:eb:b4:05:7a:1c:f3:1e:77:7f:e2:89:cf:cc:
         93:3f:68:ba:2f:28:4f:04:0a:bb:de:bd:56:ca:b2:64:84:c7:
         f3:cc:d4:10:7e:60:1e:6f:62:be:84:fb:ec:31:bf:5d:a6:1f:
         63:c4:65:0b:4a:7b:0b:99:e5:9e:04:a3:25:fa:20:24:4b:a9:
         47:f3:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org