Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132322e302f32342d3234203d3e203532343236.roa
File:                     3139302e3138312e3132322e302f32342d3234203d3e203532343236.roa (raw, json)
Hash identifier:          EZljZz2zxISF/u4U3odHwDFIuy1cLRt3a/cEqftzhTc=
Subject key identifier:   F4:CD:56:E5:D0:AF:63:9D:85:5D:6D:A0:B6:77:DD:49:72:66:0F:B0
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       6BDB77648D8A522E7603D4180F15CAB4B4D0FB49
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132322e302f32342d3234203d3e203532343236.roa
Signing time:             Tue 05 Mar 2024 18:05:26 +0000
ROA not before:           Tue 05 Mar 2024 18:00:26 +0000
ROA not after:            Tue 04 Mar 2025 18:05:26 +0000
asID:                     52426
IP address blocks:        190.181.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Apr 2024 10:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:db:77:64:8d:8a:52:2e:76:03:d4:18:0f:15:ca:b4:b4:d0:fb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Mar  5 18:00:26 2024 GMT
            Not After : Mar  4 18:05:26 2025 GMT
        Subject: CN=F4CD56E5D0AF639D855D6DA0B677DD4972660FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:d0:27:54:b2:b6:08:88:06:df:45:03:d6:
                    74:1a:36:d9:a7:4b:e3:1e:26:d6:c5:15:15:4f:40:
                    a1:10:d4:ca:65:e9:d9:24:81:4d:e2:18:2e:43:e5:
                    e5:cc:bd:bc:b2:63:e1:e4:23:94:ab:0a:c2:0c:9e:
                    24:0b:0f:87:39:72:b4:68:11:a8:12:a6:23:3d:9f:
                    a3:7e:3e:78:b4:a2:c6:56:44:b3:aa:f5:da:b8:0e:
                    c7:c0:0e:94:e0:3a:cd:c4:66:3b:54:e0:59:f1:02:
                    04:75:3e:cd:55:3a:51:ea:02:7f:c4:45:4d:b1:94:
                    3f:af:10:f1:cd:83:70:d8:22:81:ce:ab:35:ec:90:
                    c2:e0:82:b1:ec:54:ad:79:fc:aa:e8:0b:0f:29:a5:
                    3c:dd:ed:f2:a1:ed:06:7a:f8:7e:87:e6:ae:b7:55:
                    3c:ee:69:9c:45:dd:6c:38:47:a6:44:27:c0:7d:6a:
                    6a:25:56:5b:11:cc:dc:f1:ae:37:49:9f:f1:7c:19:
                    f0:26:5e:e9:b4:3f:4c:0d:a8:17:f5:59:25:3c:8f:
                    38:78:c1:af:5a:ab:dc:6d:80:be:44:2d:de:eb:58:
                    6e:18:ea:40:13:a5:8e:e8:89:3d:26:37:14:d6:fe:
                    f2:da:9e:ac:7a:fc:cc:1f:a5:f5:c4:26:33:38:5a:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CD:56:E5:D0:AF:63:9D:85:5D:6D:A0:B6:77:DD:49:72:66:0F:B0
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132322e302f32342d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a1:72:7c:3d:be:33:aa:5b:87:c2:9f:26:ce:de:91:e0:f6:
         47:34:4b:fb:41:02:cb:2e:3c:7f:01:54:cc:89:60:29:5c:d7:
         5c:ea:31:9c:52:c9:04:3a:3a:f6:f5:aa:23:c3:66:07:10:65:
         1a:6a:fc:7b:0a:69:14:98:90:dd:30:4b:d3:95:d2:6c:37:3d:
         95:54:49:9e:7d:91:1d:4c:b1:3d:cc:64:d7:c2:55:31:1c:df:
         e5:9f:fd:2e:cb:b6:14:d8:96:96:26:43:59:0b:91:2f:4d:e5:
         c1:b4:dd:ad:64:bb:0c:00:6d:0a:c6:6a:24:a0:8b:8c:19:1c:
         13:86:a4:15:0e:a6:21:f2:07:58:09:8c:db:2d:36:35:76:bc:
         b1:8b:20:1c:16:8d:94:b9:a8:fe:1d:c6:5a:d4:59:e6:93:eb:
         37:1d:7b:02:fe:00:28:0c:3f:f4:92:b2:70:86:72:43:9a:22:
         aa:eb:0b:60:b9:25:49:ae:c8:32:45:6e:44:24:a2:15:02:68:
         8f:da:7d:5b:50:ee:11:2c:62:8b:ae:6d:b8:67:af:e8:25:1a:
         7e:36:1c:d6:05:d2:55:58:b0:ec:4c:43:9f:13:12:0b:c6:e8:
         42:5f:40:f2:2c:45:2a:ab:87:90:51:a8:df:7f:cd:9c:4f:1b:
         69:6c:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:23:12 2024 by rpki-client on console-fra.rpki-client.org