Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa
File:                     3139302e382e3138342e302f32312d3234203d3e203532343733.roa (raw, json)
Hash identifier:          8/hxkvYj95fqWjHvRJ7uuS2bHIJaApVhDJBGCo1qxXU=
Subject key identifier:   6D:EA:4A:04:D8:45:67:85:D3:33:9B:75:30:74:EA:5F:8E:A3:D1:12
Certificate issuer:       /CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
Certificate serial:       71AE8A926EE6769B4863FCFEF8FFBAE1DA19E82D
Authority key identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa
Signing time:             Tue 05 Mar 2024 18:00:40 +0000
ROA not before:           Tue 05 Mar 2024 17:55:40 +0000
ROA not after:            Tue 04 Mar 2025 18:00:40 +0000
asID:                     52473
IP address blocks:        190.8.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ae:8a:92:6e:e6:76:9b:48:63:fc:fe:f8:ff:ba:e1:da:19:e8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
        Validity
            Not Before: Mar  5 17:55:40 2024 GMT
            Not After : Mar  4 18:00:40 2025 GMT
        Subject: CN=6DEA4A04D8456785D3339B753074EA5F8EA3D112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:56:5c:a3:51:8c:67:d7:a5:2d:1b:cb:7b:
                    4c:34:22:17:b1:ae:82:dd:bc:3e:2f:91:42:36:61:
                    d2:27:dc:1b:2d:2c:d7:e4:5d:dc:b5:79:67:98:1c:
                    74:56:16:12:d9:0d:56:1b:d8:83:1a:a4:57:c4:0d:
                    5a:70:84:ed:53:11:fe:c1:42:20:0e:a2:a5:e8:ec:
                    c4:cb:1b:93:e0:b8:fe:f9:41:f3:cd:45:52:d7:9c:
                    1b:46:c3:a5:5e:64:5c:00:25:7e:34:c3:bd:c3:4c:
                    2f:d2:c4:40:f8:27:72:b0:af:8e:e9:79:0f:e1:f9:
                    22:43:4f:fc:59:3d:8a:de:28:f3:66:9c:d8:3f:a2:
                    d7:1c:ab:d5:b0:10:eb:a2:4b:5d:01:a1:4f:4d:d0:
                    a4:e4:7d:ba:03:2b:d8:e2:04:c1:0e:cd:18:a3:44:
                    52:be:20:08:43:7a:72:b3:3c:2c:45:ab:a9:09:07:
                    08:2d:6d:1e:4e:93:ff:e0:82:4a:2d:35:73:db:9d:
                    29:fc:b1:28:e7:84:eb:0f:07:96:14:8a:76:a6:4f:
                    13:60:67:9c:8b:a1:f1:aa:fd:34:99:5b:b6:46:79:
                    ee:8d:9e:03:72:e9:fa:3b:d2:f6:60:4e:26:a6:42:
                    ca:be:2b:9e:a9:f5:ce:4e:1d:a0:ab:80:54:58:e3:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:4A:04:D8:45:67:85:D3:33:9B:75:30:74:EA:5F:8E:A3:D1:12
            X509v3 Authority Key Identifier:
                keyid:D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:21:96:92:45:b1:ce:9c:2f:ba:85:e6:4d:40:7f:33:00:e9:
         dc:ad:51:45:87:37:b8:64:67:9f:d6:f0:d2:70:ba:e7:bd:84:
         ea:36:1d:6e:25:6b:77:03:58:fc:07:a2:52:a9:95:3c:af:49:
         6e:c5:b3:90:95:3b:74:ff:fb:ff:82:9f:8f:52:40:3b:8a:c9:
         93:35:31:a0:37:a4:d5:f4:52:55:94:42:36:df:08:5a:2f:8c:
         e2:69:52:b8:6d:59:f3:7d:43:8c:fd:d6:89:08:67:30:96:4d:
         5e:df:fc:48:f9:ae:54:0a:a9:09:0f:f0:05:c9:3d:c8:e1:fa:
         d0:b7:fd:bf:07:aa:3a:64:fb:d1:ec:68:11:e1:2b:84:27:7d:
         51:9f:bd:a6:b6:e1:e7:1b:55:9a:31:1e:9b:ff:a0:00:a6:a4:
         86:4b:e5:1c:61:73:69:a4:12:7b:1a:86:91:42:c3:c7:c1:c5:
         f7:7c:29:bb:df:0f:2a:e8:e5:ac:ee:1a:7c:b1:ef:84:9a:5e:
         95:5e:98:0d:68:49:77:1b:89:e7:ba:b2:cd:e0:66:1b:da:d4:
         f0:4f:b0:02:e7:a0:93:fb:fa:09:00:f8:d4:89:6f:46:34:7e:
         5b:2f:3e:e7:44:72:95:c0:bf:e2:1b:71:24:b5:44:42:a5:d4:
         04:83:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org