Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa
File:                     3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          BW0gb4ofON+cPM2yA/0zLi3aaJoWoos3tJKj33Tryv0=
Subject key identifier:   17:61:D5:AE:22:24:C6:E8:66:C5:45:31:C0:EA:3E:88:68:25:AF:EC
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       74707E7A0D5F211272680C09E0B57E5A34F5FED3
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa
Signing time:             Tue 05 Mar 2024 17:47:39 +0000
ROA not before:           Tue 05 Mar 2024 17:42:39 +0000
ROA not after:            Tue 04 Mar 2025 17:47:39 +0000
asID:                     272843
IP address blocks:        190.185.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:70:7e:7a:0d:5f:21:12:72:68:0c:09:e0:b5:7e:5a:34:f5:fe:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:39 2024 GMT
            Not After : Mar  4 17:47:39 2025 GMT
        Subject: CN=1761D5AE2224C6E866C54531C0EA3E886825AFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:0c:af:64:f1:a4:a7:6e:6d:8f:02:9a:aa:
                    12:c8:0b:a9:d7:34:c2:3d:b1:3c:41:52:e6:13:59:
                    66:ea:95:40:f9:f9:2d:33:48:df:de:df:7d:1a:8e:
                    d0:e3:23:42:60:34:54:8c:ae:04:53:32:a4:21:df:
                    8e:69:60:1f:3d:f3:f1:54:f6:67:be:56:fa:7d:af:
                    fd:39:ee:21:3f:51:bb:85:c1:45:83:fe:7f:86:4f:
                    72:17:e4:35:26:b4:6c:6f:6f:dd:2b:f3:e3:3c:d4:
                    f9:56:de:8b:4b:4b:6d:d7:4c:46:40:e9:2d:c6:7f:
                    91:e8:0c:2e:d3:e0:ac:e6:a5:28:3e:75:c4:f0:12:
                    89:9d:92:90:84:f5:54:b5:6e:51:a1:ba:16:00:b3:
                    79:f5:7f:6d:12:1c:b3:b7:5b:fa:66:70:d8:cf:3d:
                    89:4f:6f:97:ac:59:4e:a8:48:37:b4:9f:55:db:14:
                    3e:04:90:06:14:d8:b8:e9:dc:3a:d1:e0:83:ef:b4:
                    0a:0e:3c:65:bc:a7:82:f1:5d:4f:ef:e9:1c:58:a3:
                    ca:21:d4:d8:e0:28:0d:83:50:47:5c:c6:56:e8:d5:
                    35:f4:24:ca:ba:2a:96:77:5d:d3:da:f2:43:01:87:
                    ab:3d:5c:f9:d1:b4:ea:dc:0b:bc:96:dc:40:18:46:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:D5:AE:22:24:C6:E8:66:C5:45:31:C0:EA:3E:88:68:25:AF:EC
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:99:c7:83:3d:a6:3e:12:d8:bd:72:be:d3:60:a3:04:8d:cf:
         a3:94:a6:3f:52:99:17:aa:72:a0:7f:5b:8d:e0:a7:12:d1:35:
         8e:37:70:ba:ed:9b:61:6c:40:be:e8:27:48:71:0e:4b:da:ae:
         03:b7:4f:5c:12:11:2e:dc:7f:63:b4:92:8f:a5:96:b5:89:16:
         5d:3d:5e:90:6e:dc:a0:d3:fc:8d:74:88:dc:37:4c:5c:ad:28:
         9a:cd:dc:ef:24:5d:76:fc:a4:c6:98:78:25:59:42:88:09:58:
         30:db:86:01:76:6c:eb:de:a4:9c:df:96:7b:b6:22:94:34:d9:
         44:92:a3:6b:55:0f:2e:26:ca:87:29:dd:5a:44:b4:67:cd:aa:
         ed:58:54:fe:39:cb:bd:eb:27:63:97:f8:63:ce:4c:fe:bc:17:
         93:70:78:5e:9c:25:39:9e:c4:a3:15:15:c1:bd:80:7b:73:e0:
         85:02:81:f9:c7:37:09:91:46:29:82:39:16:f3:69:38:3d:ef:
         10:12:91:3c:af:bc:84:7b:e1:31:4a:6e:46:a5:7d:cd:f4:3c:
         af:8c:26:c2:6b:83:2b:df:0f:c6:4e:fc:b0:99:3f:9f:15:4b:
         aa:83:ae:fd:fa:09:ab:8b:73:01:1e:68:26:a3:18:fd:92:9d:
         04:1e:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:45 2024 by rpki-client on console-fra.rpki-client.org