Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231302e302f32342d3234203d3e203532333632.roa
File:                     3139302e3130362e3231302e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          a0Jhn6qnkcggHtkOOReGDGgZS1fcCsNZU+OSRP7PYIk=
Subject key identifier:   AC:48:18:81:4C:B7:1A:15:D4:AE:0D:44:FE:0E:CA:E8:3E:3D:5F:D6
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       692B0D87BCB01BF759CF7AB0261EB5B2090A98DC
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231302e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     52362
IP address blocks:        190.106.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2b:0d:87:bc:b0:1b:f7:59:cf:7a:b0:26:1e:b5:b2:09:0a:98:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=AC4818814CB71A15D4AE0D44FE0ECAE83E3D5FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:9b:8e:ba:a8:18:88:de:b5:12:3a:9d:c8:
                    ed:73:f8:a7:e9:fc:e9:53:78:d9:f1:10:6c:d0:e8:
                    49:6b:d2:8e:67:4c:5a:50:cb:11:7b:a8:10:1e:2e:
                    0c:c9:fb:8f:59:7d:1e:36:80:cc:9a:c0:43:5f:c6:
                    6f:2c:9e:20:9d:f4:c3:f0:26:b6:6f:50:d5:b0:02:
                    d4:dd:79:17:62:d0:13:1d:ba:6f:a3:9b:f0:61:b5:
                    18:7d:60:81:c1:33:94:fa:c7:a3:6e:93:2a:3c:08:
                    31:3e:93:a4:30:1e:81:a2:5c:9e:75:ee:ca:76:21:
                    1b:a2:b1:94:0b:69:39:83:85:09:c6:36:c8:e0:2f:
                    ad:73:4c:59:67:07:67:05:1f:c3:e0:10:14:99:4f:
                    75:22:96:94:9c:81:b8:e4:c1:f2:94:7f:07:a0:0c:
                    a1:31:f6:c4:87:50:e2:30:67:49:c2:a7:40:5c:0e:
                    72:b6:8f:46:d5:23:19:41:f7:05:6e:a0:1b:5c:09:
                    cf:f6:88:ea:13:ce:f3:3e:e0:2a:d4:78:7c:19:35:
                    63:88:59:4e:3a:44:50:1d:72:03:1c:ce:d0:a3:fc:
                    a3:fe:df:4e:22:83:c2:36:7c:9d:df:0f:08:2a:b5:
                    cf:40:6c:9d:6d:22:a3:ea:12:dc:85:9d:df:d4:c3:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:18:81:4C:B7:1A:15:D4:AE:0D:44:FE:0E:CA:E8:3E:3D:5F:D6
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231302e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:70:a7:0c:91:15:1c:e2:22:84:af:04:48:8e:ee:06:8b:
         aa:6e:64:d6:fe:3d:9f:50:65:a9:09:e3:1f:a1:4e:55:03:60:
         23:a1:3d:e2:9e:06:f4:20:97:20:45:d4:ca:d1:0a:2e:d3:b4:
         75:06:e8:45:b9:98:21:fd:7e:b1:54:74:b7:a7:c1:4c:79:6a:
         ac:ed:f6:38:f8:70:26:47:87:9e:3d:7d:1a:bd:26:08:20:19:
         bf:c7:8a:b8:dd:31:85:8c:77:96:68:8d:b3:d4:bf:09:67:bd:
         af:e9:1a:c8:72:91:d7:de:f3:b2:ce:b3:b5:39:96:cb:23:24:
         4e:af:79:3e:cb:e5:fa:50:b0:89:c3:bd:be:0b:de:a5:cc:5e:
         fd:84:5c:4f:c1:06:9f:a1:b5:9f:3b:6e:eb:92:25:63:fd:b7:
         67:66:ff:c3:fa:de:e1:40:64:d9:b7:f0:7f:11:a2:26:d7:5f:
         c0:58:4b:e8:59:04:aa:4c:80:83:e1:f0:89:3c:86:fb:44:59:
         85:d9:77:ce:1b:85:29:5b:7e:5d:e4:1b:f4:48:2f:17:33:c7:
         7b:fa:31:2d:5c:d4:17:b7:3f:70:d4:b6:52:22:8b:f1:64:92:
         a6:b3:28:c1:6b:74:79:cd:54:5d:e5:47:14:38:93:58:08:47:
         67:06:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org