Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          lF9kg6MzbThT93Tn/euxS2kslct/xQD9bc4prPFDadU=
Subject key identifier:   E1:42:95:EE:2E:F8:E8:62:9E:E4:9F:15:5C:1D:E0:47:52:A8:37:A5
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       57965B43E10ADBDE872964B1C997B8B2DDCEE80D
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:10 +0000
ROA not before:           Tue 05 Mar 2024 18:02:10 +0000
ROA not after:            Tue 04 Mar 2025 18:07:10 +0000
asID:                     52330
IP address blocks:        190.184.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:96:5b:43:e1:0a:db:de:87:29:64:b1:c9:97:b8:b2:dd:ce:e8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:10 2024 GMT
            Not After : Mar  4 18:07:10 2025 GMT
        Subject: CN=E14295EE2EF8E8629EE49F155C1DE04752A837A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:68:9b:42:af:5f:21:cb:d7:d8:b4:d3:23:
                    1f:1a:4f:51:57:71:cd:5a:17:c1:4a:25:58:a2:65:
                    8a:04:d9:65:c3:b5:1f:78:b0:4b:88:1f:82:67:57:
                    76:c6:49:87:a2:fa:9f:3e:ea:83:c4:8a:31:65:03:
                    47:7c:92:90:32:76:20:71:fa:8e:3c:a1:cf:79:db:
                    fb:35:55:19:29:45:bb:6d:e0:4c:5c:49:4e:d3:9f:
                    d4:c2:56:b8:ff:27:74:c6:40:d8:c0:ce:ab:aa:c4:
                    c2:45:d1:f3:1f:9e:34:4a:22:2b:4f:d8:fc:8c:03:
                    c5:da:ad:a2:b7:e9:bb:ec:3a:70:e4:99:bb:e1:21:
                    eb:f0:13:bc:d2:1d:56:c2:6d:82:d1:16:0c:4e:95:
                    fd:ed:0f:27:b3:14:68:38:78:c0:ea:1d:68:24:92:
                    53:51:db:2f:82:ad:71:11:c5:76:32:98:d1:68:94:
                    d8:ad:f6:2b:9d:99:ef:95:51:6e:b3:11:d6:87:8d:
                    71:4d:9c:3d:b8:3b:4b:3e:36:2c:4b:b3:bf:b5:c6:
                    c5:b0:3d:c4:36:01:62:64:23:66:26:f9:20:64:d5:
                    bd:9d:2b:d0:58:ba:71:65:31:d3:75:3e:61:86:52:
                    60:0b:97:b4:0a:1d:dc:93:45:e7:8e:1f:65:8c:17:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:42:95:EE:2E:F8:E8:62:9E:E4:9F:15:5C:1D:E0:47:52:A8:37:A5
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b7:ef:5d:7d:9a:c6:a8:c3:7c:1b:f1:84:fb:98:e3:f4:15:
         25:17:d3:3a:41:51:ed:65:3c:80:d1:ce:ce:74:e4:70:a9:46:
         a4:76:35:2d:64:ef:0b:af:c9:e1:86:4b:07:dc:c5:d2:2a:04:
         84:8d:c7:13:9b:78:6a:22:40:30:f0:e2:5a:fa:0d:c4:11:08:
         91:21:d9:28:9e:48:f3:84:cb:e0:cc:32:14:28:7a:7e:e2:8a:
         4a:b7:d4:37:09:93:26:4d:8f:e6:43:a1:fc:67:ae:be:82:ee:
         e7:76:07:b0:4b:09:ab:c1:4b:7a:e3:c8:29:85:c3:3e:85:92:
         88:3f:47:4f:bb:65:a9:8e:f0:7b:ac:2f:db:30:4d:59:64:68:
         cd:4c:1a:c4:76:ac:f0:aa:42:31:f5:44:41:dc:03:3b:70:66:
         98:b2:b8:7b:cc:ee:4a:fb:a7:8e:19:5a:51:a2:ad:ac:e9:53:
         6b:47:33:8b:7e:52:70:2e:f5:89:0d:8b:ac:b8:9e:b0:f9:16:
         77:71:7f:3a:85:35:2e:9f:4a:36:77:aa:a0:ad:8f:46:ce:15:
         51:25:d1:e2:bd:ca:f8:7b:94:71:c2:41:2c:84:5f:e3:5a:86:
         5c:1b:d8:07:54:58:32:c1:65:23:03:10:ca:c0:95:d6:86:18:
         47:22:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org