Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          ox1Z6DWQaRDCBSmR0m9bzz6jA+tfj8hEyO1cnSwcNv0=
Subject key identifier:   EE:1E:81:3D:1F:58:0A:50:07:CD:1F:4B:03:72:4B:50:B1:39:33:C5
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       28E4CD170975A0D7B3BEFF0BDF38CE6B36992027
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 05 Mar 2024 17:54:29 +0000
ROA not before:           Tue 05 Mar 2024 17:49:29 +0000
ROA not after:            Tue 04 Mar 2025 17:54:29 +0000
asID:                     262234
IP address blocks:        190.124.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:cd:17:09:75:a0:d7:b3:be:ff:0b:df:38:ce:6b:36:99:20:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Mar  5 17:49:29 2024 GMT
            Not After : Mar  4 17:54:29 2025 GMT
        Subject: CN=EE1E813D1F580A5007CD1F4B03724B50B13933C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:0e:d6:9d:f1:3c:73:7c:e0:71:34:b3:9e:
                    d0:9b:81:27:b9:33:12:32:7f:5d:21:e6:cc:26:59:
                    87:b1:86:95:05:da:3f:83:1f:3d:a8:92:94:11:70:
                    b8:bf:71:b4:de:43:21:0f:3b:27:0a:e7:cd:fd:d7:
                    dc:74:5d:2a:10:ca:8c:a8:34:17:d6:3a:d0:51:75:
                    74:1f:1d:6a:30:da:71:2e:28:fd:ba:d6:90:14:1f:
                    c3:5b:c2:a8:b1:3d:32:d0:9c:5d:ee:bd:da:a7:34:
                    bb:e4:51:2f:4e:9c:0e:63:04:0e:85:b3:44:25:54:
                    2e:cf:a8:3e:d1:fe:da:2b:27:eb:a8:80:a4:06:83:
                    27:95:b4:e3:11:e0:5c:95:d9:bf:de:4d:e2:9c:74:
                    69:c6:61:52:0c:e2:09:cf:50:f1:3c:b4:69:52:5a:
                    4a:f6:c1:df:56:6a:94:09:e1:55:98:d2:0f:94:cc:
                    d7:31:b6:ae:fd:d5:7b:2f:c4:1f:8f:4b:66:a5:ef:
                    b1:b7:14:58:ac:e1:6d:07:38:99:d8:0a:4f:64:e6:
                    e7:b1:7a:c1:42:89:53:b9:6a:4a:a2:3d:21:de:36:
                    c1:6d:9f:1f:79:f1:d7:01:39:c5:5c:07:f9:58:15:
                    60:9a:5a:8e:0f:31:41:b9:47:1f:e5:ae:31:46:9c:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:81:3D:1F:58:0A:50:07:CD:1F:4B:03:72:4B:50:B1:39:33:C5
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:69:77:34:67:a7:13:d4:c2:57:b7:17:0b:8d:de:32:f9:
         6c:f9:b5:80:b1:cc:77:d8:4a:fb:ae:fe:6e:84:e8:3e:cc:b0:
         ce:f3:30:41:f1:df:ab:41:ac:05:62:51:a6:bd:26:3c:82:c1:
         bb:fb:84:a7:21:c9:84:ae:ac:51:bb:c0:ed:06:dd:e6:bb:fd:
         ba:1b:70:8d:d4:2a:29:a1:06:f9:c8:9d:c5:76:d6:19:55:0d:
         60:82:69:95:56:0b:6a:03:f2:90:1b:d3:b0:3b:de:52:a8:8c:
         ff:a0:f3:ee:c4:6a:72:ce:f6:0f:ee:e4:7e:1d:b6:ac:b6:84:
         58:9c:02:63:cb:71:0f:d6:53:1f:78:2c:23:d8:94:e5:75:df:
         79:b6:0f:c0:e8:34:9d:09:a1:4e:c2:c6:96:57:bd:e0:cf:ad:
         ac:60:da:f8:ce:02:8d:e6:7c:82:22:d2:e6:c1:96:0b:15:45:
         06:97:62:36:b1:5e:f8:e2:c2:93:8b:d2:c0:6e:ee:bd:18:37:
         d0:95:41:fd:b2:05:a7:e1:a5:d9:82:81:ec:5b:4f:cf:fb:0d:
         db:b1:91:30:ce:78:34:d8:7d:bc:45:cd:ab:84:5c:7a:73:e0:
         71:4a:ed:d5:0a:f6:87:0a:66:43:97:12:72:eb:67:46:f9:e3:
         46:b1:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:03 2024 by rpki-client on console-ams.rpki-client.org