Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139362e302f32322d3234203d3e203532323533.roa
File:                     3139302e3130382e3139362e302f32322d3234203d3e203532323533.roa (raw, json)
Hash identifier:          4EVNkW6HqZcYl2LfKlnon6jghNeYonS/TtrlljIvdLM=
Subject key identifier:   25:94:B3:05:6E:83:03:EC:03:45:E6:51:91:39:4C:01:E7:7D:0F:A4
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       1939DF15388226A652A549B7A634C6D561381665
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139362e302f32322d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:35 +0000
ROA not before:           Tue 05 Mar 2024 18:13:35 +0000
ROA not after:            Tue 04 Mar 2025 18:18:35 +0000
asID:                     52253
IP address blocks:        190.108.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:39:df:15:38:82:26:a6:52:a5:49:b7:a6:34:c6:d5:61:38:16:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:35 2024 GMT
            Not After : Mar  4 18:18:35 2025 GMT
        Subject: CN=2594B3056E8303EC0345E65191394C01E77D0FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:e3:aa:a6:53:fe:0e:06:84:54:4f:df:ea:
                    52:81:f1:bd:cc:00:90:ec:f9:88:e3:2b:ec:24:8e:
                    01:c8:a9:bd:f6:94:19:22:dc:1a:20:d7:9c:3c:15:
                    bc:4b:d2:81:a2:77:8f:01:d0:24:dd:a2:47:c0:e3:
                    bd:96:63:63:82:63:60:54:65:2e:50:da:9a:9c:a8:
                    43:19:e6:a3:c0:cc:e9:74:b2:47:55:64:18:21:71:
                    d7:98:8f:a0:07:fe:9e:b2:f7:c0:a5:f1:b8:f3:24:
                    15:21:d1:f9:2f:3b:ff:0c:56:30:5f:2f:62:df:0a:
                    10:bd:71:54:55:2d:5a:7f:f1:84:95:14:c0:98:a4:
                    bb:c7:29:b0:7a:68:74:bf:15:87:ae:74:36:6c:2c:
                    8b:b5:3c:2d:3a:b6:98:06:15:05:2d:19:fc:e5:23:
                    d1:96:19:11:b7:a5:9c:e5:fb:a3:61:72:2d:53:58:
                    d1:7c:ea:1f:b4:e9:fb:9d:84:60:35:ba:d7:ef:03:
                    7f:d2:c5:b9:c8:60:a3:d4:db:61:c3:5b:50:e2:2c:
                    4f:31:3c:96:1b:32:6f:19:fc:87:c4:9d:56:23:3d:
                    66:97:78:45:d2:5e:70:f5:01:85:90:13:6b:ce:3f:
                    e7:08:b1:3a:60:3e:24:19:11:39:06:04:52:3d:84:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:B3:05:6E:83:03:EC:03:45:E6:51:91:39:4C:01:E7:7D:0F:A4
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3139362e302f32322d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:be:74:6c:74:38:5c:11:08:c4:9b:30:b4:1b:da:da:f4:6e:
         0e:5b:d8:55:97:86:df:f6:9a:73:1b:26:ad:a1:98:ea:0c:11:
         2c:0f:f7:47:54:46:f2:88:f5:16:1b:87:bc:e2:3c:14:e9:6b:
         f5:7e:91:fa:4b:ab:f6:b2:a7:d5:5b:a0:ee:b2:aa:cb:d6:f3:
         6b:22:5f:8f:63:2e:65:d9:16:d0:9e:e9:5f:07:3e:d2:f8:4e:
         72:f8:f4:df:43:1c:d4:e2:4d:a3:0f:ff:83:58:11:30:7c:14:
         0d:51:5a:e3:f9:ff:70:a9:70:bc:3c:9a:37:76:aa:94:d5:3b:
         91:d8:b9:38:16:dd:88:bf:7c:06:42:d2:06:b1:03:2e:96:b1:
         b5:5b:9a:e6:df:f7:0f:c8:ff:81:5c:f5:d2:3f:66:d9:a3:d1:
         20:6d:27:a3:ae:f8:1e:38:7f:c5:a0:43:ac:76:bf:18:66:b5:
         37:77:a2:9e:fa:be:06:e4:8d:10:15:bf:7a:83:13:12:f0:47:
         a5:f0:84:da:ba:f6:aa:4e:44:f1:d0:85:23:1e:ea:4e:6c:00:
         97:1d:6d:18:55:4d:32:bf:c0:e6:6c:99:db:b4:41:02:8e:60:
         3f:34:62:02:f7:34:18:b3:cb:6a:2a:b9:ab:b3:2b:06:1e:a1:
         9f:e9:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org