Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          665lkp50960GWDTiv1gGRKSj7e6NUnlaFJDA6AnRGtI=
Subject key identifier:   95:43:D1:29:23:2A:E0:E2:72:77:44:2C:6F:59:53:5D:D8:76:58:56
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       149309397A2135ADF534A58431B454859E10471A
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:35 +0000
ROA not before:           Tue 05 Mar 2024 18:13:35 +0000
ROA not after:            Tue 04 Mar 2025 18:18:35 +0000
asID:                     52253
IP address blocks:        190.108.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:93:09:39:7a:21:35:ad:f5:34:a5:84:31:b4:54:85:9e:10:47:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:35 2024 GMT
            Not After : Mar  4 18:18:35 2025 GMT
        Subject: CN=9543D129232AE0E27277442C6F59535DD8765856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:af:0b:13:d0:28:95:ab:6a:f0:21:b2:86:
                    d0:d5:db:ea:46:6b:f2:11:20:37:fb:b2:75:9e:22:
                    79:ce:85:fc:08:4f:6e:b9:68:b5:c0:35:fc:2a:7d:
                    6d:b5:28:2b:a1:39:de:2d:a9:fc:bf:bb:63:59:ee:
                    ef:ac:07:cc:43:4c:43:13:e3:83:4b:ac:77:9d:23:
                    b8:6c:15:03:c5:7d:6a:d7:0e:0a:47:0c:2b:cc:27:
                    b2:82:bd:46:1b:18:e1:7a:ac:6a:f0:13:64:da:e2:
                    84:be:ce:f3:55:f2:4a:25:bf:9e:8a:8b:5b:d5:aa:
                    3d:0c:d7:a6:79:7e:34:db:01:bd:12:39:63:1e:74:
                    4d:b7:af:9d:d4:2f:52:3a:77:d7:2b:12:c0:b3:f5:
                    8f:07:46:25:7f:c5:43:bf:73:04:c8:0c:33:33:6e:
                    a9:1a:43:76:39:90:93:ea:a9:f3:59:b4:92:23:2d:
                    31:02:a3:28:ae:cf:c3:d3:70:2c:a0:cb:d1:32:ba:
                    51:64:1d:ce:f3:c0:e2:ce:6a:7c:bd:7a:61:95:80:
                    aa:aa:74:09:b1:34:77:ce:43:10:27:57:28:d9:2f:
                    55:f4:fa:0b:cb:e8:13:47:0d:cb:2e:88:9c:99:90:
                    32:fd:da:0f:2e:e3:e6:67:40:43:85:e0:f7:f3:2b:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:43:D1:29:23:2A:E0:E2:72:77:44:2C:6F:59:53:5D:D8:76:58:56
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:9e:43:7f:52:eb:60:ca:4e:18:d7:f0:2b:91:6e:b2:b4:d9:
         e3:6a:45:4d:81:f8:91:b5:bc:dd:dc:57:90:e7:0a:f0:cd:c2:
         84:5f:e9:47:02:c8:64:60:e1:4a:4c:cb:34:1f:3d:13:e3:aa:
         ee:06:57:ad:c0:07:bb:cd:8d:66:65:8f:73:0a:c3:12:e6:f5:
         6d:7f:3a:fd:73:e4:12:ee:41:93:54:f8:f6:34:4f:78:f5:36:
         88:be:ce:5f:ad:12:56:49:72:d4:8c:51:6d:6d:7c:e7:60:d3:
         da:25:5b:82:34:bd:04:61:3b:8f:a4:3b:21:ff:a1:72:ae:d6:
         11:59:09:45:59:19:ca:66:59:83:c6:48:43:4c:60:d8:7b:55:
         89:74:a4:a8:1a:3a:7e:fa:f3:59:28:61:28:f5:2b:a8:d8:dc:
         0e:f2:92:60:29:5b:27:46:91:f5:64:5d:5c:eb:fa:ad:30:26:
         82:3e:ca:4d:9e:b8:b2:8e:41:e7:80:db:0d:79:8c:e2:5b:68:
         67:4e:e9:cf:52:67:b1:3f:47:83:33:5a:ae:1e:be:e8:3d:c3:
         5f:8e:3e:da:90:ca:51:40:63:05:a0:89:b7:cc:30:dc:47:24:
         f1:2b:7e:93:75:de:64:5d:12:e2:ad:93:45:ae:b1:4b:48:c5:
         88:79:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org