Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e203331373135.roa
File:                     3139302e39332e39342e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier:          +o5iVbleCxwfwC6FX4Bfvbyt/rqdsBHU2Xir0+t++Z0=
Subject key identifier:   17:40:65:94:6C:90:72:45:54:71:6F:21:6C:C4:1C:D6:DF:F8:87:FF
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       46F37E9811E925EFF3322DC320AAEF4EF360DC61
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e203331373135.roa
Signing time:             Thu 15 Aug 2024 13:50:00 +0000
ROA not before:           Thu 15 Aug 2024 13:45:00 +0000
ROA not after:            Thu 14 Aug 2025 13:50:00 +0000
asID:                     31715
IP address blocks:        190.93.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f3:7e:98:11:e9:25:ef:f3:32:2d:c3:20:aa:ef:4e:f3:60:dc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Aug 15 13:45:00 2024 GMT
            Not After : Aug 14 13:50:00 2025 GMT
        Subject: CN=174065946C90724554716F216CC41CD6DFF887FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:a1:d3:7d:5c:62:04:44:8a:9b:7b:cb:0b:
                    19:29:73:be:fd:eb:9a:e1:82:30:a4:f8:ad:ce:ff:
                    2c:80:ef:27:86:d4:69:10:4c:c0:bf:b3:b1:0c:d0:
                    c4:c6:de:41:7f:fe:19:a4:04:cd:62:73:91:21:01:
                    f6:58:44:b3:3d:f4:08:48:98:b6:3a:36:fa:e7:80:
                    8f:56:63:cc:98:3d:fb:22:11:6c:a1:f4:c9:a5:5c:
                    2a:53:62:31:3b:eb:39:e4:dd:94:32:1f:00:06:b0:
                    a0:f8:7d:d1:d7:cd:84:03:56:b0:61:57:46:c4:14:
                    32:e5:71:47:a8:cd:d5:7b:bf:38:3a:99:85:0b:87:
                    f0:7b:08:45:bd:ac:41:de:92:6c:96:da:7c:5b:e0:
                    9b:6d:6a:d3:a6:7a:ee:db:67:32:f6:23:d2:3b:b2:
                    ad:9f:91:e1:56:17:30:5e:72:80:10:9e:ea:c6:f0:
                    fa:21:e1:2e:5f:d6:3e:a7:3c:7a:d1:00:bd:6f:e4:
                    25:04:53:c3:99:37:ea:36:8f:4d:cb:a8:12:69:31:
                    7f:0d:50:79:fe:dd:6c:6a:32:82:c3:98:b8:c7:30:
                    e0:1c:97:d1:35:80:72:8d:4d:8d:61:7a:7a:cc:c0:
                    b9:22:e0:6d:2c:b0:55:06:a1:f2:54:d8:4e:e0:e1:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:40:65:94:6C:90:72:45:54:71:6F:21:6C:C4:1C:D6:DF:F8:87:FF
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39342e302f32342d3234203d3e203331373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:8b:0a:06:10:f4:ec:00:2c:65:0e:c5:b2:10:b5:7e:a0:
         07:08:b4:fb:f6:3e:62:c8:17:ec:07:df:e3:17:1e:67:7e:44:
         da:65:84:52:27:65:43:ba:51:4c:30:fb:58:74:d7:92:34:0f:
         fa:01:ed:dc:92:37:fe:01:a8:e2:ae:c5:e1:5e:23:06:99:93:
         d6:b3:dc:cf:20:a4:19:d9:c7:4c:27:0f:e3:8c:8a:d9:d7:31:
         37:d2:7d:89:07:86:5c:da:c4:83:ba:f6:db:04:34:dc:1e:a9:
         b8:02:73:72:01:17:13:89:e0:ca:67:9b:81:0f:f3:34:e9:53:
         15:a1:7b:68:75:5a:30:7d:18:3d:6d:ad:fb:e9:84:66:88:8f:
         af:a5:da:a9:33:d2:65:ea:d3:75:98:e5:89:84:12:68:a4:0e:
         ea:0c:c4:85:58:45:ad:ef:55:c4:59:8e:a4:e5:72:e3:c4:57:
         9e:e4:21:03:5b:71:4d:6b:f7:99:66:15:73:83:e4:1d:86:4f:
         89:5c:f6:7e:d0:65:aa:ba:5b:3f:3f:08:53:c8:8e:59:08:99:
         5a:ed:b3:87:28:89:b2:aa:a3:95:84:90:cb:a9:5e:31:6e:1c:
         a8:94:e8:1f:ed:74:15:f7:0e:d9:b7:ef:24:08:27:f3:28:5b:
         06:16:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org