Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/330bb55dbff945d48747255221390ffd1c5a1c86.roa
File:                     330bb55dbff945d48747255221390ffd1c5a1c86.roa (raw, json)
Hash identifier:          8luQWDkfPILEs7DV5WWTAc0EUB0atxD2YgGPyGcnKiY=
Subject key identifier:   DF:93:C6:0C:D1:64:4B:1C:2F:D8:57:2E:3F:BF:9E:C3:D2:EA:A6:6F
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A9937
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/330bb55dbff945d48747255221390ffd1c5a1c86.roa
Signing time:             Thu 15 Feb 2024 20:41:31 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     272903
IP address blocks:        190.110.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Apr 2024 13:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791735 (0x2a9937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=330bb55dbff945d48747255221390ffd1c5a1c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:07:ed:b0:3c:08:b8:e5:4e:ee:94:9e:1a:
                    f4:8a:fd:d6:c3:c5:14:ae:bd:96:19:3b:d4:78:cb:
                    06:70:90:20:91:ff:75:80:f5:f7:4e:55:96:41:65:
                    a0:fe:b5:ea:76:b0:27:14:14:52:77:e5:01:3e:f6:
                    7e:95:b8:55:1a:ba:10:2a:4c:f1:ae:e3:50:b7:69:
                    3a:b2:d6:71:18:62:33:43:5b:20:11:de:07:d5:aa:
                    04:44:c1:d2:90:4b:09:af:ab:0f:4d:23:76:7a:d6:
                    58:ef:c4:2b:ce:e9:14:3f:08:9d:7b:99:a6:ab:e1:
                    95:86:44:77:31:e7:35:41:c8:55:85:2c:7e:2e:77:
                    1b:a3:53:e8:b7:17:3c:c3:4e:bf:33:9e:39:91:e5:
                    c4:33:ff:26:3a:de:67:52:bc:a3:ed:3d:0d:68:ca:
                    84:b8:c9:82:b3:34:10:7f:0f:c3:e8:64:d9:36:84:
                    95:07:9a:af:12:44:21:c1:56:e7:05:5a:6d:dd:4f:
                    58:22:1e:f0:bc:5c:18:b9:19:12:b1:7a:5f:52:7d:
                    cb:90:dc:34:4a:31:d0:bb:0d:81:c1:c1:c1:aa:e9:
                    e9:f7:26:6e:2e:f4:c3:a7:32:da:bc:bd:29:25:e6:
                    0d:7c:db:14:35:80:8b:1a:ef:2c:0d:eb:85:8c:3b:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:C6:0C:D1:64:4B:1C:2F:D8:57:2E:3F:BF:9E:C3:D2:EA:A6:6F
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/330bb55dbff945d48747255221390ffd1c5a1c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:f4:25:68:90:86:c7:c8:e0:32:4c:c6:0b:e2:2f:e3:7e:
         9c:2f:ac:99:5a:9a:35:3f:05:97:64:5f:b3:6b:80:d4:9e:31:
         27:12:83:99:0d:72:b0:c3:dc:3c:f1:e7:57:ad:0a:32:a4:66:
         e7:de:f4:1d:b6:ce:32:69:94:c2:09:8e:e5:ad:b6:df:0c:48:
         89:aa:49:c6:8c:0c:43:7e:61:68:36:8b:93:c3:04:4a:c3:53:
         3e:db:8c:82:41:ae:9d:e5:1b:3d:31:e0:06:d2:6c:46:24:de:
         0a:30:cb:3c:50:7b:ae:2b:2f:7e:f4:ed:e0:aa:07:c1:3b:b6:
         23:2b:da:19:d3:78:1b:20:fc:9c:3a:a8:eb:08:39:7b:1c:fc:
         4e:c6:a2:a8:02:d0:fd:0b:3f:3f:27:40:03:b2:f1:5c:c0:38:
         4f:c8:46:2c:0a:70:e7:80:de:8d:56:b9:0c:e3:75:97:0b:1e:
         0e:2b:17:92:98:c7:e6:75:d0:24:41:c8:6f:43:6a:ed:61:55:
         d3:ec:0e:53:68:83:15:02:c0:5e:0f:46:55:1a:05:d5:ba:67:
         6d:7e:2a:75:72:87:06:cb:35:cb:de:07:43:80:97:97:d2:5b:
         91:e4:fd:f5:49:83:aa:63:4b:53:97:2e:95:b7:d1:fb:e3:64:
         5c:c6:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 14:08:16 2024 by rpki-client on console-ams.rpki-client.org