Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e332e32322e302f32342d3234203d3e203237373534.roa
File:                     3139302e332e32322e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          nLNnnkoENth4uy5647GJT6Xi457KclmIi7nZbBlp5L4=
Subject key identifier:   C1:49:EA:8E:92:23:49:3C:0B:89:91:AA:E4:B0:2C:C4:5A:5B:A2:27
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       47A768AFA2546CBB777E4C16C70B8A297A82CAE3
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e332e32322e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 05 Mar 2024 17:49:51 +0000
ROA not before:           Tue 05 Mar 2024 17:44:51 +0000
ROA not after:            Tue 04 Mar 2025 17:49:51 +0000
asID:                     27754
IP address blocks:        190.3.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a7:68:af:a2:54:6c:bb:77:7e:4c:16:c7:0b:8a:29:7a:82:ca:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Mar  5 17:44:51 2024 GMT
            Not After : Mar  4 17:49:51 2025 GMT
        Subject: CN=C149EA8E9223493C0B8991AAE4B02CC45A5BA227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:9f:0b:a9:47:42:0b:c3:77:3c:fb:c4:22:
                    3e:a8:d8:51:c3:48:10:87:3a:32:31:4f:8c:be:ea:
                    51:26:62:88:49:ea:ce:7e:61:66:a1:05:55:3f:9f:
                    2d:72:ff:11:75:97:da:7c:1b:26:33:f2:38:67:44:
                    29:cf:49:26:92:e0:60:a5:d6:96:69:87:92:73:2e:
                    81:9d:bb:36:d1:9d:d5:65:df:a0:c4:10:03:b9:cb:
                    50:4a:ac:c4:e1:68:f7:9c:e2:0f:1c:7f:42:dd:94:
                    0a:28:e8:d7:e6:7f:09:d0:3a:c2:61:cc:e8:84:15:
                    b0:7d:62:0e:e4:cc:fb:ec:fb:65:6d:fc:5c:0e:2f:
                    f2:21:36:7d:83:b8:0f:df:25:08:7a:56:88:6c:48:
                    11:8b:73:0f:f6:34:3d:8a:a2:cd:0f:ea:1a:a4:3e:
                    c1:9c:c4:de:92:7d:f6:2d:ed:43:f9:dc:29:4c:00:
                    be:bd:51:0a:48:c8:2b:b0:3e:63:17:25:c2:1c:d1:
                    cb:d6:ba:fd:a0:04:db:a3:88:4f:4b:72:84:97:3c:
                    8c:d0:30:07:84:ab:f4:8d:42:c2:6c:28:b7:d4:9c:
                    e8:0e:04:b5:52:b3:72:1c:c4:2a:c2:d3:63:c7:43:
                    73:5e:2b:9c:a8:a5:16:a6:61:01:e4:08:d7:48:54:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:EA:8E:92:23:49:3C:0B:89:91:AA:E4:B0:2C:C4:5A:5B:A2:27
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e332e32322e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:ed:bf:b2:36:81:b4:0e:1a:ea:bf:69:86:37:2f:39:18:
         bb:da:0f:2f:ae:2d:02:f3:61:b5:30:c1:fb:77:fe:b3:2d:22:
         bf:d8:25:73:18:7e:61:d0:30:c0:7d:5c:e7:7d:fa:e3:09:25:
         e8:11:df:5b:bf:49:b7:2e:c3:af:32:44:1c:11:6b:41:f8:0f:
         b0:32:2a:24:c5:27:86:5c:e6:91:e7:06:f9:1e:42:39:94:d2:
         b3:77:56:63:b2:96:a2:a9:e7:0d:a9:f4:ae:9b:46:2e:7c:a5:
         43:3a:77:a5:4e:1b:1a:1c:a4:e1:95:66:d8:eb:45:68:29:aa:
         57:43:90:6c:ab:d3:00:92:fb:5b:bd:ab:04:4a:75:98:f3:19:
         ec:79:f1:c8:e9:60:d4:54:38:73:11:b9:7e:6a:02:3b:b2:4f:
         28:0f:de:0e:d2:a9:93:25:a2:31:3d:b3:f4:7b:e7:1d:41:04:
         eb:07:12:6e:c2:31:06:c0:92:35:01:bd:bf:99:80:dd:66:be:
         4f:30:69:93:0a:05:41:71:b3:0b:f6:18:3f:95:2f:54:ae:78:
         5e:55:a8:a5:49:79:0f:4c:16:3f:e4:5f:31:2a:48:6a:c4:12:
         90:b2:82:1f:89:1f:93:ce:0e:ec:59:70:fc:c8:92:34:98:ce:
         cd:ff:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:52 2024 by rpki-client on console-ams.rpki-client.org