Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136362e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136362e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          LSKJP6wNYHq+24DrnOdpUy3pqME6JvJJ1MKXp+T5CLE=
Subject key identifier:   D7:EF:6A:42:A5:1D:1E:34:A6:AF:53:2D:2E:EB:AB:D6:4F:1C:3D:E1
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       1BCDF24D139556FDE4FC86E189E7BF3A8C9ACA4C
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136362e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:57 +0000
ROA not before:           Tue 05 Mar 2024 17:35:57 +0000
ROA not after:            Tue 04 Mar 2025 17:40:57 +0000
asID:                     262171
IP address blocks:        190.93.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cd:f2:4d:13:95:56:fd:e4:fc:86:e1:89:e7:bf:3a:8c:9a:ca:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:57 2024 GMT
            Not After : Mar  4 17:40:57 2025 GMT
        Subject: CN=D7EF6A42A51D1E34A6AF532D2EEBABD64F1C3DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:ea:72:02:c5:cf:6d:77:da:0f:2e:e7:ca:
                    9c:ba:9f:c4:e1:8f:93:80:24:f1:45:a4:6b:77:2f:
                    48:bd:fa:b6:3f:80:6e:5d:d4:12:3b:3d:40:53:fb:
                    15:b1:d4:01:d6:25:06:a1:6e:a1:19:36:77:7a:b4:
                    95:8b:49:25:81:66:70:db:5c:12:31:37:7b:b7:1e:
                    ef:fe:a9:df:d7:51:35:88:40:42:5a:44:d2:c5:d0:
                    9b:2c:13:13:ff:f9:81:e8:0a:a4:45:0d:99:4e:ce:
                    c2:df:ff:d9:db:0d:a0:2d:73:83:58:c6:80:35:4e:
                    3b:03:ac:3c:0e:2c:14:ca:9e:aa:2b:06:3d:b7:f3:
                    71:ef:cd:ab:b2:07:3d:7a:b7:5e:c8:ec:5c:f0:1e:
                    a3:78:b2:eb:48:56:4e:39:a2:58:64:93:f7:e7:7d:
                    41:43:12:66:ae:cb:c1:fb:fe:e6:2b:3c:08:8e:82:
                    86:56:9e:68:cb:c4:47:4b:27:d7:4c:8d:33:a2:fe:
                    83:23:fe:55:ca:bd:0b:98:84:03:6b:21:94:3b:d5:
                    89:32:1b:49:1c:f5:40:32:93:31:1e:85:fa:48:16:
                    2b:e8:84:e1:11:df:61:a7:0f:fa:43:8e:67:29:fb:
                    a7:47:43:9f:5f:8c:bc:c2:c1:a2:ab:db:17:5b:cc:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EF:6A:42:A5:1D:1E:34:A6:AF:53:2D:2E:EB:AB:D6:4F:1C:3D:E1
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136362e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:b3:d3:d5:d9:f1:c8:cf:f3:96:95:43:e2:9f:de:c1:c1:
         bb:43:7f:a8:14:b2:97:6b:54:09:af:4e:4b:0c:73:6e:5e:f1:
         75:ec:bd:1d:4b:a0:1b:79:17:80:43:10:c5:d2:4d:6c:a1:da:
         c6:f7:b1:49:b2:f0:e0:69:c6:6c:e1:2a:84:a4:10:f7:dd:62:
         3f:8a:05:53:78:c9:b6:14:52:15:72:8c:52:2d:cc:37:f3:b4:
         ff:da:49:0d:c4:62:c4:9a:ae:91:d5:97:9f:29:6a:31:dd:17:
         8e:4f:ae:bf:71:41:a2:38:af:d7:2c:e2:72:2e:89:c8:bd:2b:
         ae:3c:69:95:de:63:c2:56:03:d9:57:06:91:51:ac:97:41:3d:
         a6:a3:f1:6a:26:70:fd:10:a5:64:62:0d:17:93:4c:7f:07:de:
         50:5e:09:64:c8:0a:1c:6e:4b:4b:2a:1c:21:86:23:ab:0f:80:
         fd:54:ae:ef:b2:47:42:0f:4b:06:8e:db:11:fc:b2:58:40:10:
         6d:18:41:ec:90:bf:57:67:1f:ee:d9:36:d6:c1:5c:43:20:58:
         59:28:29:4d:0c:df:cc:7e:bd:c0:3f:40:37:d7:1b:e2:49:39:
         35:bd:f0:85:51:4a:da:96:78:c3:94:7a:6c:a3:d9:39:31:60:
         46:dc:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:05:34 2024 by rpki-client on console-fra.rpki-client.org