Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa
File:                     3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          1TWZt3HszcawMG6HPG8XOMm0zPPqFTUF8V3BzE+WgjM=
Subject key identifier:   92:E4:2D:BF:10:DD:C3:8F:E6:08:CC:42:EC:0A:01:C1:34:98:E2:E9
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       6C8496D6EF6594A792708D13944B76373B1545BD
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa
Signing time:             Tue 05 Mar 2024 18:04:23 +0000
ROA not before:           Tue 05 Mar 2024 17:59:23 +0000
ROA not after:            Tue 04 Mar 2025 18:04:23 +0000
asID:                     13213
IP address blocks:        190.121.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:84:96:d6:ef:65:94:a7:92:70:8d:13:94:4b:76:37:3b:15:45:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Mar  5 17:59:23 2024 GMT
            Not After : Mar  4 18:04:23 2025 GMT
        Subject: CN=92E42DBF10DDC38FE608CC42EC0A01C13498E2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:97:6d:a7:f4:3d:a6:da:3e:02:24:51:82:
                    f6:4b:7c:b2:46:21:84:bc:cb:dd:7f:ce:2e:10:15:
                    e0:90:85:10:eb:ea:ed:7b:78:d8:dc:0e:1a:34:1a:
                    8e:fb:86:16:41:3e:11:c2:eb:b9:b8:0a:f3:aa:ec:
                    38:cb:e6:27:36:e7:b3:af:e4:1e:27:a6:7d:a6:89:
                    4c:c3:56:5a:b5:a4:8a:6d:8b:a5:2f:d0:e7:cf:c1:
                    83:41:89:34:0e:de:e5:f0:51:a0:8a:ce:b1:b5:3e:
                    89:8a:d4:b8:1d:a2:99:28:57:cf:b5:68:2e:b4:a3:
                    d8:b3:90:2e:3a:c0:0a:01:d3:47:f6:47:34:d5:43:
                    d3:d2:17:ca:40:89:42:11:4f:f8:6a:f9:be:54:21:
                    88:a6:c4:53:c3:42:b4:81:82:2f:a5:dd:3a:a0:48:
                    71:94:b8:b6:37:62:80:27:09:4b:bf:a3:e1:ab:3d:
                    85:e2:5e:44:e5:23:93:bd:fc:3e:8b:bf:96:71:a9:
                    98:54:ef:07:21:25:54:02:79:62:51:4c:a3:4d:88:
                    37:c5:eb:11:d3:d2:3e:04:0a:84:f2:b1:f8:69:e3:
                    13:03:12:69:2c:02:8d:e1:e5:bf:71:b5:fb:8d:33:
                    85:67:43:d3:b4:50:d7:f0:24:de:57:80:d7:2e:e0:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E4:2D:BF:10:DD:C3:8F:E6:08:CC:42:EC:0A:01:C1:34:98:E2:E9
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231302e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:47:60:e3:ab:1d:50:48:18:00:54:ed:c9:a4:66:b7:34:
         cb:ea:5b:47:51:6a:76:5f:f1:55:a4:68:33:bf:f5:8a:3a:08:
         6a:59:26:2d:ab:d6:da:7c:9d:0e:03:ce:83:eb:2b:99:d7:b4:
         b0:1e:5a:89:bf:1c:8b:d9:a9:85:74:26:80:2f:71:48:48:c1:
         48:f7:cf:1a:57:c3:24:c8:0e:97:69:a9:ff:7d:24:3d:35:30:
         c5:96:fe:7d:4c:17:d5:5f:64:e0:0e:5b:4e:5b:ca:1d:c9:94:
         4d:75:cc:0f:6e:4e:21:27:1b:fd:05:4d:26:3c:28:44:bb:d2:
         cc:2e:9f:ba:23:a8:25:63:53:53:4f:8f:be:25:d9:0a:0b:0c:
         4c:d2:15:cc:9a:96:d3:76:29:94:9e:f7:7a:6d:53:4e:e9:40:
         c1:85:1a:bd:34:2e:13:67:38:5b:c9:8f:e5:bf:fd:6c:70:97:
         9d:f8:8f:0d:70:b4:6f:9b:8a:66:07:84:d1:4e:2e:b2:f5:c1:
         c9:41:c2:3e:7e:fd:cb:c8:02:67:91:f6:81:f5:b1:4c:36:49:
         00:28:5d:f9:ce:91:d9:f5:38:d1:3a:1f:ee:73:83:84:62:00:
         c1:32:a3:92:91:a2:72:04:f3:77:c3:1d:47:57:cd:32:54:07:
         e9:90:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org