Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37372e302f32342d3234203d3e2037303138.roa
File:                     3139302e39332e37372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          1wW56VhwrvROSCbVDI50hyYsbsKooWbPNGloucROzp0=
Subject key identifier:   00:F0:F0:47:43:02:C1:DC:31:76:C8:B4:76:E4:EC:8C:09:CA:FB:79
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2DF81E98BD5237F98023CA5735AF50EDBD69A7CB
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37372e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 05 Mar 2024 18:18:21 +0000
ROA not before:           Tue 05 Mar 2024 18:13:21 +0000
ROA not after:            Tue 04 Mar 2025 18:18:21 +0000
asID:                     7018
IP address blocks:        190.93.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:1e:98:bd:52:37:f9:80:23:ca:57:35:af:50:ed:bd:69:a7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:21 2024 GMT
            Not After : Mar  4 18:18:21 2025 GMT
        Subject: CN=00F0F0474302C1DC3176C8B476E4EC8C09CAFB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:2d:d4:3e:11:b0:a1:95:f2:2c:8f:f9:f8:
                    59:e0:24:64:a1:4f:3f:3e:88:d5:c1:04:11:1e:8e:
                    88:9d:d7:d9:59:2e:1a:e8:ad:dc:cb:2f:ff:da:d8:
                    e3:41:c0:6f:23:5a:1b:70:30:17:0e:d1:f4:dd:e9:
                    05:b4:e4:d7:3c:d8:01:15:48:7a:e2:3a:a8:77:d8:
                    bf:a7:ee:a7:f8:70:11:64:ad:20:1d:23:79:ab:f5:
                    39:92:ce:69:15:2e:69:77:6f:2f:3d:b7:52:6e:88:
                    44:ce:73:0e:5e:41:80:9b:90:45:94:22:6d:32:77:
                    fd:9a:87:83:37:df:31:ab:11:23:47:5e:37:6e:b9:
                    09:61:c6:4e:33:cc:94:8e:b4:29:06:eb:5d:ca:5e:
                    a1:14:01:8f:ba:5c:69:6c:3e:dd:b6:09:15:53:b3:
                    9a:79:b5:1b:de:e3:c0:7c:e6:f4:c9:27:df:53:20:
                    1d:0a:61:e0:aa:9c:64:7b:bb:29:be:30:a3:83:dc:
                    98:bc:af:52:08:1c:d0:ea:9b:e8:21:02:97:66:5f:
                    5e:e2:d1:2e:6e:30:6c:df:21:f8:42:98:07:1f:b5:
                    f5:07:e0:0f:8a:78:3e:78:4d:dc:be:78:26:99:fa:
                    83:a1:08:18:a8:e3:dc:6b:7b:2d:8e:cc:69:57:16:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F0:F0:47:43:02:C1:DC:31:76:C8:B4:76:E4:EC:8C:09:CA:FB:79
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:bc:2e:3c:1c:f5:47:2a:08:aa:77:ab:50:16:04:4b:4b:
         06:59:9d:07:73:96:67:b1:88:34:db:66:31:9d:06:15:ec:d2:
         49:e9:01:07:ef:57:23:09:2c:a8:20:12:49:b0:e8:4c:97:7c:
         63:38:1a:09:53:0f:6e:c9:0b:e6:8f:68:ed:72:f4:e3:0d:87:
         5c:ff:ca:54:a4:23:4a:66:e5:3f:06:a5:33:ab:95:17:f8:1c:
         11:1d:91:dd:48:fd:a2:bb:e0:08:de:d7:5a:b8:60:67:04:cb:
         2f:a0:1f:ba:4e:a2:fe:b7:38:4e:ff:53:2c:c6:c3:b5:f0:4d:
         63:d0:e8:2c:0c:2c:0e:69:54:7b:38:a9:99:81:7b:85:df:bb:
         07:9a:35:53:d9:2a:06:8c:a7:90:38:a1:a0:83:4b:e8:aa:96:
         4a:d8:0e:d7:4f:00:09:78:c7:52:be:7a:44:3b:22:e5:d3:cc:
         7f:28:57:fa:d8:53:be:2d:5b:7d:b3:0b:03:e5:d9:08:6e:f7:
         05:eb:9f:72:ce:a6:2d:e7:8f:c7:72:db:ac:da:0d:97:ca:53:
         e7:65:e3:b9:1a:49:6d:72:5d:89:94:39:84:5a:2b:b0:b8:fc:
         cc:23:64:c8:d3:cd:b9:8e:09:ce:e6:70:c2:2c:10:59:cb:d9:
         b1:17:b4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org