Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e31302e3132382e302f31372d3234203d3e203134353232.roa
File:                     3139302e31302e3132382e302f31372d3234203d3e203134353232.roa (raw, json)
Hash identifier:          eX/zIQ48aGGwiWmPfyCs3MkF36UhjzBzW3wbjrkwMQw=
Subject key identifier:   C8:C8:95:6D:28:64:A7:2C:0E:1D:8E:AB:88:2A:E6:F2:5C:05:CF:99
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       3FD2B83B7B0D4181778FED30B65A6FB7B8B075FF
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e31302e3132382e302f31372d3234203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:49 +0000
ROA not before:           Tue 05 Mar 2024 18:15:49 +0000
ROA not after:            Tue 04 Mar 2025 18:20:49 +0000
asID:                     14522
IP address blocks:        190.10.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:b8:3b:7b:0d:41:81:77:8f:ed:30:b6:5a:6f:b7:b8:b0:75:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:49 2024 GMT
            Not After : Mar  4 18:20:49 2025 GMT
        Subject: CN=C8C8956D2864A72C0E1D8EAB882AE6F25C05CF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:cd:81:11:11:f9:48:65:8c:2b:47:f8:7d:
                    2f:b0:3c:fe:f1:9d:0e:c2:b0:90:56:74:05:2b:3f:
                    23:6d:a4:12:18:ed:da:bb:12:a4:78:79:cd:6a:11:
                    07:56:91:4d:6b:27:02:cb:7b:8e:22:9b:22:ba:cb:
                    63:7a:f0:e3:38:6a:b0:ad:1a:c4:4b:a4:17:bd:fd:
                    21:5f:05:a0:ac:38:80:cb:0a:12:1a:b1:37:d9:7a:
                    63:33:60:5f:9c:ec:51:fb:a5:36:26:46:21:c6:54:
                    45:a4:0f:de:91:81:5f:5d:54:8b:e6:d6:52:8e:db:
                    6a:d6:c7:06:8a:97:3d:1d:55:47:23:af:78:3f:83:
                    e0:d6:d4:b0:44:1c:a9:f2:39:b4:07:54:c0:06:fb:
                    bd:97:17:a7:f4:78:4c:fb:c9:8b:ee:3d:84:b4:d0:
                    d4:89:f5:09:3f:ef:7a:19:04:85:44:ea:e8:60:5f:
                    7f:ee:41:99:a2:4e:ca:f5:c0:6b:36:27:e8:6f:b5:
                    0d:0e:c3:00:e6:61:3b:db:07:85:7b:82:3e:af:8a:
                    13:07:4c:90:27:f2:ee:f3:7e:49:43:32:d0:78:e6:
                    0f:08:37:6e:25:90:da:9c:78:53:1b:c8:fa:ba:83:
                    66:fa:b7:4e:3a:b5:5b:79:34:cc:fa:16:65:2c:81:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:95:6D:28:64:A7:2C:0E:1D:8E:AB:88:2A:E6:F2:5C:05:CF:99
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e31302e3132382e302f31372d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:ae:82:2a:c7:99:3a:17:24:c4:e9:e9:84:5e:99:7b:76:
         c7:c1:b5:65:63:45:90:3b:7f:23:e3:8a:81:91:f2:b9:58:b1:
         15:72:a1:4d:8a:09:74:68:f4:a3:00:91:09:c0:94:67:fa:ab:
         79:79:52:2e:cd:77:33:1c:6c:68:11:2d:14:9e:fc:03:62:20:
         89:e9:b6:6a:7a:88:26:f9:a8:51:29:95:27:3e:70:eb:81:56:
         d3:1d:14:a8:23:60:7a:f3:24:cb:c4:33:34:d0:82:29:c1:72:
         23:35:f9:87:a0:95:06:c2:38:0d:04:89:aa:33:f3:86:c3:1a:
         81:96:ec:bb:7f:7d:d4:88:5c:c0:29:eb:be:41:bb:f9:d6:f4:
         c4:79:5b:70:ab:50:d6:ce:28:0c:a0:78:58:34:85:4f:1e:fb:
         9c:96:de:75:b3:2d:b2:cc:15:1b:9f:66:ad:bc:ef:bc:d9:18:
         58:4e:65:7d:4e:31:3d:c5:02:f5:fa:2c:0c:fd:74:1c:74:30:
         f3:87:76:be:e2:60:ca:07:67:a6:1f:ca:66:f5:35:af:b0:8f:
         fc:ea:65:88:68:d1:4b:0b:8a:6c:83:d0:51:b5:af:41:44:6c:
         ad:d0:6e:28:2c:56:df:e1:a2:91:6f:aa:5d:32:cf:4e:e4:a4:
         ec:3b:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org