Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/683D91B2BE35C8D1B3C57C1252DC7947EA2D728984294755A6C07F98B0F59893/0/3139302e3130372e3137322e302f32322d3234203d3e20323634383536.roa
File:                     3139302e3130372e3137322e302f32322d3234203d3e20323634383536.roa (raw, json)
Hash identifier:          1KwZGFU20A4APhG1lxIdFo2kRGZbzoTbQMGHQqvYsJI=
Subject key identifier:   DA:34:CA:FD:7C:EF:69:84:6A:4F:DB:97:1B:D2:61:00:90:48:6F:37
Certificate issuer:       /CN=E0EFC6C939BFC66C90DBC630A2B49278F03BBA70
Certificate serial:       37601D3259548FE0979C4A2CC5FDB251940399CE
Authority key identifier: E0:EF:C6:C9:39:BF:C6:6C:90:DB:C6:30:A2:B4:92:78:F0:3B:BA:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0EFC6C939BFC66C90DBC630A2B49278F03BBA70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/683D91B2BE35C8D1B3C57C1252DC7947EA2D728984294755A6C07F98B0F59893/0/3139302e3130372e3137322e302f32322d3234203d3e20323634383536.roa
Signing time:             Wed 08 May 2024 20:35:00 +0000
ROA not before:           Wed 08 May 2024 20:30:00 +0000
ROA not after:            Wed 07 May 2025 20:35:00 +0000
asID:                     264856
IP address blocks:        190.107.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/683D91B2BE35C8D1B3C57C1252DC7947EA2D728984294755A6C07F98B0F59893/0/E0EFC6C939BFC66C90DBC630A2B49278F03BBA70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/683D91B2BE35C8D1B3C57C1252DC7947EA2D728984294755A6C07F98B0F59893/0/E0EFC6C939BFC66C90DBC630A2B49278F03BBA70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0EFC6C939BFC66C90DBC630A2B49278F03BBA70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:60:1d:32:59:54:8f:e0:97:9c:4a:2c:c5:fd:b2:51:94:03:99:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0EFC6C939BFC66C90DBC630A2B49278F03BBA70
        Validity
            Not Before: May  8 20:30:00 2024 GMT
            Not After : May  7 20:35:00 2025 GMT
        Subject: CN=DA34CAFD7CEF69846A4FDB971BD2610090486F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:7b:77:95:a6:1e:c9:29:18:93:70:70:d8:
                    d2:e2:88:1f:11:ba:12:57:ea:57:61:60:92:47:9f:
                    ff:28:e4:d5:a0:be:30:d4:bd:10:8b:c4:9b:de:40:
                    c5:f0:db:b1:44:5a:0c:5a:8d:c3:17:5b:b5:a3:c8:
                    3e:c4:ff:04:dd:11:30:b7:ad:49:14:51:6e:80:5b:
                    a7:32:62:36:4c:69:71:5e:c0:96:25:8e:17:33:01:
                    f8:44:cd:69:46:b0:40:a4:d6:39:f4:eb:a9:12:fd:
                    2e:7f:86:6e:06:9f:be:99:99:59:c6:b1:92:ac:6e:
                    87:a1:1e:e7:43:34:75:ea:ba:63:72:da:31:ec:20:
                    20:5f:17:6f:d9:98:65:10:cd:be:0a:80:74:d4:4e:
                    bf:9c:4d:5e:ac:0d:8f:a0:b4:e5:ce:23:c5:8e:7e:
                    4a:94:8f:f1:7b:08:bf:87:1f:c6:70:29:14:70:76:
                    29:a6:fc:77:f2:ff:92:e3:7a:bc:90:9e:f7:1e:50:
                    08:aa:51:9b:6d:3d:5f:c1:a5:b7:27:e8:db:91:62:
                    28:6b:a6:ff:39:f6:9a:86:5a:a1:2b:b2:b5:ae:fb:
                    2b:6f:f4:40:5c:eb:c3:c7:c9:9d:82:e9:7b:76:60:
                    18:ac:fa:c2:28:5b:d7:61:6b:d8:6c:7e:3f:59:23:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:CA:FD:7C:EF:69:84:6A:4F:DB:97:1B:D2:61:00:90:48:6F:37
            X509v3 Authority Key Identifier:
                keyid:E0:EF:C6:C9:39:BF:C6:6C:90:DB:C6:30:A2:B4:92:78:F0:3B:BA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/683D91B2BE35C8D1B3C57C1252DC7947EA2D728984294755A6C07F98B0F59893/0/E0EFC6C939BFC66C90DBC630A2B49278F03BBA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0EFC6C939BFC66C90DBC630A2B49278F03BBA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/683D91B2BE35C8D1B3C57C1252DC7947EA2D728984294755A6C07F98B0F59893/0/3139302e3130372e3137322e302f32322d3234203d3e20323634383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:6f:1b:ae:e3:b2:99:01:81:fa:41:e3:36:84:2b:22:9d:
         27:45:73:7a:e0:d1:11:78:cd:44:05:3f:0b:cb:b8:23:dc:c8:
         9f:96:8c:52:31:2b:4e:af:32:ec:94:7c:d5:03:bf:60:d5:03:
         4f:11:37:0b:08:e8:8c:a8:f9:d5:10:2d:0b:99:8d:f1:12:b7:
         58:e0:4c:03:a2:1a:95:32:c7:c6:6d:39:b3:12:27:45:d3:62:
         5d:3e:88:f0:de:19:da:0e:60:83:c5:65:c6:c4:a3:26:8d:0f:
         64:36:fc:d3:9d:cd:42:67:2a:b8:e6:bb:ef:13:ea:c1:10:af:
         ca:a8:c6:f4:c9:c9:11:6e:08:e5:c1:87:ea:2f:ee:b5:7c:c8:
         47:b7:73:7b:7a:d7:2d:53:20:84:d8:ec:ac:2a:3f:47:5c:69:
         b0:58:8d:e9:63:25:e0:02:fc:b0:f6:6f:12:03:a3:a6:2d:3f:
         95:02:b1:68:f6:d4:0e:03:52:e3:6b:16:77:d9:2b:81:37:4b:
         45:70:9a:4b:64:95:b5:0e:a1:bb:3f:0d:f3:51:7e:65:74:3a:
         62:5b:a5:75:30:0b:1c:c3:b1:83:db:a8:23:28:41:32:f0:5b:
         ad:33:b4:12:f3:e1:03:aa:95:d3:b9:0a:a4:9b:71:fb:52:e3:
         5f:a2:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org