Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          YBgTHJ3zMjd+ba+N08y/RnrukQAppTzzn04pSD9GCYM=
Subject key identifier:   32:CA:A2:1F:7B:9E:5B:BC:D0:28:9F:8D:C9:3C:B2:0D:8E:C8:6A:35
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       55921F5C62A589D4E9D8A66D890CCD94942AFCA3
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:55 +0000
ROA not before:           Tue 05 Mar 2024 17:35:55 +0000
ROA not after:            Tue 04 Mar 2025 17:40:55 +0000
asID:                     262171
IP address blocks:        190.93.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:1f:5c:62:a5:89:d4:e9:d8:a6:6d:89:0c:cd:94:94:2a:fc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:55 2024 GMT
            Not After : Mar  4 17:40:55 2025 GMT
        Subject: CN=32CAA21F7B9E5BBCD0289F8DC93CB20D8EC86A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:3a:e9:98:01:16:f1:a4:4f:e5:18:a7:0f:
                    0c:01:c5:19:59:af:cb:47:31:23:4a:94:a6:4c:90:
                    bb:3b:6c:81:74:d4:9c:15:99:37:ac:2a:59:ad:48:
                    d3:f6:f0:63:6e:93:7b:43:eb:0a:f6:da:dc:c3:31:
                    6b:5e:91:47:06:3e:c7:a3:00:bd:79:ab:55:44:f6:
                    80:85:ce:c8:07:66:0f:df:9a:ea:90:19:fe:47:16:
                    2f:0f:1c:ea:69:c9:3e:e0:5a:27:5d:bd:56:74:bc:
                    bc:ce:61:ea:59:a6:72:43:1b:ce:6b:41:ce:d1:9c:
                    57:b8:69:04:5b:32:91:63:dc:5c:91:70:09:b3:cf:
                    4e:92:f4:c2:ec:77:1f:a7:06:d0:91:4b:34:ab:c4:
                    3f:8b:62:71:d4:d9:39:e3:bb:ba:1e:4e:b4:55:78:
                    80:91:73:18:6b:0b:d7:df:b5:96:d7:0e:49:6a:c8:
                    08:4b:e0:83:dc:b7:4d:ca:25:24:60:da:a7:69:8c:
                    50:d3:c8:00:64:57:13:84:72:98:1e:e2:1b:57:95:
                    12:e6:31:ab:8c:ce:78:90:1b:1c:d7:cb:3f:cd:19:
                    a3:3e:80:af:9d:25:d2:53:11:91:09:a1:3f:f1:08:
                    69:20:2c:0d:27:20:f1:3c:9e:c2:db:f1:49:61:21:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:A2:1F:7B:9E:5B:BC:D0:28:9F:8D:C9:3C:B2:0D:8E:C8:6A:35
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:c0:c7:1a:c7:b5:7d:3a:42:45:80:78:15:b2:57:bc:6f:
         3d:08:d5:e3:77:fb:7a:a3:19:86:01:b0:44:c3:31:11:63:18:
         c4:3d:e1:7b:85:6f:a9:58:bd:0d:2f:98:7c:45:ef:d7:2c:dc:
         8d:c0:88:73:76:b4:1e:c8:df:98:32:cc:da:8e:d0:ff:c1:8f:
         82:14:75:89:b0:e2:69:89:53:7c:11:25:28:f8:e6:ce:94:9b:
         62:f8:fb:ec:e1:09:ff:2d:f4:1e:42:0e:f3:cd:4f:81:a0:84:
         73:ab:4c:0c:ff:98:d4:e2:c1:63:87:fc:15:0a:4e:af:d9:0e:
         06:ba:e9:e2:a7:6b:4e:cd:13:da:84:af:53:79:08:b6:c4:02:
         67:99:ea:fc:36:8b:fb:bb:ef:c6:b0:7f:85:84:c6:5c:8b:38:
         7c:f6:82:ad:2d:0c:b7:b0:cb:a4:98:be:a1:2f:00:ac:e7:2e:
         1b:f5:2f:b3:f5:dd:72:b5:67:f7:08:37:90:25:94:d2:9c:fa:
         2a:b1:34:2b:67:ca:7a:7a:90:69:60:71:c0:4f:08:47:27:93:
         27:86:b2:91:30:fb:f6:ea:0d:af:f2:02:cb:ff:2c:de:a0:f4:
         2e:c3:7a:eb:14:fd:4a:bb:b6:50:0a:d0:ee:1d:35:8b:df:f3:
         8c:15:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:05:34 2024 by rpki-client on console-fra.rpki-client.org