Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230302e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          CT3Qg6knalI8nTm25O+DthSDwjuxO33uwX/8mD7pMpU=
Subject key identifier:   DD:55:B9:34:45:C8:19:B2:17:86:CA:FD:40:74:D9:AD:5F:EE:2D:03
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       202B7CB08E0E0BD343B1E2A9C693087F26907F1E
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     52330
IP address blocks:        190.184.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2b:7c:b0:8e:0e:0b:d3:43:b1:e2:a9:c6:93:08:7f:26:90:7f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=DD55B93445C819B21786CAFD4074D9AD5FEE2D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:07:0d:e9:62:95:6a:d1:e1:c6:1b:99:dd:
                    64:8f:06:f9:52:fc:49:f1:fa:79:84:30:16:b5:cd:
                    bb:f9:d6:9e:2e:77:7c:0f:65:c4:0c:69:a4:97:54:
                    eb:f3:c5:99:24:a8:c8:00:08:01:58:60:5b:40:32:
                    b2:1c:91:db:54:7a:b5:ee:2a:27:33:d9:4c:25:03:
                    1f:0f:8f:2c:d5:f8:5f:b5:c1:ab:21:bc:83:12:7c:
                    d0:72:e9:ea:c9:de:65:ba:eb:3e:e5:32:53:b3:ba:
                    aa:3b:fd:d6:d5:f2:2d:28:a7:eb:68:9e:d6:8f:67:
                    93:24:a5:6e:43:1f:91:c8:65:3d:bd:d1:d2:5d:fb:
                    0c:a1:f4:a9:3c:2d:98:c9:c7:a1:22:2e:db:29:92:
                    18:70:71:58:76:41:84:08:6f:35:8d:38:54:83:e4:
                    bc:c0:2d:b9:e7:8c:d8:e2:42:b3:8a:c2:86:f5:dc:
                    fd:43:a7:a6:66:6f:49:0b:f5:4b:fb:1d:07:f7:d1:
                    fd:46:a5:4d:b8:af:53:b5:fa:da:f4:2c:9b:83:0d:
                    0f:84:d8:83:6e:b1:34:2a:4e:2a:60:7d:4b:9f:1d:
                    95:bd:61:ce:2f:bf:2f:ce:05:67:a9:40:3c:09:da:
                    bf:56:be:fc:d5:ba:02:b5:79:df:64:87:52:71:12:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:55:B9:34:45:C8:19:B2:17:86:CA:FD:40:74:D9:AD:5F:EE:2D:03
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:24:88:85:5f:e8:d3:c4:88:16:20:59:9e:1b:1d:77:40:a3:
         e6:58:d4:72:df:50:9a:08:bf:80:d8:f8:cc:cc:f2:37:20:af:
         e4:da:a0:86:81:44:14:77:aa:a3:09:32:83:23:70:22:12:50:
         b8:d3:be:13:5e:3a:f3:7f:c7:c8:14:ce:9e:60:e8:86:cf:78:
         49:1a:b5:6b:27:71:3c:55:56:d6:94:cc:b8:26:ac:99:78:7f:
         ad:66:48:b4:08:4c:08:02:a1:1f:95:90:0e:cc:52:99:f0:ce:
         35:79:fd:bc:4b:9c:06:33:58:cd:c3:a7:5c:6e:21:51:a8:97:
         b5:36:dc:56:c7:7a:71:df:0b:98:b7:b4:a2:27:4c:f6:62:40:
         86:30:57:fc:a6:e1:a9:83:af:c9:af:b1:9d:48:55:c2:ae:25:
         ec:f3:88:7c:5d:9d:14:91:6a:41:c0:ad:7d:4b:3e:20:2d:a2:
         08:70:e0:96:31:2d:e2:7e:d3:0e:2f:70:2b:ad:ae:19:d7:6b:
         f6:11:88:9c:2b:af:41:2e:1e:25:25:73:51:09:cb:cf:a7:88:
         b0:5e:c6:61:14:63:ae:68:78:f4:33:25:be:dd:67:4e:24:05:
         40:36:0d:69:70:26:51:0d:f8:88:ef:f2:64:ea:e0:3b:a0:6f:
         96:a1:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org