Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa
File:                     3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          +2hLBGwaKcWrEU/iVd+UjwdoD3OYrrnqywXxJn+xZKg=
Subject key identifier:   07:52:D1:DF:D9:21:34:3C:EF:F9:0B:4A:7A:F5:3D:29:43:35:04:C0
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       60849D1D40666FDFB145260E47B0A3FBB89338C9
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     23243
IP address blocks:        190.106.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 18:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:84:9d:1d:40:66:6f:df:b1:45:26:0e:47:b0:a3:fb:b8:93:38:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=0752D1DFD921343CEFF90B4A7AF53D29433504C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:27:98:f9:2a:74:7c:19:bd:f9:b4:8e:97:
                    02:ba:5c:25:cc:e4:35:8d:8a:6e:75:79:88:31:6f:
                    45:86:8d:87:3d:57:0f:f5:be:92:92:b4:c2:5e:83:
                    03:ed:96:d3:e1:32:56:b1:d5:22:a7:03:d3:8c:cd:
                    84:62:e9:1a:31:1d:48:e2:79:d3:ff:1b:08:94:64:
                    bd:4f:79:bd:97:51:06:56:d0:54:c0:63:a5:6d:c0:
                    18:5f:88:82:a9:eb:fc:9b:26:09:73:34:4a:83:9a:
                    f8:e0:5c:37:2a:5f:66:d4:e3:14:06:d9:42:1d:55:
                    46:9b:de:bc:b2:87:dc:8f:bb:02:95:f7:43:16:4a:
                    72:85:08:c5:be:f2:ca:3b:a8:9e:12:1d:a1:d0:a1:
                    3e:c2:01:af:04:f6:cf:e2:e2:c1:ee:b1:ef:e1:a7:
                    f4:84:02:db:87:08:30:39:ea:62:69:c8:33:64:d2:
                    d0:be:96:4f:cd:81:0b:b7:3c:1a:97:34:7b:69:06:
                    ec:2d:d6:11:ec:22:57:5d:6c:e8:d2:29:a5:e5:39:
                    50:4b:bf:86:b0:48:1a:40:54:ee:d1:8d:87:00:9b:
                    11:c9:1a:92:4f:d9:ed:32:4b:91:f5:b8:a7:5b:de:
                    d1:ea:db:0d:65:7e:bd:ca:03:78:49:74:cc:e6:e5:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:52:D1:DF:D9:21:34:3C:EF:F9:0B:4A:7A:F5:3D:29:43:35:04:C0
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:9b:8d:ab:b5:09:45:63:79:55:92:0e:26:07:de:fb:dd:
         6c:7a:21:d7:09:f8:a8:b9:b8:e1:87:f6:06:19:a1:4e:6a:85:
         d3:85:cb:f6:03:81:3c:4f:80:04:98:c4:0e:3f:98:7a:bb:2a:
         51:5c:5e:fb:2e:de:33:33:44:6a:1b:60:5c:12:f1:32:1c:e9:
         e1:25:92:8a:9f:c6:cc:c2:3f:11:fb:0f:c6:83:6d:b9:f8:dd:
         93:00:54:59:9a:e8:c1:29:8a:f4:e9:f0:79:bf:89:9e:26:51:
         a6:23:d5:af:b2:dd:9b:1a:6e:48:1f:0e:99:4f:3d:55:9c:dd:
         55:be:52:8b:f7:55:e2:30:8a:27:9a:47:95:88:84:4d:6d:c4:
         50:59:46:ee:12:eb:ef:65:9e:e2:40:2d:f3:c1:14:42:74:e6:
         16:e4:30:7b:4d:b0:8c:41:b1:b4:98:6c:65:d9:9c:d6:7f:85:
         6e:fd:b0:5d:8f:55:e8:72:e7:cd:b1:ec:0f:98:1c:3f:13:43:
         c9:b9:08:6a:83:98:be:30:b8:b6:24:bf:b5:73:15:d3:a7:c6:
         67:30:dc:21:7a:1c:a7:0a:fb:49:d9:63:b5:0d:10:73:19:60:
         c8:02:e3:a0:a3:d9:96:3b:fe:47:fc:31:f2:e1:66:49:9b:e2:
         f9:0e:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:27 2024 by rpki-client on console-ams.rpki-client.org