Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32322d3234203d3e20313734.roa
File:                     3139302e39332e3131322e302f32322d3234203d3e20313734.roa (raw, json)
Hash identifier:          gJrYnmNIc47tcWMoq6kg6tcV08RQS8m9HITpbhmGypk=
Subject key identifier:   DE:43:71:5E:E4:02:1A:15:3D:4E:CA:12:DD:C7:CC:77:9D:AF:84:19
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       47A64BDA3A852F3C8D365E3926C63DA95E43426A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32322d3234203d3e20313734.roa
Signing time:             Thu 20 Jun 2024 13:55:00 +0000
ROA not before:           Thu 20 Jun 2024 13:50:00 +0000
ROA not after:            Thu 19 Jun 2025 13:55:00 +0000
asID:                     174
IP address blocks:        190.93.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a6:4b:da:3a:85:2f:3c:8d:36:5e:39:26:c6:3d:a9:5e:43:42:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 20 13:50:00 2024 GMT
            Not After : Jun 19 13:55:00 2025 GMT
        Subject: CN=DE43715EE4021A153D4ECA12DDC7CC779DAF8419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:d4:b9:91:e6:82:64:37:51:7c:d5:55:a6:
                    ba:5d:3d:d9:df:5a:c9:4f:8f:32:e1:02:f4:c3:ec:
                    4c:70:d0:3b:bd:c5:e9:12:63:14:1f:5d:34:37:29:
                    bb:18:6f:fe:b2:28:b8:a2:be:6a:ac:52:78:dc:7b:
                    40:e9:5b:ce:fb:31:03:55:e5:20:3a:cf:92:4d:3d:
                    3c:4f:98:2e:2a:05:b6:7f:22:90:3d:15:42:38:58:
                    cf:47:82:56:eb:e1:5f:c4:24:87:a0:ba:c4:ea:1c:
                    fb:54:d2:99:3a:e7:64:62:8e:0e:b5:bd:cb:a7:ff:
                    8d:a1:bf:62:22:e1:74:bf:54:81:7b:2e:bf:8d:50:
                    a7:5d:3e:07:69:3f:d6:c9:8d:08:9c:1f:15:71:be:
                    15:ed:03:0d:00:4e:92:ea:bc:71:31:67:78:c7:50:
                    c2:13:c7:4c:f4:47:8e:31:ec:9c:d7:c7:43:76:1d:
                    48:1c:e5:96:4f:cf:68:bf:ac:74:6e:49:53:5d:82:
                    dc:e9:d0:1f:87:7b:d6:46:a8:8b:6b:77:aa:5b:68:
                    3c:c7:ad:6c:11:14:5c:fc:74:34:55:32:59:8c:ac:
                    2d:67:e0:6c:82:55:3c:b6:c9:f9:7b:30:16:70:5d:
                    99:07:09:25:b4:a4:67:37:6f:09:2e:bb:46:2a:2f:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:43:71:5E:E4:02:1A:15:3D:4E:CA:12:DD:C7:CC:77:9D:AF:84:19
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32322d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:56:da:67:f4:af:33:37:c7:5a:bc:5b:ad:0c:63:d2:03:
         b4:9d:22:56:ab:66:80:f5:eb:58:b8:76:f4:a7:ba:85:80:30:
         4c:fe:d6:34:69:91:d7:f8:dd:7d:3e:8b:b7:e2:8d:f8:f2:c8:
         68:af:33:7e:f6:5f:68:0e:de:46:08:1b:40:0e:b2:52:1c:bb:
         11:c6:3e:ad:05:fb:32:ad:2c:2d:6a:8a:a9:b9:e9:4a:fd:76:
         92:8e:8f:cf:ac:96:d4:5c:d7:b6:f4:ca:8e:4e:b3:7f:c6:ba:
         20:9b:25:74:bf:83:63:86:81:34:e2:14:24:f4:2c:f8:4b:1c:
         af:92:8c:88:1c:63:33:9a:2a:25:11:2f:a4:0e:5e:67:d2:f7:
         51:1a:92:20:b9:56:84:8f:53:56:f5:9d:19:56:4a:85:1e:76:
         90:03:2c:df:97:eb:d2:65:39:5e:63:4d:e2:70:56:24:f0:63:
         c6:a7:94:ee:84:93:82:18:fe:96:66:11:fc:75:52:88:a7:79:
         7b:9d:65:eb:4f:f0:1b:30:71:35:af:77:c8:af:09:f2:5b:6b:
         5d:03:35:d2:b1:57:7e:d8:4b:68:85:70:e6:10:fd:7f:b2:6f:
         33:8a:c7:14:9e:e4:76:09:6d:e9:79:b4:81:54:10:24:c2:f6:
         ba:6a:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org