Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230342e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230342e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          348jaBVsAYOzLdCPfIo45LgF+cjJdUoOYG52z/0VtBo=
Subject key identifier:   18:C2:CD:A5:3F:F1:60:42:5F:F4:CA:81:A4:F2:28:0A:4D:8C:59:E4
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       28C0A891D7F356F94A71862B03CBE332747C1753
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230342e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:40 +0000
ROA not before:           Tue 05 Mar 2024 18:13:40 +0000
ROA not after:            Tue 04 Mar 2025 18:18:40 +0000
asID:                     52253
IP address blocks:        190.108.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c0:a8:91:d7:f3:56:f9:4a:71:86:2b:03:cb:e3:32:74:7c:17:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:40 2024 GMT
            Not After : Mar  4 18:18:40 2025 GMT
        Subject: CN=18C2CDA53FF160425FF4CA81A4F2280A4D8C59E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:77:61:11:34:1f:0b:09:f9:e9:71:1d:8c:
                    74:19:42:c0:6b:21:ac:fd:74:1a:c6:de:50:e0:aa:
                    b5:2b:fd:14:bd:77:ed:40:b7:32:82:71:68:d8:04:
                    6f:79:dd:fd:46:fa:43:16:30:1d:b4:ab:58:dd:3d:
                    3b:93:4e:bb:f6:1b:10:42:b5:87:0c:93:d1:23:53:
                    a9:6f:75:33:da:62:0d:14:d4:f7:05:13:3e:98:4b:
                    2c:89:6f:e2:c5:6c:ba:72:94:91:8b:60:8e:8a:5d:
                    57:22:1c:a6:3e:c8:9d:27:13:8c:9f:ea:5b:eb:cb:
                    fe:88:06:9d:4a:93:4a:83:c9:ea:13:71:a7:88:3d:
                    ce:23:e1:cf:d0:9b:57:ba:db:07:6d:ca:a4:95:0f:
                    72:1e:9e:a4:37:4c:78:29:5f:59:e8:34:62:ad:74:
                    73:19:27:b4:94:05:8c:ef:a3:56:e0:0b:e2:0f:25:
                    ab:c7:ff:98:67:d2:0f:c2:ed:01:94:60:82:25:9b:
                    3b:dc:32:9a:5c:42:e6:96:f6:b8:32:0e:da:1b:6d:
                    55:6f:aa:de:cf:05:62:af:55:c0:e0:7a:70:75:db:
                    04:54:a9:2c:da:48:5a:d0:70:e1:72:4f:93:cc:6e:
                    25:ea:49:a1:b7:90:ca:20:33:1a:d4:b4:c8:42:86:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C2:CD:A5:3F:F1:60:42:5F:F4:CA:81:A4:F2:28:0A:4D:8C:59:E4
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230342e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:52:66:fa:ad:8d:03:ab:ab:d6:c7:ce:69:13:52:ed:4d:b1:
         86:6f:fa:f8:3f:9d:91:87:80:6b:b0:a2:a8:76:cd:de:71:bd:
         91:97:c2:56:51:96:78:9e:6f:70:3a:11:a0:13:3a:83:57:46:
         54:19:be:53:94:2b:67:ab:72:0c:f9:27:10:91:c4:f1:ad:74:
         12:d1:c2:82:5f:36:6f:23:f3:a8:85:67:1d:c8:1a:b2:bd:99:
         8f:55:cb:71:e6:a2:46:d3:5a:cd:4e:0e:6d:73:5b:68:23:e7:
         da:98:40:53:4e:3c:b3:f2:91:4f:21:bd:23:f3:03:bd:83:f6:
         7d:03:44:51:cc:02:86:b8:27:6d:61:ae:a4:c1:f3:40:d7:aa:
         80:6a:bf:ee:86:9a:67:a5:92:10:fc:16:02:49:0e:dd:bd:bf:
         1e:07:cd:c5:07:7d:51:53:39:0d:1c:bd:ef:2d:3b:33:1d:a6:
         c9:c3:91:d3:24:0d:18:4b:8a:a4:77:b4:78:01:41:16:c4:04:
         67:6a:45:ef:f9:c6:6a:ef:ef:7b:39:f0:25:8d:c0:a5:9c:43:
         5e:45:de:29:70:28:2f:e3:19:dd:14:29:b9:7b:83:be:65:de:
         3b:77:23:4c:a1:73:1d:f0:e7:9c:79:30:f0:8d:f9:49:71:b3:
         4c:63:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org