Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          7IzOt32+q2nhhUJE/fqaRpLmSipO7mJOdvYx4UHsIAM=
Subject key identifier:   67:DC:B6:57:A0:59:6B:1D:EB:E6:91:BD:7C:CF:8D:A6:C1:60:9D:13
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       5A57B4A99ECCDCC5B6DEA72E80040336A284CE3F
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:42 +0000
ROA not before:           Tue 05 Mar 2024 18:13:42 +0000
ROA not after:            Tue 04 Mar 2025 18:18:42 +0000
asID:                     52253
IP address blocks:        190.108.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:57:b4:a9:9e:cc:dc:c5:b6:de:a7:2e:80:04:03:36:a2:84:ce:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:42 2024 GMT
            Not After : Mar  4 18:18:42 2025 GMT
        Subject: CN=67DCB657A0596B1DEBE691BD7CCF8DA6C1609D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:64:89:54:cf:87:63:61:f3:04:01:68:73:
                    cd:e4:a1:b2:11:66:ff:19:8c:67:44:04:14:3a:60:
                    5f:c3:82:d6:94:cd:a1:fd:6e:59:1b:fa:44:cf:b3:
                    02:8c:d3:ed:25:11:a9:a1:4c:31:54:05:8d:94:bf:
                    e8:35:7c:a0:85:c9:18:8a:9a:9b:9b:0a:4a:30:28:
                    06:97:b6:6e:31:db:b3:3f:a6:f9:54:bf:00:ba:4a:
                    b1:1a:94:89:3f:77:c3:0e:97:ef:c9:3b:21:9f:c1:
                    16:e9:ae:ea:e7:64:ea:46:a2:30:e2:4e:2f:95:05:
                    86:53:68:f0:b2:c6:d0:38:e0:1b:36:95:f7:f8:9b:
                    42:4c:04:3f:fa:5b:18:05:92:ae:a8:aa:17:5e:1b:
                    9d:29:d0:30:8a:7c:60:20:a2:db:3c:33:70:3a:c9:
                    9a:63:10:5e:56:3d:74:67:98:f8:df:77:df:09:58:
                    1d:18:bf:32:b6:f4:a0:75:db:28:f6:3a:63:17:de:
                    c5:14:1f:08:5f:64:b7:e7:36:80:a5:5e:b9:29:cd:
                    87:11:aa:5d:3b:73:67:8b:37:74:5c:b2:14:7d:c9:
                    0e:92:22:0c:4f:ee:2b:57:ba:da:0e:d8:83:23:b4:
                    c9:d3:4d:05:74:99:bf:7f:e8:31:ae:05:54:4d:e6:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:B6:57:A0:59:6B:1D:EB:E6:91:BD:7C:CF:8D:A6:C1:60:9D:13
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:13:e3:d9:0d:48:fc:8a:2e:92:ce:f3:89:03:44:2f:28:7c:
         9b:3c:cc:75:b8:eb:31:ff:f7:18:03:f8:f2:84:d2:fd:00:7d:
         40:c5:be:82:c8:15:40:64:7e:cd:df:f6:e9:0b:c8:e4:d5:9d:
         44:1b:82:b0:76:3b:e8:b4:08:fb:24:87:57:d6:7f:43:df:1d:
         38:66:69:9c:bf:83:db:10:92:d9:42:2a:38:b4:27:38:db:64:
         b1:37:8a:a6:f7:5c:ac:c6:52:1b:3e:f2:b3:42:8d:80:aa:39:
         d6:b1:24:ae:8c:83:ec:cd:90:c7:6c:59:26:d4:b2:73:6c:22:
         e6:d6:37:5c:91:f3:0b:51:de:d1:05:48:ec:a1:01:9c:ef:a6:
         a3:44:b7:52:d9:d3:ab:1e:b2:02:41:63:a3:07:14:fc:49:a5:
         2b:81:0c:97:82:ac:6d:94:b7:b6:bf:fe:08:3d:85:d0:17:27:
         22:ad:a7:e0:e2:b8:63:0c:a0:02:9b:7b:95:bc:7f:8e:2e:49:
         8f:1b:5b:8f:92:74:77:0a:ef:f7:c2:b7:94:10:19:4a:ee:59:
         14:f6:b4:46:4a:55:be:91:82:f8:e5:9f:5a:f1:5a:49:e1:28:
         eb:6f:25:e1:00:c9:c6:23:92:d3:c4:99:5b:e0:56:a0:65:fb:
         4d:96:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org