Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
File:                     3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa (raw, json)
Hash identifier:          /BieShxkN4PrFWE+vkre5kIKgFAVrXOcgqrvzLp7pEI=
Subject key identifier:   FD:39:8F:6B:65:9B:68:70:FD:B3:03:41:D4:63:54:F8:08:60:B7:BE
Certificate issuer:       /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Certificate serial:       5CA75BAF67FED25E7D9D686E91CE371C4E9E1254
Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
Signing time:             Tue 05 Mar 2024 17:59:22 +0000
ROA not before:           Tue 05 Mar 2024 17:54:22 +0000
ROA not after:            Tue 04 Mar 2025 17:59:22 +0000
asID:                     263246
IP address blocks:        190.108.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:5b:af:67:fe:d2:5e:7d:9d:68:6e:91:ce:37:1c:4e:9e:12:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
        Validity
            Not Before: Mar  5 17:54:22 2024 GMT
            Not After : Mar  4 17:59:22 2025 GMT
        Subject: CN=FD398F6B659B6870FDB30341D46354F80860B7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:6d:97:33:15:74:d9:90:6c:47:06:06:a3:
                    80:82:d7:7d:ee:e9:45:e0:bb:5c:e0:c1:5b:b6:2b:
                    2c:83:5f:cd:3f:31:a0:37:93:cd:8f:c3:c2:17:13:
                    32:fc:b8:11:29:dd:97:66:ec:20:19:f9:ab:51:02:
                    04:dd:30:c5:71:f6:70:5f:23:6f:64:5b:8b:83:44:
                    f2:0d:bd:79:8f:3e:ff:7f:bd:15:36:fa:8a:bb:73:
                    21:2a:31:02:52:3c:b8:0f:1a:4e:d9:62:84:d1:80:
                    ac:3b:7a:ae:8a:62:e8:24:70:23:4c:f5:f9:5b:63:
                    1a:74:23:6a:18:cb:fe:7e:c9:09:14:76:fc:e4:d6:
                    c3:ca:f7:0c:a0:6a:83:71:5d:df:55:97:9f:a9:1f:
                    86:9a:d2:14:76:b5:2f:3c:92:fc:a5:1b:4c:66:86:
                    57:ca:74:84:94:a3:e5:f4:82:07:16:e4:d2:6f:c0:
                    4c:77:35:4c:61:f8:bc:c2:79:df:e4:92:ee:dd:f7:
                    92:3f:77:b9:76:96:a6:5c:84:79:7d:f8:d7:1e:ee:
                    c2:5c:6d:cb:0d:f4:d2:4c:e3:6c:52:14:7d:16:9a:
                    03:78:29:13:8d:d0:ab:24:8f:2d:53:fb:d0:df:18:
                    07:57:d4:06:86:97:f5:2c:17:1c:19:15:62:7b:e7:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:39:8F:6B:65:9B:68:70:FD:B3:03:41:D4:63:54:F8:08:60:B7:BE
            X509v3 Authority Key Identifier:
                keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:ff:bb:0f:f5:da:f5:3b:3a:bf:83:3b:c0:46:fa:c6:ef:
         d6:79:a4:7b:21:96:9a:91:98:ce:70:85:fb:cd:9a:e3:23:90:
         78:07:b3:1c:fc:3c:e3:69:d5:95:67:73:80:28:15:29:ae:f5:
         58:e7:7d:46:7e:8d:53:c8:9c:59:00:eb:bc:79:76:56:f9:c0:
         0f:c5:e2:af:52:eb:1a:b2:90:3c:c0:26:96:24:a9:9a:af:e7:
         4b:e9:a8:0b:1f:c5:66:16:9d:4e:e4:f7:2b:e3:07:1a:9c:ec:
         43:3c:cc:44:84:d7:92:5d:13:28:0d:c7:62:58:b9:16:b4:fc:
         7e:70:f4:45:d8:0b:70:63:87:43:c6:2a:b1:73:1c:ab:56:b7:
         f5:89:e0:54:84:c5:f1:d6:d5:6d:44:2f:93:08:44:34:89:59:
         1b:19:55:14:89:ec:d1:10:20:33:f5:8a:44:65:e1:46:30:7a:
         84:07:8f:11:ee:78:eb:86:35:c4:27:ad:c5:ac:be:39:af:26:
         dd:08:b8:98:61:e2:cb:57:13:4f:19:83:e7:3a:6b:88:92:cb:
         9c:63:60:d6:ee:cc:02:bf:a8:d1:73:c8:84:0c:6c:4b:ab:36:
         36:e4:d7:9a:cd:f3:29:94:17:40:3f:d7:7b:bf:bf:f2:e7:fa:
         ee:c9:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:46 2024 by rpki-client on console-fra.rpki-client.org