Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa
File:                     3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier:          rfmjpzGZAwEgdgQdxVPc6v55hD5QFhq7tzjKn2h5hvE=
Subject key identifier:   10:6F:24:A7:25:72:39:10:6A:60:F7:0C:3E:CC:75:31:A1:62:01:DE
Certificate issuer:       /CN=E6A820EE93E703A0216021C391FBFFC2B6A5C3E9
Certificate serial:       44F9FCF83FC6858AF24C065EA709ED699B659726
Authority key identifier: E6:A8:20:EE:93:E7:03:A0:21:60:21:C3:91:FB:FF:C2:B6:A5:C3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa
Signing time:             Fri 25 Oct 2024 11:25:00 +0000
ROA not before:           Fri 25 Oct 2024 11:20:00 +0000
ROA not after:            Fri 24 Oct 2025 11:25:00 +0000
asID:                     30058
IP address blocks:        190.105.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f9:fc:f8:3f:c6:85:8a:f2:4c:06:5e:a7:09:ed:69:9b:65:97:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A820EE93E703A0216021C391FBFFC2B6A5C3E9
        Validity
            Not Before: Oct 25 11:20:00 2024 GMT
            Not After : Oct 24 11:25:00 2025 GMT
        Subject: CN=106F24A7257239106A60F70C3ECC7531A16201DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:d5:27:00:21:ef:65:2e:2f:fa:a1:ae:a0:
                    66:55:59:63:06:36:f1:33:0b:b2:4a:c5:e0:ca:3d:
                    2e:57:c1:bf:c3:f8:d3:25:2d:27:f2:fe:1a:99:ea:
                    2a:02:51:e1:d7:07:18:7f:de:ce:64:88:ce:5d:18:
                    8e:c5:1b:45:37:74:66:2c:c0:33:90:1d:57:9d:58:
                    bd:df:81:07:84:c2:ae:36:98:bd:14:90:ff:bb:33:
                    27:55:cb:5b:4b:bc:6d:6b:ae:37:b1:e0:d3:a0:1b:
                    62:a0:7a:b1:34:89:84:65:9d:87:7c:ab:52:16:93:
                    6b:ab:60:e0:33:58:7a:cb:7e:20:8f:a8:cf:03:34:
                    ab:bf:43:37:87:52:25:93:72:be:88:a2:40:a2:8f:
                    ee:70:91:2b:07:8e:a0:37:17:61:ed:cb:ed:f1:bc:
                    9a:13:73:f4:0b:43:16:8d:e6:a1:2d:00:cd:5b:46:
                    dc:51:bf:4b:ee:4e:5e:e8:9f:b2:5e:1e:d9:e1:ad:
                    8f:f3:17:e1:0a:24:3e:bd:66:df:84:22:d6:4f:61:
                    f6:db:68:26:b4:33:70:e4:e2:59:53:f1:9e:e8:91:
                    e5:db:e0:86:a2:58:48:76:a6:c1:df:e9:18:1d:9f:
                    9f:13:51:a3:8f:51:3b:cb:70:41:f5:b1:ba:79:75:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:24:A7:25:72:39:10:6A:60:F7:0C:3E:CC:75:31:A1:62:01:DE
            X509v3 Authority Key Identifier:
                keyid:E6:A8:20:EE:93:E7:03:A0:21:60:21:C3:91:FB:FF:C2:B6:A5:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A820EE93E703A0216021C391FBFFC2B6A5C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64182B0081B6BEBE02120E0FE2F0B152E171598C801CDDF9268000AAFA01F274/0/3139302e3130352e3135372e302f32342d3234203d3e203330303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:60:74:fa:fa:53:de:22:d8:c3:f8:c3:55:03:59:e1:40:c0:
         77:a4:4c:0f:ab:e7:39:6f:2a:d5:a4:94:56:83:0d:47:49:4f:
         3e:80:99:66:eb:a0:1b:59:84:f4:13:15:23:d2:45:8a:fe:93:
         5c:d8:c1:15:3f:01:da:20:17:be:ba:b2:fa:10:4a:e6:94:ea:
         24:3d:45:bd:c1:5e:64:95:fc:ac:b2:d1:3a:6e:10:b8:a6:61:
         57:3d:95:d0:77:78:19:78:bc:c7:36:05:32:8b:24:7e:03:ed:
         67:0c:ed:c5:bf:4d:c5:c6:48:f8:a3:cb:50:7a:74:23:08:2b:
         35:9f:9e:a6:98:58:8b:cd:39:26:20:b6:99:c7:0e:99:e8:b8:
         b7:2d:dd:37:e5:f8:97:77:3c:56:46:c2:2e:fe:88:cf:49:5b:
         4d:70:6c:b4:6e:13:13:ac:49:f6:4f:55:70:e3:db:5f:8d:cb:
         b4:c9:5e:d6:59:dc:12:38:dc:b5:2c:47:ab:a5:fc:1b:19:60:
         da:02:b8:86:07:0e:ab:e6:24:34:09:3f:20:8d:1d:63:f1:ad:
         8c:70:6c:d8:ec:36:9c:b5:3e:62:0c:07:cc:cc:e1:15:6c:ce:
         c0:d2:c4:db:63:a8:01:f7:78:90:3c:60:da:df:f4:e6:a8:aa:
         0e:32:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org