Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235342e302f32342d3234203d3e203237373733.roa
File:                     3139302e3135302e3235342e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          QJNY/A4XtFrIWGnYziBj74+lEm0a77lukajYJ6UucXo=
Subject key identifier:   C5:D8:6C:DE:17:9E:84:10:9C:19:67:65:25:4C:DB:F1:49:30:A4:9D
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       14BFCBE18AA7B4BAF8F42E1FD58557BEDEA874EE
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235342e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:29 +0000
ROA not before:           Tue 05 Mar 2024 18:05:29 +0000
ROA not after:            Tue 04 Mar 2025 18:10:29 +0000
asID:                     27773
IP address blocks:        190.150.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bf:cb:e1:8a:a7:b4:ba:f8:f4:2e:1f:d5:85:57:be:de:a8:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:29 2024 GMT
            Not After : Mar  4 18:10:29 2025 GMT
        Subject: CN=C5D86CDE179E84109C196765254CDBF14930A49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:f8:e8:ef:78:1c:f4:53:1d:81:09:1e:04:
                    60:e4:cc:bd:a5:51:45:94:9e:45:9b:e2:99:f4:90:
                    74:ce:7a:6a:15:06:82:2d:6d:52:6c:2e:08:95:63:
                    91:b7:a4:1d:ce:8e:83:ba:bb:48:34:36:bd:20:4c:
                    3a:60:2e:d0:64:66:31:6e:fd:37:0e:84:7c:5b:d8:
                    36:8f:6e:47:3b:2d:cf:1f:0e:a7:c1:3e:6a:58:26:
                    7a:88:ce:63:91:4e:75:a3:b3:35:16:25:f2:d7:27:
                    87:ec:d9:2a:15:d7:28:a3:bb:c3:79:55:bb:7e:fe:
                    bb:e2:c0:d6:15:c8:43:21:71:47:58:e0:95:63:0a:
                    eb:50:05:cf:a7:34:0c:02:cd:7d:f8:2b:07:bb:9b:
                    ca:c0:87:4c:99:d9:e3:c6:0d:14:09:60:4a:bd:87:
                    69:c8:66:81:55:98:2f:0e:a1:f6:3c:a8:3f:90:c8:
                    43:d5:75:3c:ce:78:80:40:5d:98:17:3a:bc:2b:1e:
                    c0:e1:6c:d0:d4:80:76:82:ff:f1:01:61:bd:fa:64:
                    b9:ff:d8:bf:ab:56:7b:55:4e:0f:2a:d1:77:3a:93:
                    43:6b:ed:bc:11:e5:08:1f:af:cc:be:d3:a1:bf:e9:
                    b9:4e:6e:c3:31:c4:b1:16:96:b0:46:a1:51:df:50:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:6C:DE:17:9E:84:10:9C:19:67:65:25:4C:DB:F1:49:30:A4:9D
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235342e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:85:6a:c7:9c:6f:b6:80:e1:ac:29:d1:71:6c:4f:28:47:68:
         b1:20:57:fd:bd:55:5c:24:4d:1f:e0:3d:c4:29:65:74:5a:7e:
         f1:1c:02:15:33:04:78:2e:33:55:fb:89:e2:25:c3:e8:7e:b9:
         b8:b3:40:6d:66:d2:77:7d:56:4f:c9:2b:44:c2:e8:ff:eb:a3:
         18:a2:2d:13:10:04:b3:14:0b:02:19:62:f5:54:f4:a4:fb:da:
         95:64:a9:7c:12:aa:6a:1a:0e:bd:4f:6a:44:a1:fe:6f:d8:51:
         10:a4:81:b0:ef:31:77:cf:67:69:3a:d5:2d:be:c1:00:03:b4:
         78:9e:be:23:9d:6d:d4:41:73:44:c3:a9:a5:a5:6c:4f:df:08:
         45:e7:4a:8e:8a:d4:29:9d:4f:cc:53:3e:02:f6:9f:78:53:fe:
         7a:65:5d:69:3d:ec:32:44:20:a6:1c:c0:82:8b:54:7d:76:6a:
         0e:27:f6:45:6f:4f:8e:b7:0e:9e:9a:e1:2b:45:96:99:bf:5b:
         a4:13:d5:a1:11:0d:96:58:bd:4b:d4:e5:c3:b3:8e:fd:bf:bd:
         44:72:a5:18:2a:9b:3f:57:21:2a:50:f1:8b:53:53:72:50:67:
         ca:12:be:93:f9:cc:c9:d4:a3:13:27:f8:b2:fd:ea:9f:f9:e1:
         bd:b3:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org