Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa
File:                     3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          yhHei7ow/QfLCVoVcZrxUJoveBNNQ07O6CbY18M+fco=
Subject key identifier:   24:CB:DF:5C:AC:41:05:7F:B8:57:7A:AA:7D:97:4C:3C:67:5C:74:DC
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       56B93EE5B64EE2C6D24BDE8D63DD71BC9977D4F3
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa
Signing time:             Tue 05 Mar 2024 17:47:45 +0000
ROA not before:           Tue 05 Mar 2024 17:42:45 +0000
ROA not after:            Tue 04 Mar 2025 17:47:45 +0000
asID:                     265683
IP address blocks:        190.182.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b9:3e:e5:b6:4e:e2:c6:d2:4b:de:8d:63:dd:71:bc:99:77:d4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:45 2024 GMT
            Not After : Mar  4 17:47:45 2025 GMT
        Subject: CN=24CBDF5CAC41057FB8577AAA7D974C3C675C74DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9b:1c:08:82:36:30:ec:9a:56:aa:92:08:43:
                    da:de:ae:a3:ea:7b:af:b3:2a:f1:08:c8:dd:d9:a4:
                    aa:68:55:c8:c9:9b:72:4e:8b:97:fb:2a:1c:e8:9e:
                    18:54:65:ff:d5:9f:a7:4d:bb:84:35:c3:6f:8a:e0:
                    24:2b:d9:ba:fd:ac:c1:1b:5c:85:1b:16:a6:d0:ce:
                    53:4b:28:95:f0:70:d2:74:51:21:66:c0:04:ae:4a:
                    53:96:ea:9e:d5:bd:ff:b1:5f:fa:93:c1:8d:6e:9d:
                    1c:3f:ea:ff:07:9d:18:b6:03:36:d9:e5:1a:2f:89:
                    fa:39:6a:8d:aa:6b:19:dc:53:c4:ca:3b:ca:27:d6:
                    72:fe:ed:ec:2b:cd:19:d3:d9:86:15:d0:f5:c5:e9:
                    19:24:66:2b:eb:8e:84:df:e8:73:1b:cc:19:7c:a6:
                    b0:67:b0:15:a8:5e:47:30:cb:f4:55:c6:35:17:ad:
                    0f:ba:50:e6:88:f3:f9:4f:6c:99:bd:e8:f7:b3:d0:
                    3a:2b:81:96:39:76:16:35:29:e4:2b:bd:e8:87:8c:
                    c8:f9:21:ed:87:47:ea:77:5b:d2:c7:a1:96:d5:08:
                    b7:92:d0:b9:02:ef:14:b0:5d:7f:fb:27:77:4e:bb:
                    47:da:fa:42:48:32:c3:bf:32:a2:36:2c:63:59:46:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:DF:5C:AC:41:05:7F:B8:57:7A:AA:7D:97:4C:3C:67:5C:74:DC
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:1f:70:a1:c3:34:37:96:4f:da:7e:3d:df:af:06:08:ce:
         7c:e7:87:14:53:e8:6c:82:aa:5a:4d:c0:10:11:18:0b:84:bf:
         f6:19:29:e1:4d:58:3b:16:cb:8d:17:35:97:7f:f9:b9:5c:73:
         b3:92:a9:93:ff:1e:1e:b6:4c:45:97:4b:57:c2:32:11:d1:24:
         e5:3b:98:d9:ba:d7:c0:3c:5d:cc:a0:ed:b6:26:63:9e:3c:fe:
         a2:76:c1:4b:cd:86:04:0c:ef:4d:8e:50:c9:00:48:59:7c:f3:
         aa:aa:df:0b:5d:50:0c:e9:a7:e6:c0:71:da:4c:cc:93:55:0e:
         ec:c2:7c:76:73:7d:bd:21:f1:4d:82:d8:3c:02:e3:2f:a7:82:
         f4:67:28:58:f3:68:ac:3b:a3:e2:2b:9d:d5:e2:7f:04:7b:3c:
         18:4c:5a:e3:a4:9d:c3:a1:01:c3:86:23:84:e3:60:c6:6c:63:
         76:a6:94:0e:df:1c:1b:7e:54:c4:07:ab:61:4c:60:76:8f:89:
         a2:d4:3e:3b:10:be:96:52:f3:0b:f2:93:0b:2d:84:de:9b:c8:
         c5:c1:2e:af:a7:d5:07:14:af:a2:94:c4:9a:3e:2d:45:d6:52:
         84:2d:c9:c3:26:81:87:e8:2a:45:77:d8:4f:af:e3:b0:d2:60:
         b4:2f:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org