Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          ZDIa0aWAF5ZC7mT54seVUf9Mec8/C0FgVSpfmrE3VjM=
Subject key identifier:   51:99:14:C1:A6:43:8F:22:8B:D5:1F:2C:57:E4:E8:CD:C7:7F:E2:A7
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       157A7D36A3AB635CE2F99DFFD46C9894F7588B84
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     52330
IP address blocks:        190.184.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7a:7d:36:a3:ab:63:5c:e2:f9:9d:ff:d4:6c:98:94:f7:58:8b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=519914C1A6438F228BD51F2C57E4E8CDC77FE2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:61:29:c2:e6:41:f1:93:18:7a:f8:51:6b:
                    ef:6a:f2:03:71:a0:31:4e:dc:a2:0f:7c:97:53:08:
                    3c:dd:33:94:cc:76:5a:78:5e:23:a5:7c:7a:e5:b6:
                    c4:b7:e8:62:f1:69:13:c3:77:fd:11:78:92:7a:b0:
                    33:a5:d9:65:37:ea:b6:82:79:7a:e4:83:09:e9:8c:
                    f7:6e:3d:3a:b3:af:d7:90:70:0c:f2:b3:f9:01:a2:
                    38:d7:1f:5d:b7:4f:86:e3:e8:5a:7d:6b:70:1e:87:
                    cf:d2:c1:89:cb:14:a6:3f:db:3a:e3:89:d8:5a:e6:
                    60:33:57:df:fb:9b:d7:74:30:8f:83:0d:6d:f3:4c:
                    2b:8a:89:32:1d:b2:49:0a:9c:97:6d:27:90:e5:fb:
                    68:76:9c:4d:8c:d7:b6:40:48:95:50:61:2e:08:74:
                    0d:f0:88:3a:ba:93:10:8d:35:91:a2:b9:86:d9:48:
                    fe:25:63:31:7a:ff:a9:8c:13:5e:6d:77:a1:8d:1b:
                    a4:ab:9d:b5:a5:80:51:ee:6e:43:fb:e6:50:d9:99:
                    00:2e:c4:fc:6f:9e:88:29:e9:c0:4d:00:94:8b:ab:
                    70:32:72:fe:19:6a:f9:ba:bc:3b:10:76:dc:09:7f:
                    65:f9:33:35:66:b8:6f:fa:45:c5:2f:46:e9:af:7b:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:14:C1:A6:43:8F:22:8B:D5:1F:2C:57:E4:E8:CD:C7:7F:E2:A7
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:c8:8a:1d:27:ee:59:6d:76:12:0a:43:c8:6b:10:25:34:
         66:5a:73:a3:49:fc:d9:2c:9f:d1:64:c7:e8:40:19:d8:85:da:
         87:ed:29:73:31:b3:0c:cf:0f:2b:be:f5:55:8d:ce:5b:b4:09:
         b7:1f:f4:a4:88:c6:a0:b2:bc:63:ff:d8:b1:4e:3a:cc:10:6d:
         21:54:f6:ac:de:54:dc:5e:4a:3a:26:8d:8f:0c:6e:03:6d:61:
         52:c8:55:ac:7e:83:a9:ac:16:9b:2c:8d:ac:e4:65:04:55:70:
         9c:9d:ff:3d:f4:f0:26:16:d0:29:e8:ce:a7:d0:40:6b:4e:4f:
         cb:cb:ec:a3:df:80:60:6e:fc:92:d7:ba:96:cf:cb:c6:6d:12:
         91:cd:37:f8:0c:55:24:1c:c6:bc:1a:79:8a:1a:94:3a:c3:79:
         00:bc:d4:a3:9e:86:99:e0:83:32:32:ce:79:01:6d:ba:fa:15:
         2e:52:25:33:f2:2d:33:04:a9:ce:cb:ce:3e:7b:aa:6a:91:ff:
         f7:f8:a1:f1:73:c6:a8:b8:91:63:48:82:ec:6a:52:e3:cc:62:
         9d:01:69:ea:87:72:88:a7:81:9b:ce:0b:cd:b2:49:d3:7a:a4:
         73:b1:c7:6e:8d:97:fa:0a:d1:5f:69:3e:75:95:e1:f3:aa:7b:
         22:0d:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org