Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132332e302f32342d3234203d3e203532343236.roa
File:                     3139302e3138312e3132332e302f32342d3234203d3e203532343236.roa (raw, json)
Hash identifier:          aKGrRTYzyATcX1m2+JSvYFMf3uc9ZSZrA4mnOb+3Kac=
Subject key identifier:   9B:30:8B:23:43:28:EA:77:56:7B:72:69:2A:94:0D:6D:9F:F9:5B:30
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       1050677473D91450FAC62D86F0EA191615751F04
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132332e302f32342d3234203d3e203532343236.roa
Signing time:             Tue 05 Mar 2024 18:05:25 +0000
ROA not before:           Tue 05 Mar 2024 18:00:25 +0000
ROA not after:            Tue 04 Mar 2025 18:05:25 +0000
asID:                     52426
IP address blocks:        190.181.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Apr 2024 10:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:50:67:74:73:d9:14:50:fa:c6:2d:86:f0:ea:19:16:15:75:1f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Mar  5 18:00:25 2024 GMT
            Not After : Mar  4 18:05:25 2025 GMT
        Subject: CN=9B308B234328EA77567B72692A940D6D9FF95B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:bc:44:0e:1d:df:e8:cd:72:27:8d:c2:ef:
                    2c:29:6a:4c:2a:4f:74:5b:49:91:3a:8b:f3:75:16:
                    88:ac:03:d6:25:c4:a8:48:6f:7a:81:28:8f:e1:6d:
                    ce:46:99:00:9b:67:30:34:5f:11:d3:b8:2b:53:5a:
                    d0:c2:ef:af:9d:7b:45:a1:75:db:79:fc:13:59:88:
                    08:af:78:74:71:bc:25:4a:ea:ec:0a:80:c4:f2:0a:
                    02:5f:2b:36:d9:36:84:e4:69:f2:77:88:8c:d1:54:
                    f1:2e:83:ad:85:58:c3:b6:72:2d:c3:04:2f:7b:ad:
                    c5:ea:65:31:6f:96:5d:68:aa:25:04:59:50:ed:9e:
                    7f:58:4e:1c:fe:01:32:0f:8a:fe:4d:e2:b5:57:a5:
                    e8:e1:f8:77:cd:f8:85:5f:70:29:e2:46:03:39:08:
                    a9:61:32:58:33:26:ee:6e:5f:48:9a:60:b0:7d:b6:
                    77:07:e4:ff:2c:1f:67:5e:23:91:b7:47:0f:eb:0f:
                    ac:54:cc:09:ca:dd:14:a1:39:e3:43:85:45:cd:da:
                    ac:84:74:32:c6:33:6d:2c:2d:fe:dc:60:32:31:36:
                    c2:ab:04:79:6d:90:9b:f1:0c:38:02:a2:97:3c:05:
                    72:3e:1f:fe:52:e5:00:56:e6:98:b8:d7:ed:15:20:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:30:8B:23:43:28:EA:77:56:7B:72:69:2A:94:0D:6D:9F:F9:5B:30
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132332e302f32342d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:f0:62:e3:d3:8b:e0:2b:51:65:00:86:2f:f2:e5:23:2e:
         0e:02:53:82:0a:06:97:6b:1d:11:f2:9b:6f:a3:90:e6:48:5a:
         ff:3b:8a:4f:c3:21:0a:81:7c:f0:ee:68:f7:41:a5:7f:5f:b2:
         16:a4:9a:08:45:a2:9e:bb:67:93:dd:a1:82:3f:cd:6d:c4:c3:
         f5:3c:2e:63:b5:44:80:51:42:f9:7f:29:78:57:7f:f2:3d:76:
         61:c0:98:d5:bf:4c:75:76:34:00:bc:4e:8e:3f:5d:8d:30:88:
         11:b6:17:d9:43:88:1d:f2:4b:c0:04:29:d7:1e:72:83:bd:e7:
         e6:8f:ee:11:56:99:90:6b:cc:7f:8c:e7:c4:5b:74:03:6f:f7:
         88:60:e0:32:6d:50:55:e8:0d:e1:15:79:26:46:97:3a:b5:5b:
         98:a1:43:37:33:ed:8d:61:2f:4c:2d:a0:5e:07:8f:e3:de:82:
         6e:75:7b:cb:cb:d9:c3:6f:e5:c8:bb:cc:ae:c5:36:2a:2d:94:
         e7:e8:0a:bc:62:b9:57:6c:b5:6d:e0:34:19:5f:e1:0e:ae:2c:
         eb:d6:cf:a3:1c:e7:3c:92:b3:f2:5c:2c:19:33:37:f4:af:8e:
         9a:b6:d9:3d:a0:99:7b:42:4c:0b:4a:3a:75:b3:b3:e7:b3:1a:
         c1:d8:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:35:26 2024 by rpki-client on console-ams.rpki-client.org