Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa
File:                     3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          9F7TUpPmpnsvYcuXl6+2HSJZ5n8FI9Ox20RHtdDImdU=
Subject key identifier:   4E:71:98:7C:4F:B4:E7:F0:C7:79:6A:F7:60:47:CF:20:FF:9B:EC:44
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       7592451491A3289ECE7D57E3BE0D246771E2FE74
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa
Signing time:             Tue 05 Mar 2024 17:47:42 +0000
ROA not before:           Tue 05 Mar 2024 17:42:42 +0000
ROA not after:            Tue 04 Mar 2025 17:47:42 +0000
asID:                     272843
IP address blocks:        190.185.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:92:45:14:91:a3:28:9e:ce:7d:57:e3:be:0d:24:67:71:e2:fe:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:42 2024 GMT
            Not After : Mar  4 17:47:42 2025 GMT
        Subject: CN=4E71987C4FB4E7F0C7796AF76047CF20FF9BEC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:1a:4d:9f:e0:df:aa:4a:0b:fb:b0:7b:a3:
                    2b:2f:3e:89:92:38:86:e3:73:13:4e:3b:f4:33:18:
                    74:20:25:9c:70:a9:ac:01:23:c6:a9:ec:c4:24:f2:
                    0c:ee:36:db:ca:39:f3:df:46:06:b0:a7:65:7f:c5:
                    33:6a:04:ab:dc:e2:8c:84:6d:16:60:86:05:d0:b0:
                    0b:a1:cd:9a:d5:ac:99:55:50:35:e7:17:c3:54:90:
                    ef:f2:28:85:1d:1d:1e:c2:2b:4c:71:f6:07:61:09:
                    7b:1a:19:00:0d:5f:c9:36:a4:49:3c:7d:72:e6:fc:
                    e9:61:f1:8d:9d:00:c4:e8:5e:21:d1:ab:6f:6b:15:
                    a2:99:74:a2:92:16:55:a2:a4:48:39:72:4e:0b:bf:
                    66:bb:8b:c6:a6:aa:3f:e2:ce:71:c9:e5:63:f4:6f:
                    01:9a:79:ca:32:fb:bd:0e:44:f7:5c:8e:c6:02:d8:
                    e9:7c:35:39:4a:db:fb:41:33:aa:fd:3a:2a:87:ab:
                    ea:8c:ae:f2:6a:4c:ab:2d:3e:90:8e:38:14:13:51:
                    6c:7e:33:ad:bd:36:e7:56:49:a5:85:ea:26:81:af:
                    b4:5a:30:c5:ad:df:11:ed:d2:ac:8f:f8:20:ee:52:
                    f6:21:e3:29:c3:2b:b7:27:6e:e1:1e:4e:b8:80:45:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:98:7C:4F:B4:E7:F0:C7:79:6A:F7:60:47:CF:20:FF:9B:EC:44
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:a5:6f:d6:57:32:90:48:e7:2d:4a:f1:e9:5a:e5:1b:8e:fd:
         9d:f8:07:68:72:d6:57:90:75:17:3e:9b:51:4c:32:7b:d1:be:
         26:e6:2e:34:7f:5e:11:8c:4e:c4:24:db:25:0b:86:b0:62:49:
         7b:20:20:df:5e:51:df:99:e3:c0:9e:79:e1:ea:0e:4a:1c:59:
         e7:a4:e9:d5:90:f0:9a:d7:1c:ce:cc:5d:97:ed:57:39:f7:16:
         26:a4:ca:45:75:ba:df:9a:0c:9f:de:88:b0:f0:d6:9d:40:8a:
         31:f3:b4:17:10:5c:bf:d4:17:fc:cf:3a:c1:eb:5e:04:17:a7:
         8b:a4:a0:77:5a:ef:51:fe:ed:12:73:b1:f7:d3:27:ca:c4:cf:
         29:29:f7:d9:a7:1c:ae:a1:7a:7e:51:85:52:a2:c0:6a:7e:b0:
         bb:40:e4:d8:f5:ff:ef:85:61:77:a7:23:37:4e:1c:03:f1:c2:
         b4:62:6b:8c:5b:71:b0:a0:20:47:85:bc:2a:71:cb:96:99:6d:
         fe:14:4d:c9:7d:89:5a:9d:c5:34:a7:80:d6:9d:ad:fc:4d:1f:
         09:78:7f:f9:02:de:f3:99:e1:52:f8:ee:3a:30:cc:9e:b6:5c:
         ce:fe:c4:bd:28:d4:3a:1a:74:ae:63:a7:9a:85:e2:6f:dd:bf:
         6f:30:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org