Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa
File:                     3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa (raw, json)
Hash identifier:          C1iFenD5lDCQLyJBDpZj9u/Fl40XzAIJdZVUqXpZd5w=
Subject key identifier:   2D:24:49:35:8B:9D:56:0F:1A:17:F4:61:D2:2C:94:A8:A6:ED:D4:54
Certificate issuer:       /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
Certificate serial:       5942D56FAC4AC366B3B6E872EAF907B94CD8BE1A
Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     271864
IP address blocks:        190.113.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:42:d5:6f:ac:4a:c3:66:b3:b6:e8:72:ea:f9:07:b9:4c:d8:be:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=2D2449358B9D560F1A17F461D22C94A8A6EDD454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fd:7a:43:22:ab:22:40:af:7f:04:be:c3:7d:
                    3a:08:ed:c4:14:c8:50:54:d0:7c:d3:5a:23:ee:22:
                    54:f0:c2:a3:63:09:0c:49:ff:a3:03:10:ae:5a:6c:
                    d1:ce:db:06:72:5d:8f:58:5f:a9:73:a7:ce:31:54:
                    14:31:37:3c:3a:48:19:22:f5:56:86:50:10:49:e2:
                    39:84:b1:1c:dc:b1:e9:a0:4d:a4:d7:6c:af:99:df:
                    74:84:49:a4:a7:92:9b:0a:fb:ef:af:9e:79:79:52:
                    23:56:43:5c:44:de:29:8f:77:a0:4a:be:51:bb:ed:
                    53:c0:84:ee:07:3b:b6:e5:83:52:52:a4:f7:11:fc:
                    e4:35:e1:c2:a2:aa:74:cd:7d:43:5b:46:ad:a2:67:
                    fc:3e:78:a4:36:7b:9f:9d:c8:1f:d5:3b:47:ef:de:
                    50:a6:80:aa:a6:b2:db:77:bb:5d:d2:ac:f0:2f:ac:
                    88:f3:55:d3:b0:5d:d0:95:c8:76:57:98:fe:20:88:
                    76:ce:b9:42:cf:44:96:a5:e4:af:46:6c:22:51:8a:
                    ab:ae:df:9d:23:f3:d4:99:76:ef:21:9c:38:61:f8:
                    c0:65:fe:82:66:05:63:72:81:62:51:f0:d7:4d:55:
                    67:d2:dc:78:d3:4b:db:5c:01:a2:0d:a4:c3:fb:4c:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:24:49:35:8B:9D:56:0F:1A:17:F4:61:D2:2C:94:A8:A6:ED:D4:54
            X509v3 Authority Key Identifier:
                keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:ae:db:4e:fb:04:be:21:53:33:d8:90:6b:15:2a:e3:f4:
         b6:d6:8a:9b:f1:d3:5e:39:52:5a:08:17:22:e3:7c:ee:05:b1:
         75:c2:9a:c2:ee:f7:9b:53:1e:61:99:51:09:2b:a4:e9:c9:4b:
         10:f2:55:21:d8:bb:6f:39:e8:84:3d:99:36:74:fa:b5:62:f2:
         df:0e:50:b9:1b:9c:57:a5:4a:87:86:88:c1:8e:93:13:49:91:
         72:72:51:c4:7c:b4:a1:0f:04:fc:9b:15:f9:6f:b8:b3:fb:12:
         b1:40:05:25:32:ca:40:fc:b6:5c:19:3b:68:f1:2c:76:92:d7:
         cb:18:22:64:03:ef:6f:b7:c7:20:cd:7e:6d:a6:2d:ee:1a:8c:
         41:1c:8e:79:6d:2a:e6:18:3b:d1:dc:11:5d:5f:ce:41:62:08:
         f8:7b:d9:3a:d5:48:6f:db:44:b3:cd:b3:78:c4:3d:9b:4e:96:
         7d:20:b9:45:e1:9f:6e:cf:5a:1e:e8:79:33:4b:33:c7:44:0c:
         5d:c8:ac:15:f8:3d:0d:c3:02:90:0f:32:ba:3a:0d:b9:67:fc:
         d7:ea:bf:47:84:67:f9:0f:49:80:17:ad:0c:f8:0a:d3:6e:f9:
         91:5b:89:1c:e5:5a:39:33:2d:15:28:5b:28:4e:55:2d:c0:59:
         51:0e:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org