Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa
File:                     3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          U99yyX/nvehsdIgHnIjCB0NrdNLZ6hbyWXT8J0ifpYo=
Subject key identifier:   B0:DD:87:18:4D:CB:D8:0F:32:3F:A3:7D:95:9D:14:F2:C9:25:44:B5
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       74FB712F28B45C96078CB9ADE5D533EC265B500B
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa
Signing time:             Tue 05 Mar 2024 17:50:20 +0000
ROA not before:           Tue 05 Mar 2024 17:45:20 +0000
ROA not after:            Tue 04 Mar 2025 17:50:20 +0000
asID:                     262208
IP address blocks:        190.13.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fb:71:2f:28:b4:5c:96:07:8c:b9:ad:e5:d5:33:ec:26:5b:50:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Mar  5 17:45:20 2024 GMT
            Not After : Mar  4 17:50:20 2025 GMT
        Subject: CN=B0DD87184DCBD80F323FA37D959D14F2C92544B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:4d:2f:ef:df:b1:6e:ed:19:a2:70:e5:7f:
                    e8:d2:76:f6:96:07:99:f3:4b:20:04:bf:d5:93:a5:
                    3e:f1:7e:b0:47:98:b7:e1:a6:c6:d6:c7:65:3e:ca:
                    1e:ce:a3:7a:c5:7c:ac:2a:0b:b4:16:04:44:45:0c:
                    1e:f5:23:95:47:77:70:30:97:0f:28:6b:64:36:0a:
                    3c:4c:98:17:c3:82:37:31:a9:4f:82:b2:96:1e:dc:
                    db:67:72:e5:80:7e:45:ac:69:d3:5b:42:ee:ba:a3:
                    45:9b:ba:1a:a5:cd:a7:69:51:6e:0a:3a:ab:94:2b:
                    a5:91:36:70:05:be:0b:8f:67:d7:76:b5:67:a5:d8:
                    85:fa:3d:02:9c:22:b1:93:c5:ed:b5:f7:54:58:78:
                    a4:b3:d0:07:a4:7f:9a:85:07:32:1f:7e:b3:d4:a2:
                    ce:d8:5a:28:e1:83:09:e1:3b:7f:2a:d3:49:dd:5e:
                    a2:55:ac:bd:7b:19:01:07:59:9f:5f:87:6f:5f:d7:
                    10:97:26:f0:68:9d:fd:b0:46:82:38:df:74:88:ef:
                    ce:5c:a1:6f:95:38:82:fa:f6:da:f0:d2:b9:a8:38:
                    17:ad:ba:c9:fe:df:31:f5:3d:99:60:6b:ca:a3:51:
                    64:cb:62:39:25:3c:44:b6:f7:c9:09:8c:78:1a:51:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DD:87:18:4D:CB:D8:0F:32:3F:A3:7D:95:9D:14:F2:C9:25:44:B5
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:eb:12:11:4a:a9:6a:6d:95:a9:af:56:ff:9a:d1:a4:fd:
         14:3d:bc:0f:d2:40:94:57:cd:64:a9:bc:77:1d:a1:89:c3:83:
         81:a3:bf:1b:24:d6:2d:73:a5:b1:97:cd:e6:bc:d8:a0:13:69:
         07:78:fe:57:6d:8c:7e:8b:cf:94:ba:52:b6:e8:36:8a:aa:0d:
         e5:98:9c:a1:0d:c6:18:8c:73:b6:8e:e9:81:58:dc:91:b7:4b:
         e3:62:a5:cb:3f:7b:d8:7c:39:6a:10:a6:28:3a:24:3c:96:6f:
         5d:6d:9b:97:10:9d:3c:a2:57:61:84:d2:b8:d9:b6:1c:14:14:
         0a:7f:95:27:6f:d3:ac:63:07:33:b3:21:d1:3b:a3:0e:59:0f:
         c3:ed:28:03:71:0a:93:1d:a9:d7:f0:4d:b8:aa:fb:c0:6b:90:
         d9:e4:7f:42:8d:ab:5c:d2:ce:dc:99:df:75:35:e3:fd:09:20:
         3a:45:7d:a6:0a:da:aa:7a:24:d8:6c:c7:c5:41:83:26:79:d2:
         9b:5d:dc:a5:46:05:5f:b5:2e:59:64:2f:13:7c:fb:b8:a1:e2:
         b9:cb:6f:43:ec:51:a9:8f:9b:17:2d:c7:9f:c9:b2:f2:43:05:
         5a:51:5e:de:1d:21:33:b8:dc:97:c0:8f:1f:4a:70:06:bd:9d:
         e5:f5:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org