Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          LN7MmhqFmWWhDkcXEFszsWyqM9BUj3UAHwE/NYoXPEU=
Subject key identifier:   70:70:37:E4:F3:06:3B:DE:CE:0B:A3:C4:2B:42:B4:1E:7B:5C:4F:3B
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       290C9A6DF9EBA5D56A280D469CB635192136CD99
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:56 +0000
ROA not before:           Tue 05 Mar 2024 17:42:56 +0000
ROA not after:            Tue 04 Mar 2025 17:47:56 +0000
asID:                     262237
IP address blocks:        190.196.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0c:9a:6d:f9:eb:a5:d5:6a:28:0d:46:9c:b6:35:19:21:36:cd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:56 2024 GMT
            Not After : Mar  4 17:47:56 2025 GMT
        Subject: CN=707037E4F3063BDECE0BA3C42B42B41E7B5C4F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:c2:a7:cc:9e:9d:1a:de:67:6e:b3:55:a9:
                    86:1b:dd:3b:9f:88:98:2a:7e:f3:24:95:95:cc:5c:
                    7e:a7:41:c3:27:f8:06:66:40:f3:ef:c1:c2:88:f5:
                    e1:c9:7c:22:d0:24:b8:26:c9:09:00:55:f6:73:a4:
                    fb:18:cb:40:9c:d4:e9:3c:0d:a8:83:86:f7:77:5d:
                    73:c6:a7:55:8e:92:64:16:9d:55:1e:81:80:6b:bb:
                    ac:5a:9e:74:1b:eb:57:18:41:ae:59:19:5a:3c:59:
                    29:25:1b:dc:37:9f:36:c2:e1:f5:30:ed:d8:d7:91:
                    d0:63:e7:cb:07:4f:f7:23:0b:9a:91:e7:6b:ea:f2:
                    2d:92:3b:75:7f:8c:24:5f:6a:b1:0a:45:19:00:0a:
                    07:56:56:c8:39:71:28:61:52:80:af:44:80:32:e0:
                    88:96:3d:94:16:70:ea:d6:23:a8:fc:8b:49:f0:4a:
                    47:bf:9c:61:b4:2e:40:98:47:66:b3:44:42:19:0b:
                    24:bb:b0:ea:32:39:b3:6a:da:ef:a7:30:28:5b:52:
                    bf:d9:68:50:69:1d:3a:f3:e1:79:77:d0:33:2b:d1:
                    9d:fa:a7:84:7d:1e:73:da:ee:b4:55:78:66:7e:b6:
                    9c:fa:fd:a3:1c:c4:62:58:8a:0e:51:22:94:b2:48:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:70:37:E4:F3:06:3B:DE:CE:0B:A3:C4:2B:42:B4:1E:7B:5C:4F:3B
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3231342e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:78:6d:b9:93:26:d2:85:2b:ac:11:40:02:50:ff:8d:97:
         61:e7:fc:05:86:36:93:b1:95:8c:81:1f:74:3d:80:f3:eb:ee:
         0f:35:74:6f:c4:28:33:37:90:9d:cb:54:53:26:f0:3d:6e:07:
         95:46:10:56:aa:aa:49:b5:b9:96:21:41:eb:8d:a5:09:e3:22:
         48:27:de:57:59:8b:3f:3b:3d:53:6a:f7:6b:83:da:d0:f4:7a:
         6a:d2:93:f1:c7:b3:44:b0:39:7a:a3:83:fa:49:4f:7f:07:99:
         35:7d:7a:90:e3:91:fb:aa:9e:92:49:35:ed:23:46:7f:69:c1:
         b1:83:5e:90:a2:69:63:9c:4d:d3:4a:56:f3:2c:c2:e9:4a:f4:
         d2:e5:fe:ce:d5:87:14:42:b6:c7:7c:93:80:e8:1a:05:7f:fc:
         8a:f9:42:6d:b0:27:a2:3f:33:e9:bd:b6:32:14:50:3f:0f:3b:
         5c:98:05:10:86:92:cb:4e:7c:3b:22:e4:0b:5e:78:8e:59:45:
         f8:e4:91:4f:d1:f0:76:1c:77:39:1c:0b:2f:77:02:2c:8e:55:
         75:53:b7:18:22:f6:8e:de:e4:55:2d:71:90:8e:51:63:b7:62:
         99:aa:64:54:fc:38:98:d3:68:82:97:8d:5c:04:cf:be:38:a9:
         42:91:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org