Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234342e302f32322d3232203d3e203133333335.roa
File:                     3139302e39332e3234342e302f32322d3232203d3e203133333335.roa (raw, json)
Hash identifier:          l1G8/XiuK3hNf/QVwHo7vC05dpCCGETdRfKM5VhcCfE=
Subject key identifier:   04:21:F1:FB:35:F1:98:13:A5:03:BA:61:A4:58:57:E0:7F:63:8B:32
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       6FF4A5B82D5F5801C7223BB5759A946899669A72
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234342e302f32322d3232203d3e203133333335.roa
Signing time:             Tue 05 Mar 2024 18:17:53 +0000
ROA not before:           Tue 05 Mar 2024 18:12:53 +0000
ROA not after:            Tue 04 Mar 2025 18:17:53 +0000
asID:                     13335
IP address blocks:        190.93.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f4:a5:b8:2d:5f:58:01:c7:22:3b:b5:75:9a:94:68:99:66:9a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar  5 18:12:53 2024 GMT
            Not After : Mar  4 18:17:53 2025 GMT
        Subject: CN=0421F1FB35F19813A503BA61A45857E07F638B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:75:d4:fd:cf:a8:bb:77:2e:d2:8b:63:83:
                    10:f5:4c:08:38:6a:6f:af:25:08:c0:45:43:6f:38:
                    bd:2a:37:d8:80:c5:e5:ee:c1:5d:a0:08:c4:11:0a:
                    98:eb:eb:ec:4c:3c:cd:ff:90:ab:11:cc:44:8a:e8:
                    1c:be:e5:35:99:41:53:ce:3b:15:50:47:29:e5:b7:
                    d4:5d:1a:19:c3:d9:14:de:ca:a8:ac:f1:e9:6b:6b:
                    a8:dd:84:21:04:be:1d:b2:cc:d7:a2:47:dc:ee:16:
                    a8:e3:40:db:21:c9:20:8a:99:e0:ad:93:c1:8c:5e:
                    ef:25:3e:41:4f:46:36:b1:9a:af:c7:ca:72:ba:dc:
                    07:2f:7e:0a:e0:c6:c9:ac:0e:09:12:f4:37:ba:bf:
                    46:9a:63:86:8f:cd:69:e4:f4:06:61:19:40:ba:d0:
                    3d:7d:02:d5:64:d7:7c:14:aa:4f:77:c1:76:c0:0a:
                    d2:45:ff:ed:2b:a8:50:ce:c6:e6:fb:b2:8d:93:7c:
                    4e:ea:53:f0:c6:8c:f4:9e:1e:47:df:d4:df:72:26:
                    c6:41:9a:d4:15:0e:c5:4e:73:74:96:61:f9:22:ec:
                    de:36:2d:96:42:69:53:ee:d3:9d:7f:fc:a6:6c:f0:
                    94:e8:3e:d1:0f:c6:8e:a0:93:88:6c:86:c8:ed:6f:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:F1:FB:35:F1:98:13:A5:03:BA:61:A4:58:57:E0:7F:63:8B:32
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234342e302f32322d3232203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:44:06:b2:51:e3:ab:76:d3:41:98:90:a9:81:b7:64:95:
         2e:be:27:1d:97:a2:c8:63:63:3a:9b:dc:2e:d8:f1:f6:1f:0b:
         01:f9:a8:ff:31:e2:fc:7e:b9:2a:62:b9:3a:dd:43:d6:d2:66:
         8d:6a:57:68:5b:17:50:ca:63:e0:87:ea:94:c0:5e:ee:5c:58:
         25:39:e3:99:c4:26:db:25:2c:6a:94:41:1a:84:90:55:85:7a:
         cc:14:8b:c6:cf:71:f2:d8:67:2d:83:41:ff:b6:cb:40:dc:a2:
         b9:26:eb:d0:0f:72:d8:a7:9d:5f:3c:2f:88:2b:d5:c0:13:89:
         3a:1a:c3:25:64:f8:d2:a6:17:91:8b:16:1b:ce:12:e1:ee:af:
         02:39:dc:95:b8:c2:19:9e:72:bf:4d:14:51:be:84:5b:37:64:
         a7:94:23:50:b1:56:79:53:38:cf:45:c7:bb:8f:44:a7:b8:27:
         0f:9d:e0:3b:f2:ce:1e:7f:ef:00:93:97:45:76:75:77:bd:21:
         36:e5:85:7d:c6:09:ca:75:13:a8:7f:92:15:03:49:ba:53:22:
         68:b2:24:a3:7b:5b:39:bf:76:4b:f4:8f:2c:84:2b:b6:16:9a:
         5d:18:15:49:15:e5:aa:81:76:85:6e:22:5e:8d:ad:fb:6a:df:
         7f:25:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:35:50 2024 by rpki-client on console-fra.rpki-client.org