Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134312e302f32342d3234203d3e203532333236.roa
File:                     3139302e3135312e3134312e302f32342d3234203d3e203532333236.roa (raw, json)
Hash identifier:          i6dwN3sNN3xqyM0Wlyv2zN52RX3k4uVstCWdbOEDcdk=
Subject key identifier:   E9:F9:1A:EA:F3:2B:F8:5F:4D:25:44:E3:D4:52:77:7E:A1:4A:5E:CF
Certificate issuer:       /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial:       02A8D9BD2E75AE25FB4FB7C0485C7EE338872717
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134312e302f32342d3234203d3e203532333236.roa
Signing time:             Tue 05 Mar 2024 17:40:36 +0000
ROA not before:           Tue 05 Mar 2024 17:35:36 +0000
ROA not after:            Tue 04 Mar 2025 17:40:36 +0000
asID:                     52326
IP address blocks:        190.151.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a8:d9:bd:2e:75:ae:25:fb:4f:b7:c0:48:5c:7e:e3:38:87:27:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
        Validity
            Not Before: Mar  5 17:35:36 2024 GMT
            Not After : Mar  4 17:40:36 2025 GMT
        Subject: CN=E9F91AEAF32BF85F4D2544E3D452777EA14A5ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:04:64:73:22:00:6f:37:c8:01:c9:9d:d0:
                    98:db:21:71:1c:e0:9b:b7:a2:b5:87:b9:44:cb:ce:
                    49:d1:d6:88:b9:a6:be:7b:2d:65:30:02:68:a7:13:
                    f1:10:75:c1:2f:fe:be:f2:6b:8d:5f:1d:b5:fd:96:
                    af:51:08:f5:d0:67:f1:78:e1:e9:d8:b4:d5:01:c6:
                    14:b1:80:d2:bf:44:e2:2f:b1:88:c0:16:1f:97:1c:
                    d9:6f:08:95:12:92:37:d1:23:5a:71:09:28:24:b9:
                    46:ed:31:78:2e:54:3d:00:59:c4:0b:a0:a9:8a:f6:
                    98:cb:bc:fc:d4:cc:34:5f:1c:6b:67:f0:ce:a8:b2:
                    a6:57:2c:07:15:ef:a8:71:7e:aa:51:f6:7e:39:73:
                    4e:a9:c5:1f:f6:54:7d:81:a9:0d:25:fa:74:69:07:
                    e0:5f:d7:a2:67:0e:8e:86:7a:fd:a5:bc:14:9a:f4:
                    3a:61:fc:d1:ad:f1:78:b1:75:f3:60:49:a7:d0:80:
                    46:0f:1f:cc:a6:14:cc:cb:fc:a5:43:b6:9e:ab:f7:
                    d2:d6:6e:02:6b:d4:7a:8a:50:90:c2:04:f4:26:52:
                    a9:dc:ad:38:49:6a:c8:61:f5:ea:c8:01:d6:99:b1:
                    f2:87:f0:17:3e:38:e7:f3:7a:8e:24:18:48:f7:e6:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F9:1A:EA:F3:2B:F8:5F:4D:25:44:E3:D4:52:77:7E:A1:4A:5E:CF
            X509v3 Authority Key Identifier:
                keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134312e302f32342d3234203d3e203532333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:a5:1e:34:da:df:cb:03:fe:32:37:48:1b:c4:0d:79:f3:
         7b:bf:65:78:d6:bb:06:03:37:14:e1:61:20:8f:6d:f2:5b:34:
         4e:9e:31:d5:5f:ca:06:85:81:87:58:75:6e:04:c8:7e:43:1f:
         81:d3:c5:b0:05:a5:13:60:da:1b:9e:c5:8d:76:45:6b:04:04:
         5b:f1:21:85:2c:25:55:d1:0b:d9:a9:b2:a5:39:ee:9a:75:5c:
         ea:ec:1a:74:ef:ae:6f:2b:c1:2e:43:80:ac:c8:cc:60:b1:40:
         f4:f7:b7:65:97:71:eb:5a:68:e2:f8:ea:6a:c9:ac:00:b3:1e:
         cd:19:74:ec:4c:60:56:00:11:c4:3b:8f:dc:90:e3:98:26:21:
         6b:fa:c3:3c:1b:9a:a3:2f:5a:89:2d:17:f8:1b:42:10:e1:ad:
         8c:27:2c:bd:9d:b2:7d:27:af:dc:31:54:49:ee:15:b9:dc:3d:
         26:eb:0f:e3:03:f6:ca:4c:4c:18:81:19:63:06:4e:cd:cb:dc:
         f7:39:a4:88:28:25:eb:83:35:b8:0f:19:a4:e6:61:ce:cf:e6:
         02:a1:4f:c0:26:8f:a3:2b:5f:16:9d:62:46:20:6a:11:d4:fc:
         a6:20:5a:4c:b6:be:1c:1f:86:e8:78:b8:78:12:39:1b:ad:16:
         9f:0a:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org