Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e322e3230382e302f32312d3234203d3e20323632313836.roa
File:                     3139302e322e3230382e302f32312d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          +pNggl7Gz7EX+QZSiIga+ReT/Z5Rog2XUTUcdj1TcHs=
Subject key identifier:   52:AD:4A:26:B4:08:07:2B:A5:B3:7F:18:8F:92:35:FC:C8:B3:B5:84
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       138CE074CD1187DB0AB122A808FDE1E2352D5894
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e322e3230382e302f32312d3234203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:11:06 +0000
ROA not before:           Tue 05 Mar 2024 18:06:06 +0000
ROA not after:            Tue 04 Mar 2025 18:11:06 +0000
asID:                     262186
IP address blocks:        190.2.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 23:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8c:e0:74:cd:11:87:db:0a:b1:22:a8:08:fd:e1:e2:35:2d:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Mar  5 18:06:06 2024 GMT
            Not After : Mar  4 18:11:06 2025 GMT
        Subject: CN=52AD4A26B408072BA5B37F188F9235FCC8B3B584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:e3:45:5b:8c:60:1a:97:7b:7f:02:2b:42:
                    ab:f6:4c:d3:08:c9:33:bd:0c:35:a1:45:47:cd:7f:
                    0c:b2:44:24:d0:19:76:99:ed:63:06:e3:f3:61:e4:
                    48:3f:89:ca:9d:1d:8a:f0:dd:f8:73:5a:08:ce:8d:
                    30:0a:8e:4c:4a:a6:5d:b9:2d:d2:8d:05:04:30:e6:
                    ac:45:91:1d:6c:c2:7d:70:36:78:81:a2:66:93:64:
                    bd:56:7c:bd:98:09:80:41:cd:5f:2b:dd:f9:b1:f1:
                    d5:36:8c:55:5e:09:0e:ae:14:b1:ca:c5:d8:ff:0a:
                    9d:45:d8:d0:f6:d6:31:b0:7c:26:28:4a:72:ce:21:
                    e6:80:9d:2d:78:81:fd:54:d1:a5:6d:6e:8a:49:30:
                    04:01:5d:95:c8:8c:3d:5c:87:80:44:d4:cc:92:7d:
                    83:d4:f0:a9:98:10:27:c6:0a:3d:9f:bc:dc:dd:90:
                    10:72:d5:66:06:8e:bf:66:95:b8:57:0b:bb:82:14:
                    5b:b2:8a:78:39:2d:ee:f5:21:08:1c:94:43:d1:82:
                    ee:21:83:b1:1f:5f:e6:0e:ac:21:eb:cd:8f:d7:60:
                    bd:06:d2:f4:dd:e0:16:84:a4:5d:b5:33:a3:21:bf:
                    29:4a:a8:2a:28:2c:99:b7:0f:93:65:c1:9b:ef:8e:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:4A:26:B4:08:07:2B:A5:B3:7F:18:8F:92:35:FC:C8:B3:B5:84
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e322e3230382e302f32312d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:a4:e6:1a:0a:0e:24:a1:03:ac:c8:87:7e:b1:e9:33:8c:
         ed:80:17:3e:e0:6f:a2:dd:97:75:ab:e1:a4:2b:88:da:82:84:
         9c:2d:4f:7d:10:95:ad:9f:d1:96:98:b4:fb:d6:58:08:d3:85:
         55:15:22:e5:df:19:32:8c:57:37:3e:0c:06:76:60:69:cf:49:
         34:59:5f:86:60:5a:26:2b:35:de:82:77:30:1d:df:1b:6a:89:
         3c:56:d0:ca:87:9d:ba:35:aa:03:0a:33:ed:03:8b:7d:bc:23:
         f6:cb:c7:fe:64:08:3c:27:58:4d:ca:3a:6c:05:89:7e:dc:25:
         1a:21:57:ef:ba:74:af:d5:60:c0:d7:e7:3a:c9:4a:3a:d4:5b:
         5a:5e:d9:fd:32:de:3f:3e:59:8b:7e:02:19:78:0d:66:3c:81:
         0f:70:fe:fc:51:15:fa:51:0e:16:e8:ce:8f:11:c9:e1:57:1c:
         f7:ed:af:18:7d:fc:82:b5:4e:1f:94:0e:b0:a8:3a:dd:29:5a:
         a5:aa:0b:42:64:bb:d1:6b:8a:40:d0:de:44:de:c6:56:07:c7:
         73:35:67:23:31:c1:c5:97:bb:85:46:84:b4:8a:70:25:66:9e:
         1e:a3:70:e0:10:37:3c:e5:5a:f0:a4:87:92:43:b0:e1:24:3b:
         4d:07:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org