Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630373831.roa
File:                     3139302e3132312e3231322e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier:          N3+89EbWJ42tD8e29i5iob0Ca3bM9e2npKG0nbvgh6A=
Subject key identifier:   6C:77:E9:F7:92:38:CC:58:67:C6:AB:E9:53:10:71:F6:31:F0:D4:B6
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       35EE3DFDB56071C925D552C09C8E702450D6A17F
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630373831.roa
Signing time:             Tue 05 Mar 2024 18:04:23 +0000
ROA not before:           Tue 05 Mar 2024 17:59:23 +0000
ROA not after:            Tue 04 Mar 2025 18:04:23 +0000
asID:                     60781
IP address blocks:        190.121.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:3d:fd:b5:60:71:c9:25:d5:52:c0:9c:8e:70:24:50:d6:a1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Mar  5 17:59:23 2024 GMT
            Not After : Mar  4 18:04:23 2025 GMT
        Subject: CN=6C77E9F79238CC5867C6ABE9531071F631F0D4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:20:6d:74:c4:8b:3a:f3:a2:f2:9f:c8:36:
                    f2:7b:2f:c8:36:42:31:b2:76:28:ea:f1:4e:57:31:
                    68:94:62:ab:f0:17:da:51:d6:5b:0a:fd:fc:b2:61:
                    bd:56:02:2b:de:9a:dc:16:c7:6c:84:d2:4f:4b:2d:
                    ea:91:86:4a:07:be:63:08:ba:a5:d9:84:3e:11:92:
                    7f:07:b3:fc:61:2f:13:74:59:45:77:6d:21:ae:79:
                    e8:3f:23:d3:13:b7:c6:8b:8e:19:96:a3:9d:9a:0b:
                    c3:0c:cf:36:d7:47:65:db:4d:be:f0:ca:a0:f4:82:
                    ab:f5:71:65:0f:3a:67:d8:58:ee:7d:02:56:7c:cc:
                    3a:9c:00:5c:5f:62:5e:f0:67:5a:8d:a3:28:69:8e:
                    03:55:75:09:34:85:e0:7c:e5:f1:da:54:21:fe:c9:
                    3f:9a:9c:92:f1:31:a4:62:2a:fc:1d:9b:ed:6d:9a:
                    2c:da:2d:ba:78:2a:71:21:5d:ed:11:36:9c:55:e9:
                    0b:fe:2e:25:df:d1:37:04:e2:05:f8:d5:17:84:ad:
                    91:1d:ad:54:29:8b:d7:c8:37:ff:aa:ea:a3:fe:2d:
                    7f:87:0c:b0:a6:c4:d3:16:fa:a6:34:b4:cc:6e:6f:
                    34:46:2e:8b:4a:86:a3:3f:14:2c:65:d5:ab:d8:85:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:E9:F7:92:38:CC:58:67:C6:AB:E9:53:10:71:F6:31:F0:D4:B6
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231322e302f32342d3234203d3e203630373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:83:79:66:5c:f6:81:8e:3f:b2:57:75:a7:51:38:cd:6d:32:
         58:0d:92:40:56:64:f5:17:a9:87:0c:34:dd:9a:2b:c7:e4:c9:
         9f:71:a6:32:29:7f:57:ef:9c:6b:70:c4:82:02:2b:98:1e:eb:
         d3:ea:1d:b0:c0:74:09:45:0c:3c:e1:7a:37:54:d9:9b:a0:c4:
         bc:3d:a0:8b:79:a6:e1:11:3e:03:ad:85:c9:c4:78:0b:57:97:
         fd:4e:c3:67:bc:4e:aa:a9:46:a6:6e:07:8c:e9:e7:2f:5a:21:
         b9:ea:b8:c3:cd:4c:bf:3d:d2:3c:76:71:0f:8b:5c:47:cd:53:
         04:62:2a:eb:74:b8:0a:40:9f:b6:7c:10:82:21:dc:55:96:b4:
         3d:ed:7e:84:02:83:f0:3a:a0:71:6d:d1:76:de:6f:87:f0:9d:
         28:c7:d9:7a:d4:4f:4e:8b:4b:2c:c7:87:48:64:08:6a:29:cf:
         a4:9d:76:35:32:cb:13:5e:2d:51:c7:d6:c4:27:06:3b:49:6b:
         fa:77:9f:0e:8b:82:e9:55:8f:ff:e9:01:cc:c7:c8:e9:18:73:
         77:5c:89:9b:e6:97:43:fa:9b:d2:38:99:73:05:72:cb:d2:d1:
         b1:d0:9a:c6:78:6c:c8:96:1a:19:83:bb:96:a1:ab:fe:ec:bf:
         5d:f9:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:28 2024 by rpki-client on console-ams.rpki-client.org