Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3232203d3e203237373839.roa
File:                     3139302e39332e3131362e302f32322d3232203d3e203237373839.roa (raw, json)
Hash identifier:          yDsmeJMA5loCofUPNQlMzqafr42Lykyj2Xg94p4KMpE=
Subject key identifier:   FA:29:C4:C1:C3:03:32:22:03:54:9E:3E:4D:10:8E:98:C6:56:5E:4B
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       257735E5DB6FF7DA911430BC9A8728A6E85D5A96
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3232203d3e203237373839.roa
Signing time:             Fri 25 Oct 2024 18:45:00 +0000
ROA not before:           Fri 25 Oct 2024 18:40:00 +0000
ROA not after:            Fri 24 Oct 2025 18:45:00 +0000
asID:                     27789
IP address blocks:        190.93.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:77:35:e5:db:6f:f7:da:91:14:30:bc:9a:87:28:a6:e8:5d:5a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Oct 25 18:40:00 2024 GMT
            Not After : Oct 24 18:45:00 2025 GMT
        Subject: CN=FA29C4C1C303322203549E3E4D108E98C6565E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:23:5d:f5:f2:9d:c2:7c:bb:5d:cb:e0:5f:
                    fa:a9:8e:f1:6b:74:f9:76:3d:a5:c8:85:7d:97:e3:
                    de:36:d7:f6:46:8f:a0:97:96:15:71:b8:6d:3f:b8:
                    60:ab:cd:4b:76:05:ef:c4:92:25:da:53:c5:75:17:
                    b7:c7:2e:15:ac:bc:31:15:3d:7d:5f:9d:48:9f:81:
                    a0:5d:7e:c4:37:35:b5:e0:1f:b9:cd:d6:70:ab:51:
                    45:9f:18:f3:5f:44:dd:1d:6c:fb:8f:18:00:ef:35:
                    61:f8:c7:22:6f:a4:09:34:9b:42:71:92:fe:48:b2:
                    11:3d:ec:60:10:82:cf:bc:39:c3:ee:f3:e8:54:e5:
                    2d:08:e8:45:68:95:b3:61:11:22:27:25:cd:e7:9d:
                    d4:db:a7:99:d3:a0:51:33:a7:31:2d:1b:99:60:95:
                    e1:92:d4:bd:40:40:3b:fa:ee:85:28:cd:7e:cd:9b:
                    70:f3:d9:3e:d4:5a:ba:e8:d5:9c:44:aa:94:15:1c:
                    8e:cf:bf:ca:a9:28:83:41:06:cf:e9:93:b2:01:15:
                    ea:01:b6:48:6c:a6:f4:97:4b:02:e4:4c:5c:57:63:
                    c6:d8:75:47:71:03:1f:f1:1f:17:ec:99:1c:a9:f4:
                    61:56:9b:ec:4c:f9:b1:56:3b:b9:75:b2:b6:3d:74:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:C4:C1:C3:03:32:22:03:54:9E:3E:4D:10:8E:98:C6:56:5E:4B
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3232203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:17:39:76:43:d6:0f:09:e7:0e:74:6d:c0:1e:27:be:ca:b8:
         b0:0a:ed:ce:33:6e:44:48:f3:a2:dc:b7:85:fa:4d:a1:af:ad:
         bb:bb:0c:53:d5:d3:22:93:52:c6:18:16:88:ce:01:63:e5:ff:
         61:2f:e6:fb:1c:6d:7c:a7:8b:2c:9c:3f:a0:bc:90:35:55:91:
         cd:b4:46:35:b7:0b:89:cd:12:97:f2:81:c6:5b:ab:19:b8:da:
         d2:98:55:ae:29:9d:f7:2e:23:b8:6a:6a:0f:a0:a3:13:4f:6b:
         d2:2e:46:dd:ae:02:bb:07:71:4c:31:1d:39:97:63:57:7a:71:
         77:aa:d7:c0:a1:33:ee:d3:81:7d:bb:f8:48:3d:3b:d2:54:2b:
         e3:1f:c3:a6:56:13:bc:5a:8a:00:38:0d:1f:0b:16:1d:fc:bd:
         d0:81:7e:b5:23:dc:55:2a:76:8b:6c:f2:0b:02:c9:83:47:d2:
         ad:8e:38:54:99:0a:dc:c2:fd:a2:a6:ad:99:d7:a4:f0:94:0a:
         64:b6:36:2c:d4:36:dd:bd:48:f5:1d:16:cd:27:a5:e4:04:4e:
         ee:51:0d:f2:b7:26:8d:55:7c:19:60:15:19:df:81:44:e8:c6:
         f5:25:14:b6:3d:da:09:0b:81:95:23:c3:7f:70:f4:2e:41:17:
         cf:af:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org