Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa
File:                     3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa (raw, json)
Hash identifier:          lY9UkazNSj7yTZeRU0zLdrw/UU7Pr0kwFXt+xvsnFYY=
Subject key identifier:   F3:64:7B:21:34:8D:EF:75:8F:4E:F1:BF:10:F9:A2:33:F5:26:00:02
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       166E6D1A5CE224068F0D58421F15EC3ED8F86D85
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa
Signing time:             Tue 05 Mar 2024 17:47:41 +0000
ROA not before:           Tue 05 Mar 2024 17:42:41 +0000
ROA not after:            Tue 04 Mar 2025 17:47:41 +0000
asID:                     265719
IP address blocks:        190.182.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6e:6d:1a:5c:e2:24:06:8f:0d:58:42:1f:15:ec:3e:d8:f8:6d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:41 2024 GMT
            Not After : Mar  4 17:47:41 2025 GMT
        Subject: CN=F3647B21348DEF758F4EF1BF10F9A233F5260002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:05:07:1f:54:5d:5d:0b:f5:63:d7:49:db:
                    2b:44:83:45:ca:10:3d:67:03:2d:2b:40:e1:f5:fe:
                    8f:e9:a8:fb:1d:94:f3:e5:2b:8d:64:e5:e6:a0:1c:
                    7b:97:f9:b9:79:e8:eb:a0:8a:a5:ac:2c:b8:ad:01:
                    04:a7:e3:91:7e:33:a5:87:bb:af:9c:f4:93:20:26:
                    52:10:2b:3d:89:81:79:d9:66:2f:fe:4e:d1:77:40:
                    6f:b9:c6:ba:2d:9a:1b:97:29:a5:4e:49:9b:e1:da:
                    84:60:0f:2f:6d:b7:50:c8:9e:11:6a:65:df:cd:64:
                    8c:d9:c1:ce:be:7b:b6:28:b1:67:30:58:53:a6:e3:
                    4f:a2:ea:1a:f7:07:11:2f:1a:51:f5:d0:79:fc:f9:
                    43:fd:9e:33:e5:8a:50:ee:65:05:90:d4:eb:48:64:
                    e3:d8:ff:bd:43:a9:1f:ce:ae:ba:7a:0d:1e:1a:1f:
                    26:bc:b9:f0:eb:de:19:85:92:ef:2b:3d:09:62:b9:
                    80:31:61:d5:cf:f8:17:0c:cc:6f:5a:79:33:c1:7c:
                    1a:ac:60:b8:8f:a7:bc:2c:ce:c5:b1:f4:3f:32:91:
                    4e:09:b7:df:4e:5a:9a:27:4f:d5:06:ce:5e:c2:60:
                    1d:8d:6e:51:8f:59:d8:ce:26:90:71:4e:f0:40:e6:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:64:7B:21:34:8D:EF:75:8F:4E:F1:BF:10:F9:A2:33:F5:26:00:02
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:a8:36:75:3c:32:98:05:f3:fc:de:86:ec:9e:16:de:f2:
         fa:11:37:5f:7f:2a:ca:ae:1f:3d:6c:ae:d5:f6:43:c3:ec:16:
         48:21:82:9a:c7:75:58:e7:9b:58:68:ea:13:fd:6b:42:f5:79:
         ab:92:0d:20:60:57:3e:ba:1f:7b:06:70:8a:7f:5f:46:6f:34:
         91:79:32:c1:05:64:92:80:b4:d1:de:b4:d5:15:e3:52:d0:dd:
         88:3d:40:6b:e2:2b:31:56:7a:47:7f:77:24:19:e6:6d:b5:7b:
         27:d8:d6:a2:d8:ae:2f:4f:9e:95:95:18:c7:18:95:87:f0:cc:
         56:54:62:24:21:32:c2:7a:af:98:57:3a:59:18:75:8f:be:bb:
         98:e7:25:c9:b2:2e:e8:b8:35:8b:ce:b9:31:03:8c:91:fa:68:
         e1:0b:a8:44:a3:f0:75:36:0d:07:fe:04:28:dc:91:ae:66:db:
         8f:b0:94:55:c2:70:06:7c:3b:e9:34:5e:bf:14:a4:61:53:f6:
         10:6c:78:b6:b0:f4:fe:08:8d:25:ef:7f:c5:02:93:c9:8f:6b:
         b1:3a:31:95:e6:63:d9:b1:67:d2:05:29:ba:be:9d:0a:7c:69:
         88:b2:4e:b1:46:7a:92:a5:2f:7f:cf:0f:00:c5:6d:25:17:f3:
         af:2a:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:45 2024 by rpki-client on console-fra.rpki-client.org