Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS3905.roa
File:                     AS3905.roa (raw, json)
Hash identifier:          1Ffsw90sDzxH5FeikR7v1j2k6E64i9XY2OajNQWH0yw=
Subject key identifier:   74:1B:DD:4D:A0:21:06:FF:8A:54:FD:38:0B:17:8B:FB:6C:BA:C8:D0
Certificate issuer:       /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial:       7FC746C0FC3F286544C3F39D04331039AF8F27B2
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS3905.roa
Signing time:             Tue 05 Mar 2024 18:06:10 +0000
ROA not before:           Tue 05 Mar 2024 18:01:10 +0000
ROA not after:            Tue 04 Mar 2025 18:06:10 +0000
asID:                     3905
IP address blocks:        189.247.131.0/24 maxlen: 24
                          189.254.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c7:46:c0:fc:3f:28:65:44:c3:f3:9d:04:33:10:39:af:8f:27:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
        Validity
            Not Before: Mar  5 18:01:10 2024 GMT
            Not After : Mar  4 18:06:10 2025 GMT
        Subject: CN=741BDD4DA02106FF8A54FD380B178BFB6CBAC8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:db:a7:4c:1a:d1:d7:7e:e5:4a:ed:c6:e4:
                    e0:b5:d4:88:70:4b:c4:3b:0a:06:f6:4f:a4:f6:1e:
                    5e:10:11:b2:c2:ff:15:9e:68:5a:f5:08:c0:1c:73:
                    a3:0d:9f:39:23:42:60:18:61:a8:3b:4f:1f:3d:47:
                    31:3b:00:96:a2:ab:ee:5d:af:bd:58:0a:98:1a:59:
                    8e:66:43:6c:72:96:14:8a:6a:9b:cd:86:a9:fc:f2:
                    40:42:42:4a:5c:c3:de:c9:82:0d:60:cf:09:9c:d7:
                    47:8e:b9:62:e6:18:0e:16:31:23:5e:92:04:36:98:
                    84:75:ef:47:6d:f7:2e:5b:36:cb:c2:fe:32:ae:48:
                    a1:1c:d8:0f:e5:69:fe:f0:aa:93:20:39:b8:27:8c:
                    92:c8:e1:8e:71:b1:c1:63:b4:7a:ac:43:48:a3:80:
                    a9:35:60:99:37:5b:91:ce:53:8c:48:e6:80:1e:46:
                    17:c3:23:34:cc:c1:52:8c:f4:9b:37:97:bd:02:89:
                    a9:49:82:ae:d9:2a:41:e2:67:d5:18:96:e4:dd:81:
                    78:23:dd:6b:87:b8:e3:d9:43:67:62:bb:d7:65:bc:
                    e5:81:81:9c:db:8c:eb:39:b9:d0:3b:6c:60:b0:b1:
                    6a:09:ce:01:da:44:79:a2:ca:27:a2:8a:ea:9a:95:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1B:DD:4D:A0:21:06:FF:8A:54:FD:38:0B:17:8B:FB:6C:BA:C8:D0
            X509v3 Authority Key Identifier:
                keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS3905.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.247.131.0/24
                  189.254.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:11:78:e1:b9:c5:fb:90:f5:55:10:ea:73:ee:3a:d9:20:
         56:d6:11:80:e7:a1:70:eb:87:71:f1:32:a5:29:dc:e1:8c:51:
         ba:14:23:5a:9f:6b:7c:e6:56:6f:24:18:b8:a7:5f:af:f4:32:
         cd:58:54:ca:af:a2:38:05:5c:83:83:4e:66:bb:3f:2a:8c:4f:
         75:2b:19:4c:44:32:4e:5a:49:e3:bc:8f:80:a8:4e:72:50:e9:
         9c:34:22:46:01:94:24:59:2f:ac:a0:25:0f:a4:68:c1:0a:3c:
         9a:04:23:98:47:fe:91:41:73:c4:af:e3:e2:c6:e6:62:ee:84:
         35:0c:11:05:72:29:ed:fe:1c:68:9b:48:8d:10:6a:af:21:c0:
         89:61:cf:0f:99:64:92:f9:7e:76:f5:0d:f7:21:63:2d:5a:7b:
         78:63:b0:52:97:c4:6a:6f:0b:c4:c5:c4:ac:2c:b7:78:29:48:
         d7:3b:8e:ae:d3:02:8e:a2:37:06:9e:f6:37:08:d8:b5:2a:88:
         ab:1c:92:d4:cf:79:1c:df:41:d6:b6:80:3a:d3:5f:1c:3f:ac:
         82:60:6c:2a:1c:7b:fe:eb:19:45:7d:d7:75:b2:86:66:19:b1:
         76:49:e9:bd:4e:65:48:ae:39:77:3d:6d:26:e8:23:dd:ed:bb:
         48:12:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org