Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3139302e3138352e3130382e302f32322d3232203d3e203532333933.roa
File:                     3139302e3138352e3130382e302f32322d3232203d3e203532333933.roa (raw, json)
Hash identifier:          7dN6lMMmge0rOn55Qi8bUQjH6G6LxptTZoWo70Yu2bs=
Subject key identifier:   3A:B7:96:35:9F:15:AF:C8:90:12:8D:FC:E0:C6:B0:B0:D0:5A:0F:79
Certificate issuer:       /CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Certificate serial:       3118A47FE1DD4011F68B4D5815E04B4ABE280605
Authority key identifier: DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3139302e3138352e3130382e302f32322d3232203d3e203532333933.roa
Signing time:             Tue 05 Mar 2024 17:42:14 +0000
ROA not before:           Tue 05 Mar 2024 17:37:14 +0000
ROA not after:            Tue 04 Mar 2025 17:42:14 +0000
asID:                     52393
IP address blocks:        190.185.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:18:a4:7f:e1:dd:40:11:f6:8b:4d:58:15:e0:4b:4a:be:28:06:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
        Validity
            Not Before: Mar  5 17:37:14 2024 GMT
            Not After : Mar  4 17:42:14 2025 GMT
        Subject: CN=3AB796359F15AFC890128DFCE0C6B0B0D05A0F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:a5:c4:05:50:71:3a:c8:85:62:42:ea:61:
                    c5:d0:85:39:7f:7e:1c:04:8d:a4:1e:22:cd:6c:eb:
                    ea:41:65:1e:95:90:c5:e1:6c:d0:6e:97:8b:bd:a5:
                    58:5e:2c:68:47:b0:7d:bb:b6:2c:00:a9:8e:49:b3:
                    4b:30:23:f4:71:42:ce:c5:12:4a:4d:80:1f:2f:bb:
                    c8:39:b3:c2:c8:b2:61:89:d1:f9:93:04:0f:b8:1f:
                    f1:e1:4f:d0:b2:96:59:e8:2d:e4:68:ae:c4:9e:02:
                    ed:14:5c:6f:70:49:ab:2b:a0:bf:81:be:cc:d2:77:
                    62:d7:b0:5d:5f:dc:68:a9:92:52:07:27:43:3a:7e:
                    ff:bb:02:31:b8:a1:1c:be:4e:cb:9b:11:ee:c3:28:
                    6f:e7:0d:c0:5b:9d:f6:ba:15:6e:12:e9:64:46:5e:
                    c5:38:f6:c8:5b:17:f2:5c:46:1e:6c:ef:a1:bc:b1:
                    67:6a:b7:3d:ef:05:c9:61:52:fe:7c:56:24:06:e6:
                    29:54:7a:f0:81:a9:59:bb:af:6e:ad:98:23:48:fa:
                    bc:29:4a:da:43:93:e4:5e:18:d1:a4:1f:e7:b0:c9:
                    13:ea:d3:5f:fe:ef:6b:97:d4:35:e6:e1:11:53:1d:
                    57:88:36:1a:6a:4b:e6:ec:20:d8:e5:97:f5:eb:27:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:96:35:9F:15:AF:C8:90:12:8D:FC:E0:C6:B0:B0:D0:5A:0F:79
            X509v3 Authority Key Identifier:
                keyid:DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3139302e3138352e3130382e302f32322d3232203d3e203532333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:df:57:82:5c:04:05:ba:74:d6:52:e8:b8:94:ad:84:ca:
         f4:43:a0:97:83:29:77:4f:39:e3:74:fe:b2:4d:b7:e4:55:7c:
         da:01:b8:78:1b:55:fa:f0:c8:ff:f9:09:9d:e9:86:54:cc:88:
         e0:0b:ae:99:4c:ca:12:49:d7:20:7b:e8:71:0b:d8:a9:e5:b1:
         81:04:51:8d:36:58:b2:0e:b4:fb:b5:29:21:f4:0c:b4:91:6f:
         2f:a0:27:b3:86:35:77:ee:ed:eb:68:98:7a:4b:4a:aa:67:65:
         32:77:17:29:2f:24:e9:9a:98:c5:df:60:8e:3f:f5:2d:83:c2:
         26:4a:38:95:b7:44:2e:e1:da:20:99:5e:ff:49:ac:9d:7a:ae:
         1e:15:14:aa:d4:3d:1a:f9:13:f2:f2:a0:63:9d:83:61:d5:54:
         7f:51:5f:fc:29:04:95:42:f1:e5:05:f7:84:f1:b3:de:dd:a4:
         7d:53:ce:54:42:ef:1b:bc:c9:df:67:1c:a6:1a:48:0a:41:bc:
         2b:6e:14:65:74:1a:cb:f6:5d:4d:0f:88:91:d1:0e:49:4a:05:
         e0:71:3b:80:90:68:0a:11:a0:c4:b4:f1:65:76:97:58:69:37:
         ac:a0:88:b4:9c:e5:d5:f8:c0:20:b1:a5:17:4c:91:2c:27:f7:
         79:b9:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:02:31 2024 by rpki-client on console-fra.rpki-client.org