Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230332e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230332e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          aBa+llb9B/Ton6snM07WuFv0dGFydWs2guoFQDRr68c=
Subject key identifier:   97:5F:8C:C9:9D:6A:80:37:8E:21:A1:0F:09:90:49:E1:A3:6E:2D:4D
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       4204228E3F51527C56CC67B9793873EE5E5BBFCE
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230332e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:39 +0000
ROA not before:           Tue 05 Mar 2024 18:13:39 +0000
ROA not after:            Tue 04 Mar 2025 18:18:39 +0000
asID:                     52253
IP address blocks:        190.108.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:04:22:8e:3f:51:52:7c:56:cc:67:b9:79:38:73:ee:5e:5b:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:39 2024 GMT
            Not After : Mar  4 18:18:39 2025 GMT
        Subject: CN=975F8CC99D6A80378E21A10F099049E1A36E2D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:33:6d:64:64:c4:91:cd:2b:79:f7:38:20:
                    d0:bb:67:bb:0b:7c:a4:84:7a:2f:fb:ba:dd:0c:37:
                    ef:7d:c2:c7:99:97:c6:cb:75:f5:97:e9:86:61:2d:
                    b0:8c:86:07:5f:b8:34:89:50:57:d5:d2:af:56:31:
                    e8:a3:41:cd:6b:bb:b9:5f:c6:7c:c0:d9:f3:bc:93:
                    ff:1b:6b:97:3e:dd:c6:4f:bb:23:7f:3c:ec:f7:63:
                    bb:d8:b8:c2:02:01:d4:1f:64:9b:29:12:30:8a:9f:
                    61:23:ec:0d:96:1f:89:96:25:68:c6:61:24:0b:c2:
                    ec:c7:fa:bb:95:72:a7:71:4c:6b:01:73:06:39:d5:
                    66:b3:1f:6e:2b:cd:6e:a2:63:37:d4:05:4a:c6:70:
                    86:fa:35:fa:e7:01:31:52:9e:45:1b:91:93:23:fc:
                    6d:f8:82:c8:dd:fa:d2:a4:b0:0d:78:3b:81:bc:c4:
                    8f:fc:d6:d5:78:a1:7d:ae:bf:c1:91:35:69:f1:55:
                    95:81:2b:6b:c1:dd:8f:6d:97:d5:57:e7:38:1a:c2:
                    5b:6a:ad:dc:5a:b9:5c:f8:ef:ab:ef:fe:51:c4:9b:
                    24:a3:b8:26:e7:6a:be:27:33:88:1c:70:80:49:7e:
                    68:4c:19:f3:b4:e2:95:d0:89:97:b0:e2:5c:f4:51:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:8C:C9:9D:6A:80:37:8E:21:A1:0F:09:90:49:E1:A3:6E:2D:4D
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230332e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:1c:d8:98:aa:bb:7f:b2:8a:e5:61:5a:e5:12:c8:1c:bf:
         82:84:7b:44:cf:dc:e4:37:5c:28:51:e6:a2:be:7a:9f:ff:91:
         24:81:b3:fa:3f:67:04:ed:a4:8b:0d:32:cc:67:53:97:75:be:
         76:8d:90:fb:42:ff:6c:e1:b3:43:69:2a:1d:d5:db:6b:0e:94:
         cd:90:8b:ab:40:7b:11:14:d1:c8:06:0a:71:68:74:ab:08:76:
         68:67:57:31:00:c1:bf:e5:2c:40:1a:19:4f:37:5f:f3:86:6e:
         28:98:3b:4d:77:09:6e:9e:ef:71:15:4c:14:c2:68:7b:43:e3:
         bb:46:71:71:c5:a4:f2:88:60:c6:b8:17:26:cf:db:93:a9:37:
         7e:92:19:72:88:0c:3d:38:e1:63:10:42:e7:a3:00:5c:e6:33:
         26:b1:65:ef:74:7e:80:f7:17:71:1b:a2:8a:00:ae:64:10:c8:
         34:10:db:9e:b9:3f:0b:4b:75:5f:94:3f:58:fe:3d:da:d4:cd:
         db:27:11:67:dc:00:e2:6f:49:b5:bd:4b:c6:90:c0:67:cc:7c:
         07:84:e4:cc:94:9f:9d:56:6d:75:5d:c5:30:6a:96:7b:33:81:
         9b:2f:d7:d5:63:1f:bd:68:2f:23:ec:b9:cb:eb:26:f6:34:bc:
         3f:14:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org