Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323632333631.roa
File:                     3139302e39332e3130382e302f32332d3233203d3e20323632333631.roa (raw, json)
Hash identifier:          GWAl3OQlyKFUPdXeQCNPKpQm8+DxEqZ7g/WunSR8OrQ=
Subject key identifier:   B0:49:FE:5E:2F:A5:29:8E:C8:52:A1:9B:73:9D:CE:36:59:93:69:2F
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2D59F447AB2637E74861BB972E923A705157781A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323632333631.roa
Signing time:             Wed 02 Oct 2024 21:50:00 +0000
ROA not before:           Wed 02 Oct 2024 21:45:00 +0000
ROA not after:            Wed 01 Oct 2025 21:50:00 +0000
asID:                     262361
IP address blocks:        190.93.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:f4:47:ab:26:37:e7:48:61:bb:97:2e:92:3a:70:51:57:78:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Oct  2 21:45:00 2024 GMT
            Not After : Oct  1 21:50:00 2025 GMT
        Subject: CN=B049FE5E2FA5298EC852A19B739DCE365993692F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:db:93:09:0f:db:b4:bb:32:22:07:50:fa:6f:
                    53:80:91:88:28:4e:fc:cb:d7:54:99:97:26:f8:e9:
                    9f:31:8c:87:19:cd:d5:57:4c:71:9e:8e:3a:59:50:
                    8c:76:78:31:95:1a:62:9f:7e:58:a5:af:7f:73:92:
                    b6:35:db:86:da:6f:71:97:b8:0d:ab:00:28:5b:47:
                    7c:56:f1:64:f9:11:2f:61:a4:43:62:81:70:f2:4d:
                    9a:ae:34:ee:d9:db:01:8f:53:0b:4a:7b:c0:25:b5:
                    12:2c:a9:42:98:c9:92:31:55:b3:9b:27:f4:fd:a1:
                    d0:85:62:59:ef:7f:ad:d3:2b:78:11:09:cd:16:35:
                    5f:47:d0:0f:05:e0:93:5d:0a:51:d9:32:5c:0c:0b:
                    62:52:7c:9b:55:12:64:b5:95:1e:1f:dd:35:61:0e:
                    91:b5:68:1c:64:3f:b5:82:2d:4d:4a:60:98:d6:d4:
                    9b:35:e0:b8:3a:8e:40:0e:a1:fe:9b:4c:20:26:43:
                    40:da:28:80:7e:5f:79:53:f9:41:6e:55:23:01:2e:
                    92:d8:05:e3:da:dd:45:dc:e7:92:fd:26:26:c2:3e:
                    8b:a1:65:ca:1d:e1:65:c4:f3:ca:ae:6f:cd:19:6e:
                    12:67:69:db:59:75:ab:88:9c:b8:18:d0:85:6e:23:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:FE:5E:2F:A5:29:8E:C8:52:A1:9B:73:9D:CE:36:59:93:69:2F
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32332d3233203d3e20323632333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:63:34:b2:99:71:c4:67:a5:1e:19:4e:dc:fb:f6:31:26:
         68:e4:25:78:56:1b:08:7c:87:3e:19:49:cd:5e:f3:1b:c5:b1:
         fc:3a:7e:cc:8e:8a:3c:01:fa:b9:8e:c8:37:58:d1:4b:c7:1c:
         c9:08:75:94:eb:40:53:51:05:d9:30:bc:8a:1c:95:07:c9:99:
         c4:b5:8c:ea:49:09:ab:b5:d7:15:dd:47:e9:28:6c:08:42:38:
         2d:a3:64:9a:ef:d2:bc:f2:8a:f9:54:b4:da:0b:f8:7b:ff:e7:
         68:6c:18:be:0b:e6:2c:5e:9d:6d:3c:8a:0d:40:6c:ba:32:a0:
         66:2a:6f:72:3d:59:5c:57:eb:56:05:eb:db:52:50:b0:7a:7a:
         18:01:13:0f:73:c5:ef:30:49:80:81:d7:31:a5:5d:ee:23:cf:
         38:eb:72:31:6a:ed:9d:9d:f7:40:31:bf:13:19:24:b6:df:21:
         01:07:fe:6e:0a:bf:69:8b:a9:c1:14:7d:b4:50:b8:2a:ed:b0:
         8e:80:f6:7e:0b:7e:82:5f:08:32:cd:51:1b:14:c6:4e:dc:b7:
         17:e8:40:0e:8f:a8:e4:de:cc:c0:27:13:59:f6:10:f7:5c:13:
         36:dd:c3:2f:17:e8:61:db:68:ec:12:b1:6d:2b:c3:e8:fc:29:
         1d:b2:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org