Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3132352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          bwTnS5xxhwnyzj5yMdsfK1jpmzwPHGGNqNo+9YVQNOw=
Subject key identifier:   05:46:AC:F7:24:EF:79:90:36:BD:28:AC:69:DE:68:74:9D:7B:F1:27
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       0CA6D61082F1BD2431D71B59C0D0A9A419ED9C54
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:02 +0000
ROA not before:           Tue 10 Sep 2024 13:05:02 +0000
ROA not after:            Tue 09 Sep 2025 13:10:02 +0000
asID:                     174
IP address blocks:        190.93.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a6:d6:10:82:f1:bd:24:31:d7:1b:59:c0:d0:a9:a4:19:ed:9c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:02 2024 GMT
            Not After : Sep  9 13:10:02 2025 GMT
        Subject: CN=0546ACF724EF799036BD28AC69DE68749D7BF127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:df:ba:d5:00:a9:35:e6:44:61:69:ef:a2:
                    79:e6:8e:ad:23:36:51:9f:f6:bb:b3:c0:dd:8c:13:
                    3b:b0:2c:f2:8f:13:7c:dd:c5:7c:37:47:80:17:1c:
                    86:0f:1e:43:87:7e:65:c5:49:e4:c1:30:cf:1f:12:
                    c5:29:6e:93:f8:8b:5f:a9:78:f5:b1:2c:59:dd:b7:
                    26:3c:95:e9:53:ff:a4:5a:34:c0:e3:52:21:03:42:
                    27:5c:b8:b1:82:07:58:ba:73:49:2d:3c:c3:13:a3:
                    a6:f9:23:25:b2:81:2f:be:21:fd:d6:cc:fb:e6:e9:
                    00:2e:50:93:ae:b5:01:ae:b4:6c:5b:11:fd:06:77:
                    35:08:38:87:72:4b:6f:1d:0c:92:c4:56:7f:0f:ef:
                    55:e0:c2:6e:80:c6:77:89:17:22:e2:10:23:60:3f:
                    a4:e2:61:67:e2:2d:7d:b9:6c:d4:ee:12:cf:c7:27:
                    1d:35:97:c7:a0:63:80:46:4f:c0:3e:ba:7c:1f:48:
                    48:61:75:7e:c9:d1:14:eb:dc:00:47:27:c6:13:0c:
                    fb:96:c5:2f:04:10:ba:d0:da:91:98:d5:52:c7:cb:
                    4a:e4:f5:27:62:2f:3d:3e:1a:09:7a:06:92:33:dd:
                    54:d8:ec:6b:07:4b:0b:cf:da:bc:09:2c:57:04:d5:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:AC:F7:24:EF:79:90:36:BD:28:AC:69:DE:68:74:9D:7B:F1:27
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:d2:93:a4:20:94:78:82:6e:05:11:ea:20:16:6f:02:11:
         b7:30:ed:74:b4:08:bd:4c:ba:70:1f:71:bb:a6:95:fd:04:78:
         9c:07:f4:eb:7c:b4:b4:df:7d:03:89:3a:e9:19:62:cd:03:3c:
         b6:f8:2f:fd:9d:55:90:28:56:bf:16:68:19:03:94:43:cf:c2:
         48:51:2b:81:97:29:b0:1b:56:da:15:70:89:a4:52:33:64:71:
         50:2e:d6:93:07:ea:fc:4b:34:cb:4e:e3:5e:49:f1:d4:6b:f3:
         09:a3:d8:2f:0e:5c:b9:9d:04:f4:56:e4:7b:4e:47:d1:16:f1:
         73:61:7f:8d:1c:4d:4e:f6:c7:cf:eb:21:9b:68:69:98:7c:63:
         03:ff:4c:a8:32:e4:fd:42:c6:e5:09:54:52:a0:01:c1:46:ea:
         54:36:c4:39:67:5a:dc:83:41:53:ce:f1:c5:35:dd:53:f8:89:
         fe:57:e2:a6:fa:23:97:c8:a4:a3:20:ae:51:c0:b7:5b:34:62:
         02:b2:cf:76:26:ef:e0:2e:7c:f3:65:43:f6:47:83:01:85:38:
         fe:45:2a:41:4e:34:1a:61:7a:14:08:87:ce:a0:28:02:ac:83:
         36:60:f2:ed:07:e1:f5:d0:4b:0b:73:51:d3:0c:00:22:f6:71:
         ad:51:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org