Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa
File:                     3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          QJVRgZHUSHNFRb9YAVhNcSt89vDhGMPYYwhDPV0VsNk=
Subject key identifier:   DE:F5:B9:F0:D6:9A:F8:31:EC:DA:95:30:9D:19:18:DB:0D:46:0D:10
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       4C9E2A824A597490F91F728B3C4506B5E253BAF5
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 05 Mar 2024 17:53:10 +0000
ROA not before:           Tue 05 Mar 2024 17:48:10 +0000
ROA not after:            Tue 04 Mar 2025 17:53:10 +0000
asID:                     22411
IP address blocks:        190.107.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9e:2a:82:4a:59:74:90:f9:1f:72:8b:3c:45:06:b5:e2:53:ba:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Mar  5 17:48:10 2024 GMT
            Not After : Mar  4 17:53:10 2025 GMT
        Subject: CN=DEF5B9F0D69AF831ECDA95309D1918DB0D460D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:7a:de:1a:ca:76:65:38:ab:a4:5a:5d:01:
                    6e:10:40:24:86:65:a7:53:78:6e:18:02:83:c3:35:
                    d3:55:c7:0b:88:97:55:6e:75:f1:f5:4a:49:fd:7a:
                    26:03:b0:28:9d:9e:ae:aa:2d:8a:49:1f:28:82:67:
                    00:45:6e:cc:fb:ba:59:55:38:f0:87:5c:6c:de:39:
                    3f:7a:2a:77:ca:e2:58:7c:82:da:63:f8:bf:52:48:
                    ef:e8:53:8a:68:95:62:36:41:c5:66:1b:1d:e5:a8:
                    a8:fb:a5:c6:75:75:2a:7c:5a:2e:a3:34:ac:4e:c1:
                    1e:74:f4:e2:dd:bb:92:44:99:9e:a5:99:35:8e:f4:
                    95:a7:9f:b9:56:a5:d1:e0:e6:55:7d:9a:78:34:59:
                    ae:21:73:0c:b8:e1:0e:30:ee:5a:da:7e:67:e2:18:
                    e7:6e:8a:65:95:b0:bf:67:47:13:08:c2:6d:9b:c6:
                    c1:31:c6:8e:0b:5b:0c:d7:19:93:5d:10:62:d4:21:
                    5d:e0:40:f4:78:6b:1d:8f:4c:1f:c6:0e:33:3b:58:
                    bf:f8:bd:f4:4a:8b:f3:13:0f:6d:5c:02:59:d9:cb:
                    31:25:e9:bf:f8:67:cf:00:af:7d:20:39:4a:bd:de:
                    fc:58:d2:b1:25:a7:20:2b:dc:18:b2:66:0e:28:cb:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F5:B9:F0:D6:9A:F8:31:EC:DA:95:30:9D:19:18:DB:0D:46:0D:10
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3139302e3130372e3138302e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:49:11:ac:5b:f8:3f:da:50:58:2a:96:6b:0b:ff:7a:0f:58:
         40:8c:c9:e8:76:d6:cd:aa:37:76:48:bf:a3:5b:90:ca:95:82:
         5d:78:47:47:53:e0:e7:e9:f7:5f:a5:29:6b:67:c1:32:ce:51:
         d2:d2:eb:03:ca:12:7b:bd:88:76:49:4a:fc:c4:4d:cb:c5:fc:
         cb:0c:91:3d:d2:df:ea:80:f9:06:42:2c:32:83:13:7c:56:da:
         25:fe:54:c3:6d:8c:91:d3:0e:5d:40:98:fd:a3:7d:9a:90:a7:
         4d:92:25:27:8c:17:17:72:3b:de:c9:d0:e1:53:25:5a:6a:ce:
         2f:2b:01:61:e6:45:78:d0:2f:f8:3f:9a:9d:26:a6:68:1d:d7:
         4b:e3:4f:09:0b:d7:32:e2:43:66:32:fc:e0:61:15:bf:20:ab:
         3e:8e:20:87:de:99:d9:d1:74:14:c4:1e:ab:86:8d:9f:9e:ba:
         d7:75:88:2b:60:db:dd:94:12:c8:e3:f6:50:2b:c0:eb:f5:25:
         bc:39:54:aa:f6:35:38:40:bf:30:29:fc:f6:0d:42:6a:a6:4c:
         2a:da:a4:c5:76:6f:11:e2:ee:5d:cb:6a:f4:d8:b3:18:16:76:
         76:eb:bc:9a:d8:47:9f:a6:91:c6:e9:e5:b5:b5:99:81:57:f3:
         b7:58:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org