Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa
File:                     3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa (raw, json)
Hash identifier:          HOUyuL0cvaJ0dn9mkYXPeoW9y9Z4IvQy7+5QyG8kYig=
Subject key identifier:   30:D4:78:64:7E:8D:09:D8:3A:2E:A4:19:40:A8:0E:15:51:DE:1B:D3
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4DCEA6708769731F0C0BCFCFA2E10CDA0A76C936
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:41 +0000
ROA not before:           Tue 05 Mar 2024 18:02:41 +0000
ROA not after:            Tue 04 Mar 2025 18:07:41 +0000
asID:                     11315
IP address blocks:        190.197.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ce:a6:70:87:69:73:1f:0c:0b:cf:cf:a2:e1:0c:da:0a:76:c9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:41 2024 GMT
            Not After : Mar  4 18:07:41 2025 GMT
        Subject: CN=30D478647E8D09D83A2EA41940A80E1551DE1BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:b7:c2:8e:ea:1c:f6:f1:a9:aa:24:aa:bf:
                    f2:7c:91:2f:b4:fd:86:b8:8b:ec:75:1a:59:f5:df:
                    3a:1e:b2:de:94:6e:f4:9b:53:9d:00:c3:a7:12:02:
                    ab:8e:e1:9d:a0:3b:15:bb:27:29:08:a5:a8:c7:a9:
                    98:db:35:f0:d7:ed:98:a0:43:9b:8c:27:ab:e3:6d:
                    d6:db:38:53:f9:ec:ed:dc:a8:66:2f:0d:47:b1:9c:
                    37:31:8a:18:8a:20:0c:f8:90:bd:cd:a1:ed:01:e6:
                    1b:7d:8e:ad:b4:44:cb:b1:8b:a9:fe:c3:03:bd:0e:
                    67:0c:7b:15:24:d5:e0:1e:e7:08:d6:8e:39:de:9d:
                    fa:5c:87:2e:96:be:39:51:53:c5:d6:4c:0e:03:44:
                    77:df:70:29:61:cd:be:63:db:7c:f9:56:8d:64:d7:
                    f5:48:7e:dc:d6:53:e6:4e:b5:92:ae:10:40:bb:6c:
                    2d:4c:1a:0d:ea:58:04:26:5a:83:e7:ec:94:14:d6:
                    70:cb:c1:93:4d:7f:69:3e:b4:48:a8:8e:f5:dc:9e:
                    61:60:23:09:de:d5:9e:cc:b6:ae:02:a8:ed:cd:cc:
                    2d:f3:fb:ba:f0:f3:25:fe:f6:56:15:3a:92:12:b2:
                    4f:54:13:f7:b5:bf:e8:8c:52:5a:f6:c6:d6:9e:aa:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:78:64:7E:8D:09:D8:3A:2E:A4:19:40:A8:0E:15:51:DE:1B:D3
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c4:78:bb:72:bc:67:66:b6:7a:06:77:15:bf:42:d2:a8:b2:76:
         17:7e:98:13:0e:55:25:78:06:cc:df:8f:61:1e:7a:27:b6:fe:
         85:53:cc:5e:9d:93:01:eb:4d:8b:d5:71:4e:8c:78:76:c0:27:
         a3:50:ef:75:07:50:bf:f3:c8:60:32:08:c7:07:f3:d8:32:4b:
         94:47:5e:3e:c0:a6:bf:98:03:e2:54:c8:f7:a8:e3:8a:94:24:
         75:ef:27:b0:18:28:f2:69:41:99:fd:a3:c5:64:d1:b7:42:dc:
         bc:7d:d4:a8:60:4c:e1:5d:11:e7:3f:af:b9:47:ba:ce:71:16:
         39:73:53:ca:82:24:bf:8f:25:d0:86:22:28:7d:81:b0:d8:55:
         22:59:50:68:ad:61:ca:07:ed:75:e3:5b:e6:78:a9:ea:a6:90:
         49:ed:ed:76:1e:0b:af:c3:86:ee:8a:ed:ab:d8:6f:06:d1:63:
         e6:28:4f:e4:6a:0a:08:07:ff:9a:cc:48:8b:cb:c5:ef:92:61:
         ae:8f:f7:76:53:9c:3d:b3:f5:61:c9:24:ab:2e:f3:ec:6e:95:
         2c:ce:c7:c6:65:a2:3c:11:42:56:c4:55:f2:26:f4:1a:e3:20:
         78:53:9b:3e:ed:43:e2:57:a2:69:7a:d9:27:5f:56:e8:73:5b:
         18:d6:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org