Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa
File:                     3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa (raw, json)
Hash identifier:          ozVHVbjaUbypicQ2jm+fEQrgiSroTQVGnDdwsu875ZA=
Subject key identifier:   22:44:2D:CC:A6:32:83:AF:04:10:8C:D1:86:CF:A2:ED:9F:7D:96:74
Certificate issuer:       /CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222
Certificate serial:       3CC42BFC3E362DDC255A48BC8335225FE75E4068
Authority key identifier: EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa
Signing time:             Tue 05 Mar 2024 18:01:32 +0000
ROA not before:           Tue 05 Mar 2024 17:56:32 +0000
ROA not after:            Tue 04 Mar 2025 18:01:32 +0000
asID:                     265748
IP address blocks:        190.107.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c4:2b:fc:3e:36:2d:dc:25:5a:48:bc:83:35:22:5f:e7:5e:40:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222
        Validity
            Not Before: Mar  5 17:56:32 2024 GMT
            Not After : Mar  4 18:01:32 2025 GMT
        Subject: CN=22442DCCA63283AF04108CD186CFA2ED9F7D9674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:35:d0:5f:35:e5:56:34:3b:8c:be:24:e7:
                    07:c0:94:9f:67:83:64:9f:39:1e:6e:0f:ca:c7:70:
                    6a:46:0e:c5:6b:10:fc:72:23:66:c5:1d:98:34:69:
                    3a:1d:f7:93:4d:df:21:05:4a:ea:c9:7f:12:f3:93:
                    57:aa:db:3e:56:91:b2:c9:29:0a:bd:4b:4e:33:6c:
                    1b:ef:02:0e:a7:f1:f0:f1:c3:3b:64:d1:ec:c9:6a:
                    ad:f1:e9:e8:98:9e:1c:6e:32:5a:4d:99:70:00:46:
                    9e:7d:fe:3e:1d:26:a7:09:6a:20:82:1a:00:3d:a9:
                    04:cb:95:59:a1:a6:50:52:c5:7d:7b:5f:e1:4d:b7:
                    6a:e3:69:53:29:05:6f:2c:c0:73:89:ac:a0:04:94:
                    5a:29:e7:89:da:64:e4:18:b9:3e:21:83:91:1f:57:
                    cb:a0:77:e5:ed:f2:75:76:54:4d:a2:fc:66:6c:61:
                    7b:fb:a9:c2:01:b7:77:b8:0c:be:c3:1e:13:11:51:
                    92:e5:62:71:d7:49:e9:77:63:bd:8f:41:41:d7:c5:
                    ae:04:f2:4b:76:a7:42:69:bb:d3:a2:56:00:a8:77:
                    43:b0:3f:77:bf:5c:fb:8c:39:91:8c:a5:8e:35:7f:
                    9d:54:a3:63:3c:85:58:59:dc:0c:0f:e5:62:1d:47:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:44:2D:CC:A6:32:83:AF:04:10:8C:D1:86:CF:A2:ED:9F:7D:96:74
            X509v3 Authority Key Identifier:
                keyid:EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:88:3e:a5:db:65:ba:be:3d:bc:cf:cc:71:df:3d:a0:4b:80:
         83:27:b8:36:f1:89:ee:d1:e5:58:9f:f4:ef:2a:ab:ed:7d:90:
         56:16:72:cf:69:5d:aa:e9:e4:1e:c3:20:3c:24:40:f5:64:d8:
         b9:b9:b1:88:e2:37:7f:ee:8e:bf:e1:a0:c9:8a:9e:e7:04:bd:
         f9:d3:ba:eb:07:cf:5a:fb:60:d2:63:9d:1d:6f:d0:8d:38:e0:
         1f:fc:09:ab:92:79:63:5e:f4:4f:eb:bb:e2:9e:da:84:25:80:
         cf:32:c5:9b:76:6f:b2:17:b6:15:ff:3e:32:6c:81:d1:9a:3f:
         e0:99:f3:fa:29:16:98:f1:34:01:f0:52:3a:22:b3:ae:c6:59:
         04:03:96:c5:80:34:52:0b:05:30:80:09:24:53:07:84:25:84:
         6f:5c:4e:45:2c:0c:84:4b:4e:4d:8e:36:26:a6:3b:c4:82:f7:
         47:b8:e4:84:f9:f0:a8:73:35:95:b1:0d:3c:23:54:28:e7:5a:
         d7:6b:b4:19:4d:e1:85:29:be:1f:6e:14:ef:1a:18:ac:3b:22:
         f0:ad:02:34:6e:7e:cf:b8:d1:f3:ed:36:53:bf:db:4b:72:4a:
         0f:d8:03:d7:8c:3d:c9:f5:ad:43:90:5e:f8:1c:6b:03:3c:e2:
         66:6c:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:57:46 2024 by rpki-client on console-ams.rpki-client.org