Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37312e302f32342d3234203d3e2037303239.roa
File:                     3139302e39332e37312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          9/i+ZcPTDDUxtWUu+JWptH63ZxpkN+Kdq3MA/SQpLTs=
Subject key identifier:   17:A4:B8:21:06:F7:49:76:B9:17:F1:87:2E:B5:AB:DC:80:6B:9F:12
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       732CA4987E97E9D406147C2DEBA67EC305D8B4C4
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37312e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 05 Mar 2024 18:18:33 +0000
ROA not before:           Tue 05 Mar 2024 18:13:33 +0000
ROA not after:            Tue 04 Mar 2025 18:18:33 +0000
asID:                     7029
IP address blocks:        190.93.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:a4:98:7e:97:e9:d4:06:14:7c:2d:eb:a6:7e:c3:05:d8:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:33 2024 GMT
            Not After : Mar  4 18:18:33 2025 GMT
        Subject: CN=17A4B82106F74976B917F1872EB5ABDC806B9F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:5c:fd:1f:24:de:4f:d5:e7:22:16:db:3d:
                    b2:98:37:17:ac:14:0d:09:af:f3:c1:b4:28:89:26:
                    9f:33:b6:10:e8:2b:60:c6:06:7f:4f:b2:13:8f:3c:
                    70:63:34:ea:55:43:6b:55:ec:63:99:eb:71:bb:cb:
                    76:4e:02:c4:b8:5d:ee:d5:db:a9:df:22:bd:01:e5:
                    6c:a8:4d:c7:23:70:32:81:0e:25:d1:0d:c5:73:f3:
                    53:42:1a:91:32:9e:b1:d2:55:b5:0a:e1:46:27:f8:
                    cc:c8:3c:f1:f0:ad:c2:81:05:92:f4:c2:4e:93:38:
                    c8:11:57:5f:96:eb:da:62:99:f7:03:4c:36:ba:28:
                    49:7f:b6:83:c8:81:b5:0e:93:e5:e1:d2:54:83:1b:
                    37:96:ee:4f:bf:99:99:fd:a4:25:2a:67:0b:aa:61:
                    82:38:b0:96:b9:c3:67:b6:dd:e9:2e:c1:59:31:a1:
                    bb:b0:dd:71:38:f4:97:a0:24:7c:37:4b:67:6e:fd:
                    10:c1:6b:96:ce:5c:45:01:0a:bf:d0:c1:83:e6:ac:
                    16:ec:c5:50:a5:0b:7e:39:48:6a:ba:2a:45:88:5c:
                    88:09:fd:af:ca:af:f3:cc:eb:69:8b:8a:a9:f1:dc:
                    97:b2:dc:bf:19:76:5b:75:7a:a7:86:bd:31:b8:5a:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A4:B8:21:06:F7:49:76:B9:17:F1:87:2E:B5:AB:DC:80:6B:9F:12
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a4:99:88:99:27:ab:64:53:c0:5b:91:15:a7:d1:72:6c:c2:
         00:7e:56:80:67:8b:e4:09:fa:9b:e7:0d:a1:14:71:11:9f:1f:
         73:f7:fa:a1:cb:c3:2a:7f:26:cd:aa:24:ed:68:eb:b0:3f:93:
         35:fd:b3:d2:d2:9b:56:07:ff:3c:09:a7:f6:e5:94:19:4b:6b:
         e2:27:b9:18:02:fa:ac:0b:50:e4:81:b8:dc:b7:0e:52:2c:11:
         fe:18:9a:6b:57:a5:ba:ef:66:6e:5b:00:6b:81:60:75:0e:1b:
         4a:68:aa:d6:38:45:7b:07:86:64:4d:25:97:b3:f7:b2:e9:52:
         ee:fd:57:18:77:ca:a6:b8:3a:84:a4:0f:f4:08:59:0b:57:65:
         d9:ad:09:ab:24:27:2d:a1:1e:f0:03:9e:ee:e8:25:08:dd:bc:
         be:a6:fb:f0:f5:98:8a:c3:a1:b8:b8:7b:fd:25:a3:8b:01:c0:
         9c:2a:ed:d4:8b:80:c9:a9:ea:65:a2:1e:0f:72:17:7b:d1:67:
         8f:4f:15:67:37:e6:24:31:aa:b0:7a:94:91:73:e8:b3:e3:09:
         89:a3:81:e1:eb:a3:93:f1:c8:ea:e8:a8:cb:3d:9a:e6:cc:f5:
         70:4c:3f:3d:da:4f:df:a0:d8:e7:24:84:9d:b7:10:b6:7b:3e:
         d3:7d:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org