Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230352e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230352e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          egN4TWJk3Sqkrd2lEDZB0YLMIy2ZXjgCD6j0go5w7KM=
Subject key identifier:   77:9E:EE:78:DD:04:80:05:B6:83:51:81:5F:C6:A9:98:1F:C4:89:34
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       6FA7AE75DAC13127686C4663B3C37493040A4578
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230352e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:14 +0000
ROA not before:           Tue 05 Mar 2024 18:02:14 +0000
ROA not after:            Tue 04 Mar 2025 18:07:14 +0000
asID:                     52330
IP address blocks:        190.184.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a7:ae:75:da:c1:31:27:68:6c:46:63:b3:c3:74:93:04:0a:45:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:14 2024 GMT
            Not After : Mar  4 18:07:14 2025 GMT
        Subject: CN=779EEE78DD048005B68351815FC6A9981FC48934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:78:98:e5:5f:e8:a7:20:a5:de:65:77:01:
                    7e:06:a0:7b:6e:59:be:83:04:2d:55:61:37:31:de:
                    2f:68:24:47:72:cb:6b:cf:0a:48:2e:43:1c:76:72:
                    ee:f9:5e:bc:74:bf:a0:2f:87:89:4f:39:f0:35:81:
                    07:d5:77:c3:97:11:b6:66:a3:84:12:6c:8a:ed:4b:
                    6e:ce:9c:ce:62:33:94:9e:fa:2f:03:b0:ac:7b:e7:
                    8b:2f:e4:cd:a7:c6:82:a4:d1:e9:08:bf:30:e0:0e:
                    13:d4:25:30:4a:47:1a:f5:cf:d0:24:7a:26:4d:c2:
                    ce:83:92:ba:ff:b6:59:bd:60:a5:46:02:ac:83:a3:
                    76:39:a1:fe:a0:41:05:ed:42:f5:de:f9:8a:f4:57:
                    bc:18:7c:da:b5:c7:97:ee:ab:43:42:48:cf:31:c9:
                    b5:7e:13:f5:86:36:54:d9:83:8e:12:c5:01:8c:42:
                    f6:32:6e:62:9b:e3:b8:0e:f4:ae:da:57:b3:8f:82:
                    98:43:4e:18:40:f6:5b:67:3f:ff:f3:a4:4d:e0:14:
                    07:c9:17:f0:06:bb:54:9f:14:06:10:42:7d:05:84:
                    c6:24:a9:7e:b0:3a:60:39:f1:a8:c2:90:7a:b2:d4:
                    43:36:b1:43:23:c6:3d:34:e8:2a:89:62:8e:71:ae:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9E:EE:78:DD:04:80:05:B6:83:51:81:5F:C6:A9:98:1F:C4:89:34
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230352e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:3b:64:5f:3d:34:2b:b2:ba:64:e9:ed:8f:e6:e4:dd:bf:
         2c:32:ce:77:a8:a8:79:94:c0:72:cd:3d:25:68:7b:c7:9c:04:
         1f:b6:e1:07:35:8e:c1:1c:e6:03:74:a3:d6:38:4e:73:38:38:
         87:1d:a4:1c:6a:87:ef:56:bd:31:96:4d:52:aa:61:99:bb:4d:
         45:05:52:6d:ef:42:d7:11:33:3e:5d:cd:12:b6:ed:45:23:d4:
         09:ec:32:2f:5a:15:57:ad:99:14:35:49:75:2e:64:80:99:3a:
         79:f2:d8:ee:71:ed:f1:ca:e6:48:b0:97:39:dd:d2:90:67:5b:
         0d:f4:0f:dc:a1:85:94:8b:9d:92:44:46:0d:af:03:d6:fc:c3:
         83:2c:7c:31:8d:8a:c4:7a:76:b2:90:67:ee:aa:a5:5a:86:e1:
         ea:3f:3d:18:1c:bb:57:93:97:92:89:d9:ed:1d:39:b4:b2:83:
         22:1e:cb:13:a6:bb:0f:6d:7c:32:36:ed:e2:f1:61:d6:67:87:
         0f:da:2e:c4:1c:4e:b7:83:10:96:f8:39:0c:38:e8:f2:b7:11:
         f4:53:b4:1e:9d:3a:2c:4e:64:03:13:19:17:e5:22:bc:5d:f5:
         56:f4:a6:28:a0:a2:d1:a4:95:69:b7:e7:ca:98:9d:5f:48:b6:
         7a:48:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org