Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          OEqT6mRvze6AMJWfM5wPz4bkwonDetlNi3LSUdD0KAo=
Subject key identifier:   2F:6E:E5:DA:31:53:B2:35:25:34:8C:BC:EA:7A:D2:75:DC:4B:21:DC
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       7783792AC7706167DE5DA2D4A208BC2AB15ABEB0
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 05 Mar 2024 17:54:26 +0000
ROA not before:           Tue 05 Mar 2024 17:49:26 +0000
ROA not after:            Tue 04 Mar 2025 17:54:26 +0000
asID:                     262234
IP address blocks:        190.185.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:83:79:2a:c7:70:61:67:de:5d:a2:d4:a2:08:bc:2a:b1:5a:be:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Mar  5 17:49:26 2024 GMT
            Not After : Mar  4 17:54:26 2025 GMT
        Subject: CN=2F6EE5DA3153B23525348CBCEA7AD275DC4B21DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:5c:61:ef:e4:1d:94:fc:ba:90:e3:cb:e9:
                    25:bb:c3:4f:a5:4b:df:1b:00:5c:c3:dc:a3:e6:65:
                    56:f3:4b:a7:81:08:08:5c:6f:12:a2:f6:32:2a:fa:
                    13:51:f4:35:09:24:00:ab:6e:c1:5a:d0:91:8d:90:
                    56:aa:73:d1:d3:d8:cc:31:c4:75:fd:55:85:55:49:
                    36:9c:51:e2:26:d3:64:4a:ab:12:c1:60:38:cb:bb:
                    b5:ce:91:02:4d:1a:8f:c0:d5:98:f0:5f:76:23:dd:
                    ba:7c:28:24:22:b5:80:c5:3d:b0:fc:10:c1:6d:0d:
                    d0:a0:4c:7b:43:21:c1:a7:27:12:c6:df:68:2a:98:
                    f4:77:9e:54:e6:cf:d9:8a:2d:fa:c7:77:93:4d:f7:
                    1e:68:b6:33:01:34:19:8f:e7:af:fc:a0:7d:2b:b3:
                    00:fc:b6:5c:8d:7f:ec:b5:66:94:1d:36:ce:72:db:
                    9f:88:7b:d6:a2:f6:68:c3:10:f1:08:0d:22:4a:bd:
                    3a:35:fa:f8:4a:45:56:a2:4a:8b:f1:b8:e5:f6:8e:
                    4d:ba:66:4d:b3:09:71:65:43:52:27:3f:57:d9:84:
                    4a:0a:3d:01:a1:5e:7b:72:32:1d:87:57:62:2c:cd:
                    4f:ed:21:6f:df:21:a4:6e:6e:43:4a:9e:e4:67:d0:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:E5:DA:31:53:B2:35:25:34:8C:BC:EA:7A:D2:75:DC:4B:21:DC
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:12:99:67:05:2d:ef:ed:19:74:2f:cb:d6:33:31:e0:0a:
         ed:a3:79:d9:43:80:97:42:fd:d7:95:89:ea:ef:ec:0e:ec:64:
         7a:42:2c:0b:1c:0c:d3:e8:f0:86:9e:60:60:8d:9f:5f:1d:b4:
         84:98:8b:29:c0:ec:02:21:b6:5c:4e:29:b5:f9:46:8a:67:16:
         56:0e:3b:cc:26:b8:35:a8:39:4b:d8:33:1c:4c:f9:63:85:93:
         90:55:66:f4:94:38:b3:ca:a8:b3:a3:fd:76:de:ba:93:ed:f4:
         d3:55:d9:9f:c6:b5:6b:b2:db:40:e7:67:9e:ea:15:50:4e:bb:
         70:d3:81:10:f2:55:a6:28:e8:88:60:6f:e6:10:90:dd:63:6c:
         e2:66:04:c5:c1:42:27:af:51:b9:62:f3:75:38:e0:7a:29:f7:
         5e:ea:53:a1:c3:73:3d:ee:df:a1:fd:fa:05:07:25:59:ed:1d:
         be:2b:9a:57:b6:e6:ef:a5:99:c8:98:47:eb:9a:35:bd:a2:7c:
         13:ed:a7:1f:6a:cb:68:60:f6:5f:96:49:2c:93:34:d8:2a:90:
         17:07:f4:3b:b0:fd:4c:bf:9f:6c:ca:d6:30:9e:a3:43:c4:7f:
         f1:88:89:ab:ea:6b:9f:b8:b3:cd:b1:1a:32:ea:47:cf:85:40:
         e1:84:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org