Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37302e302f32342d3234203d3e203237373733.roa
File:                     3139302e3135302e37302e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          oNR3B4whxxFfz37OvrDijKTU103hvsUqn7oJf7q4+YA=
Subject key identifier:   11:7C:74:A0:CB:49:16:3F:19:DB:A2:4D:8B:43:4C:D4:07:7B:78:CC
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       028B87D4D0F3A08E77FE96B360E0BAB702052CB9
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37302e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:46 +0000
ROA not before:           Tue 05 Mar 2024 18:05:46 +0000
ROA not after:            Tue 04 Mar 2025 18:10:46 +0000
asID:                     27773
IP address blocks:        190.150.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8b:87:d4:d0:f3:a0:8e:77:fe:96:b3:60:e0:ba:b7:02:05:2c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:46 2024 GMT
            Not After : Mar  4 18:10:46 2025 GMT
        Subject: CN=117C74A0CB49163F19DBA24D8B434CD4077B78CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:ed:16:45:8b:43:7e:a1:d3:ce:8f:0f:5c:
                    25:86:e7:d5:dd:48:5a:1b:67:a9:b1:a8:db:0c:80:
                    1f:d0:c7:bb:d7:5b:3f:c5:b3:c6:ae:c7:47:82:8d:
                    46:df:f7:2a:71:6c:1d:41:11:e6:ec:8b:93:2c:9b:
                    c8:3b:41:38:a6:ed:cd:66:a4:29:f2:f1:30:bd:29:
                    a4:64:97:cc:13:0d:dd:8b:22:d4:fb:6d:9a:03:96:
                    f2:68:80:08:47:53:b2:33:79:e7:e9:10:6a:8b:41:
                    3c:1c:00:b5:f8:1b:e1:c6:0d:08:8f:75:b8:b5:b2:
                    5a:8f:7f:3c:08:fc:f0:4c:8a:a7:f1:81:a1:64:e8:
                    27:da:cb:f5:30:f0:5e:0c:ee:2b:12:8a:25:a0:11:
                    d0:1a:dc:f8:ef:c4:0c:a0:1c:b5:fe:69:62:ab:32:
                    25:33:6a:1b:12:64:85:a5:55:b0:a4:c0:c4:87:4a:
                    88:ff:43:3a:72:45:f5:54:78:a1:23:f9:7a:70:82:
                    6a:ee:52:98:c8:78:cb:5c:40:2f:fc:0b:0c:72:b7:
                    01:bc:1b:68:ee:5a:8e:5f:be:0f:11:04:4a:b0:a7:
                    bd:00:5e:9f:27:09:89:ac:0f:43:18:cf:45:33:a3:
                    6d:39:42:9d:42:a7:a6:42:d4:37:6f:06:ad:87:c1:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7C:74:A0:CB:49:16:3F:19:DB:A2:4D:8B:43:4C:D4:07:7B:78:CC
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37302e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:9a:22:a3:f0:58:08:ef:a2:da:cb:30:03:82:b3:78:ee:40:
         64:4c:f3:0b:b4:e4:81:3b:1f:21:2c:71:80:f1:2f:37:68:c4:
         0c:ad:16:68:0e:4e:97:f7:1c:b7:59:b7:d9:a7:d2:fa:cd:bd:
         59:a5:4e:fe:4d:2b:39:7d:e2:f9:4d:0c:33:a1:a4:a3:cb:31:
         33:ee:9d:f7:19:02:a4:e4:a5:08:8d:5f:46:5b:53:b8:f1:04:
         12:c0:8f:da:ad:f7:7c:0f:62:2f:3b:c1:fe:12:e1:0f:60:fa:
         92:f5:f4:c9:38:59:21:65:1d:b4:cd:2e:7a:b3:98:18:4e:5f:
         0f:b0:fd:82:a3:a6:b2:dd:fa:a7:48:16:48:89:1c:a2:20:62:
         04:d8:ef:dd:37:42:26:97:27:9a:d3:cc:43:24:b8:45:76:8a:
         18:ad:a0:20:35:3d:fc:72:04:c2:8f:0c:a0:df:c8:51:df:1b:
         09:61:03:97:cc:48:de:70:df:8f:67:5b:80:00:c4:d8:0e:0e:
         5a:8d:96:74:d9:2f:87:4b:34:e4:c4:f9:d9:77:d4:eb:52:18:
         f1:1f:12:4a:a3:44:28:47:ea:9f:da:fc:ac:37:73:5b:a3:ec:
         d8:6e:d2:46:72:85:b0:47:ca:09:33:c5:58:57:e1:85:2f:9e:
         04:49:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org