Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3230362e302f32332d3234203d3e203237373733.roa
File:                     3139302e3135302e3230362e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          g94tVf8HJfb0YhKWBOHNprHXHM9zIY+pSPy1/IwghqU=
Subject key identifier:   77:C6:E6:B7:D7:89:ED:E3:47:FD:C6:8B:51:9D:0C:85:40:30:27:7A
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1AB9CEE35A766E040C97FC62862CCCD3E64D5C0B
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3230362e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:33 +0000
ROA not before:           Tue 05 Mar 2024 18:05:33 +0000
ROA not after:            Tue 04 Mar 2025 18:10:33 +0000
asID:                     27773
IP address blocks:        190.150.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b9:ce:e3:5a:76:6e:04:0c:97:fc:62:86:2c:cc:d3:e6:4d:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:33 2024 GMT
            Not After : Mar  4 18:10:33 2025 GMT
        Subject: CN=77C6E6B7D789EDE347FDC68B519D0C854030277A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:b6:08:20:e9:88:1d:f2:75:cf:42:c2:89:
                    cf:22:99:d0:0e:be:d3:7c:5c:a2:86:34:d1:1b:fd:
                    97:44:0e:ec:1b:37:75:39:a1:8b:76:00:61:6d:e6:
                    50:64:5a:52:0d:b7:c7:e0:a0:0e:d2:25:79:21:08:
                    c0:09:1c:3d:83:1c:cd:62:07:4b:d2:36:47:0f:10:
                    b8:8c:4f:bc:ca:84:30:8d:cc:af:3a:03:0a:82:de:
                    9b:3a:ae:71:65:24:36:cc:8f:76:ad:69:04:a0:30:
                    28:0b:33:f5:54:cf:1a:6a:e0:90:cb:b7:e5:92:07:
                    39:9b:20:23:fc:35:55:d5:6a:6e:e8:99:a7:21:62:
                    89:77:de:50:88:68:32:e6:1b:89:bb:ab:9a:32:63:
                    a7:e5:8d:f7:fd:17:bc:b3:47:af:b1:b1:6e:e3:a7:
                    d1:a5:db:6e:49:8b:0f:9a:bf:50:02:f1:b2:8a:49:
                    77:66:61:eb:f3:09:a7:03:c3:7e:4b:72:d9:99:d1:
                    fb:fc:b9:b7:35:b7:94:86:50:8d:9a:91:2e:1e:80:
                    05:43:3c:66:27:7a:bc:e2:e1:57:21:a2:12:c7:8b:
                    ff:f9:1a:36:84:62:12:8c:3c:80:5a:4e:dd:e7:9b:
                    2d:80:03:59:28:24:90:6e:00:57:ee:e0:b6:11:26:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:E6:B7:D7:89:ED:E3:47:FD:C6:8B:51:9D:0C:85:40:30:27:7A
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3230362e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:53:47:be:0e:72:63:4a:10:c9:2f:d3:c7:07:bf:d3:d9:ff:
         9c:97:d1:04:0b:3c:8d:6c:c4:74:1e:d8:5e:a4:23:2e:40:e6:
         36:b7:ea:5e:58:5f:b4:fb:b5:14:60:2c:a1:9f:76:13:ae:a5:
         6f:d3:9a:d2:99:50:8c:ce:17:23:87:f5:97:3d:ed:47:8a:89:
         e9:24:1a:4e:84:37:ea:26:31:96:f1:ff:df:d2:a7:09:54:c8:
         68:e5:4f:11:c4:98:53:18:b1:e2:21:a5:44:39:f9:90:59:7f:
         d3:72:a2:b6:7b:d7:32:e1:4c:0b:c1:26:ed:f2:c0:14:f8:a0:
         63:62:67:e7:6b:42:de:87:f7:7d:9c:3a:13:1d:86:94:11:82:
         1e:52:5a:20:be:55:4e:85:35:3a:3d:12:7f:40:f4:85:0e:aa:
         1c:3e:ec:73:7b:7a:3e:df:39:e4:c6:cc:4a:0d:77:2e:38:74:
         8c:a6:2e:02:e5:2c:78:6f:30:87:32:4b:5e:52:9c:09:2a:81:
         83:77:54:20:e7:2d:52:fe:f2:37:4b:5b:8b:fe:e9:3f:64:ce:
         bb:39:f5:af:0e:ae:27:7e:7a:d7:69:fa:f7:09:5f:a0:7b:d6:
         f8:02:bf:a9:e6:3b:bc:5d:6b:3b:fa:f0:43:50:54:63:3c:6b:
         be:3c:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org