Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa
File:                     3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          TFS/3ByB0Hmdw2DyXKcN3Brpp8wKD30JHDq40/1izdM=
Subject key identifier:   06:72:B2:7F:26:88:62:07:22:B5:C1:6B:BE:3C:FC:28:9E:C6:BD:52
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       0560DAC6FC40C6A3AABEA97F2E1036D15C6F4B83
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:37 +0000
ROA not before:           Tue 05 Mar 2024 18:13:37 +0000
ROA not after:            Tue 04 Mar 2025 18:18:37 +0000
asID:                     52253
IP address blocks:        190.124.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:60:da:c6:fc:40:c6:a3:aa:be:a9:7f:2e:10:36:d1:5c:6f:4b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:37 2024 GMT
            Not After : Mar  4 18:18:37 2025 GMT
        Subject: CN=0672B27F2688620722B5C16BBE3CFC289EC6BD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:fe:a8:fe:8a:48:bd:16:8e:6e:a6:2f:43:
                    09:28:43:d0:61:bb:0a:30:8c:d1:80:66:95:98:4c:
                    5f:34:83:7e:13:3f:48:c7:67:db:5d:a2:a8:27:c6:
                    8d:08:a2:8f:c1:c2:7c:b5:31:19:81:b6:c2:8d:ae:
                    7f:a1:de:58:f5:d7:49:0f:70:84:58:5f:f8:c9:13:
                    52:0c:00:a5:b4:4f:a1:40:c6:f8:6a:10:f1:a6:40:
                    bc:84:48:77:77:e1:93:91:61:75:51:38:15:15:02:
                    f6:a1:e8:3f:8c:0c:a1:36:cc:c8:33:ba:ab:62:a6:
                    b0:2e:e0:9a:d5:c7:e5:25:7c:19:3d:67:34:e5:bc:
                    83:6b:1b:b6:16:6c:f6:1f:a9:46:b8:77:75:f2:8f:
                    d1:04:5c:9b:2e:03:be:a5:65:dd:9a:e7:92:4b:5f:
                    a0:44:65:71:22:b6:d0:cd:0a:72:8c:31:3a:65:3b:
                    1f:e6:3d:75:5b:63:ab:66:1f:5f:4e:13:41:ad:1d:
                    ba:a2:7a:30:f8:ab:36:03:59:f4:ec:57:06:2f:36:
                    ba:f3:6d:96:a3:1a:d6:24:7c:16:0a:39:21:85:45:
                    a3:df:4e:45:5b:17:8b:82:2d:0e:12:2b:e6:67:40:
                    7b:9e:0c:e3:58:85:93:0b:21:01:c2:ee:87:59:19:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:B2:7F:26:88:62:07:22:B5:C1:6B:BE:3C:FC:28:9E:C6:BD:52
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:46:73:52:f3:c0:cb:a6:69:7d:ac:9d:30:24:d8:1b:37:
         4f:92:be:6b:4a:34:d7:fc:d4:a3:73:39:8b:65:00:10:b5:2c:
         8f:3a:88:ba:54:59:0c:d1:15:3d:c1:32:16:2b:7d:66:fc:27:
         f1:f4:19:3d:ed:c2:0e:cb:34:8e:66:43:66:ae:36:1e:f5:2b:
         e1:76:77:fd:93:da:36:4d:47:df:e0:ca:69:7e:b3:51:49:7e:
         6e:85:cb:b1:1d:d4:d4:60:bf:eb:de:7b:c8:57:6c:8b:67:e9:
         8c:09:c4:53:b7:f5:f0:8b:a8:f2:48:e5:bd:2f:38:41:ac:f1:
         f2:cd:0b:77:47:39:51:c2:01:82:6e:47:25:b4:95:6e:eb:94:
         86:fd:82:88:1a:b6:ea:e8:c5:78:ff:3d:90:ef:a3:63:22:48:
         49:9c:ff:81:a4:82:8b:d9:e8:c9:84:7b:c0:dc:a1:8e:c0:0e:
         4f:99:ef:9e:64:7e:d0:64:3f:72:93:61:cf:19:b8:39:cb:a6:
         ac:53:e4:98:56:1a:a9:0a:06:f1:aa:d2:40:c2:37:d0:26:66:
         53:41:47:c9:07:d9:bb:1a:e3:7f:e4:20:62:19:9e:a3:ae:f9:
         14:40:52:3b:ec:02:93:7e:cb:f6:cd:f8:26:7e:3d:57:d5:11:
         cb:67:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org