Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230392e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230392e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          mYOVTgH+V8Sc4zH+eieBVoGMpx7wqBr4qOwwB4SeG2Y=
Subject key identifier:   DB:8B:13:02:A7:3E:82:34:76:C6:05:B9:91:E4:0B:A7:41:D3:90:7F
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       6FCEF202EECE45585DD21DE347DC021D963BCDB6
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230392e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:36 +0000
ROA not before:           Tue 05 Mar 2024 18:13:36 +0000
ROA not after:            Tue 04 Mar 2025 18:18:36 +0000
asID:                     52253
IP address blocks:        190.108.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:f2:02:ee:ce:45:58:5d:d2:1d:e3:47:dc:02:1d:96:3b:cd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:36 2024 GMT
            Not After : Mar  4 18:18:36 2025 GMT
        Subject: CN=DB8B1302A73E823476C605B991E40BA741D3907F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:d6:44:fb:ae:c5:dd:e7:83:1f:45:66:01:
                    91:2b:04:44:3e:58:c9:d2:92:33:f2:c0:78:09:c8:
                    c1:0f:ed:70:4f:7b:ef:a6:cf:0b:ed:c1:9f:a8:67:
                    cc:ba:f5:fe:b5:79:cf:90:92:df:ec:39:74:6b:62:
                    25:de:81:3b:24:53:a9:2d:98:e3:79:34:74:2d:d9:
                    a0:68:59:05:b4:88:96:44:4e:0e:c2:b4:26:62:82:
                    29:79:cf:55:7b:7f:33:eb:c1:66:ec:5c:95:25:53:
                    dd:5f:61:b0:0e:03:8e:61:41:0c:0f:ed:fa:1b:d4:
                    49:eb:cd:57:a2:fb:b6:81:f1:97:19:62:3b:55:df:
                    b3:c2:9c:6a:c1:6b:87:af:1d:40:d9:02:66:72:8c:
                    13:51:62:d2:37:86:8b:59:e9:a0:7f:1b:96:c8:d4:
                    89:0d:9e:8d:0c:ea:d2:77:67:eb:9d:e3:43:d1:84:
                    cc:43:80:c4:73:56:01:02:04:2d:4f:b4:65:9b:6b:
                    0a:eb:82:f3:bf:05:e3:78:25:0e:8e:27:88:f1:0d:
                    63:a2:ff:24:37:36:1e:4d:f1:28:26:ac:af:94:36:
                    3c:47:3c:e1:0a:f1:a5:b4:64:9c:79:08:73:14:bc:
                    53:5e:bd:42:a6:2a:1f:25:f2:9b:aa:bb:49:d3:ef:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:13:02:A7:3E:82:34:76:C6:05:B9:91:E4:0B:A7:41:D3:90:7F
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230392e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:99:4b:4e:e9:59:d8:30:3d:c0:2f:c5:ea:d0:19:b7:73:
         9e:d1:fb:62:29:24:b4:af:a7:c0:31:a0:a9:98:1b:2a:c9:73:
         b8:4d:ac:bd:70:65:a9:8b:13:67:20:a1:ba:3a:d6:e3:23:42:
         1f:4c:51:3b:da:6f:58:6d:7e:77:42:46:d7:87:ea:31:c1:f2:
         61:fa:1d:40:cd:19:39:87:79:38:f0:f6:57:33:7d:25:c1:27:
         4b:a9:7a:33:65:46:7b:d0:87:f2:8c:26:78:07:4f:14:c4:f1:
         ac:45:b4:1e:68:71:af:1c:d8:6f:f4:18:14:2b:c1:0d:f3:b9:
         ca:c1:44:1f:87:8c:72:bc:a1:f8:0d:e6:d6:98:ee:59:c4:a2:
         c0:8f:14:c9:60:b0:e3:53:37:78:23:7f:82:ca:83:69:b6:dd:
         55:de:3a:7d:1c:3d:7d:34:9d:76:4a:7c:a0:03:33:ce:ef:8d:
         1c:7e:01:55:2b:08:96:45:80:13:8b:df:d9:02:2b:e2:72:36:
         3f:3b:01:c5:1e:6d:32:18:21:8b:71:a5:dd:58:f6:6f:8d:d1:
         1e:7c:95:87:5f:9f:a0:46:98:ff:86:bb:b6:57:7d:81:70:2f:
         91:e5:0e:ee:8d:c7:29:7d:cc:d4:0d:7d:c0:ce:8a:a6:44:23:
         fd:13:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org