Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3232312e302f32342d3234203d3e20323632323337.roa
File:                     3139302e3139362e3232312e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          Qy0DDh1RSix0cU+v7r10RlkHGz7t6SW7V5p4uYY1u7g=
Subject key identifier:   EF:7D:E1:00:B9:6F:A7:E1:51:49:0B:0D:0A:33:8B:90:24:24:DE:13
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       385BA2C11780B37B981CA0E5AECAC07A03846CD8
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3232312e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:55 +0000
ROA not before:           Tue 05 Mar 2024 17:42:55 +0000
ROA not after:            Tue 04 Mar 2025 17:47:55 +0000
asID:                     262237
IP address blocks:        190.196.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5b:a2:c1:17:80:b3:7b:98:1c:a0:e5:ae:ca:c0:7a:03:84:6c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:55 2024 GMT
            Not After : Mar  4 17:47:55 2025 GMT
        Subject: CN=EF7DE100B96FA7E151490B0D0A338B902424DE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:ad:f2:b0:8b:11:a7:32:61:17:7b:4f:b5:
                    d4:83:5b:03:bf:94:79:e8:f7:c7:11:f1:65:c3:dd:
                    c7:b9:e1:0b:d7:28:68:f1:7e:5b:b2:6e:1b:fa:b6:
                    ab:3a:a6:86:44:a1:15:6f:8c:70:7e:d5:b3:21:ba:
                    ff:fb:aa:7a:ea:4c:86:9d:88:11:2d:c0:c9:31:8f:
                    5f:05:6b:83:ea:00:46:b8:0b:21:bc:cd:a5:37:0d:
                    82:16:92:1f:48:22:72:fa:21:0c:40:2d:d2:77:93:
                    43:5b:c9:2f:7f:4d:56:b8:58:9c:30:a0:73:7e:f2:
                    5f:fd:a6:6f:10:7d:14:fa:03:66:cd:20:8a:bf:b2:
                    e3:ce:5c:b2:1b:a8:40:b7:84:0a:4e:b0:d2:9a:29:
                    9b:06:92:d4:53:5e:dc:da:02:89:e9:71:a3:cc:e4:
                    e2:3c:f5:4c:12:a8:a9:e8:7a:cb:ed:24:c4:00:b1:
                    63:38:4c:cf:26:ea:d7:41:36:86:d0:84:7c:ba:8b:
                    a2:a4:92:b5:be:2c:8b:11:c8:bf:21:f9:20:aa:3f:
                    83:15:2f:e3:79:be:d7:41:e2:f1:7f:b4:97:9e:b1:
                    91:d5:69:04:a5:e4:6e:f3:06:ee:d1:e9:74:27:39:
                    d5:0a:d1:8d:e7:6b:7b:d7:64:b6:b8:54:bb:78:ba:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:E1:00:B9:6F:A7:E1:51:49:0B:0D:0A:33:8B:90:24:24:DE:13
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3139302e3139362e3232312e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:a9:9a:c7:6c:86:2d:f8:c9:60:e1:5f:ab:4a:16:bc:94:
         ff:da:f3:0b:72:39:f3:19:80:f8:b7:30:ff:dc:1e:be:67:f5:
         6d:fb:f0:56:64:d7:02:ac:6b:9f:bf:2b:ee:53:b0:5c:a5:98:
         40:0d:54:c0:e2:de:78:e8:52:3d:9f:50:fb:a0:aa:ea:48:d5:
         cd:eb:9b:aa:da:57:ac:0b:71:02:7d:5d:fe:b5:77:b8:38:f6:
         1b:53:c3:cd:ee:f6:c8:af:f7:e0:2a:94:77:4a:d1:9f:5b:40:
         70:16:29:5f:aa:2e:ba:5a:c8:56:20:45:ec:9d:76:c3:81:ae:
         70:48:73:b1:b5:38:c3:01:cb:37:28:4d:d4:97:06:05:40:be:
         0b:25:02:8b:65:07:37:1a:2f:b0:a1:7f:0a:c4:d6:c9:10:17:
         1f:b3:3d:25:4c:09:20:ce:bd:c3:6d:ba:ac:04:b9:09:75:e0:
         45:0d:9c:b6:8a:13:79:70:86:53:5d:48:06:9f:ba:e8:2b:2b:
         00:e5:ac:45:eb:63:c9:55:a1:51:5a:0d:77:12:c8:a8:00:49:
         26:8b:15:65:07:40:5f:bc:20:e8:36:47:f3:00:ba:7c:72:47:
         6d:e9:34:25:d4:c3:48:93:ca:ab:7f:6b:62:c4:ad:04:1b:4d:
         65:9b:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org