Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa
File:                     3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa (raw, json)
Hash identifier:          YunLNUWxkBdiVMp2XiUmWJIIiMengxOs8GNYgxyLBTI=
Subject key identifier:   49:1F:B4:24:D0:E6:84:9E:94:D3:E5:74:FF:23:BB:5D:44:97:BA:73
Certificate issuer:       /CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
Certificate serial:       2986F08680F0998A007A5BA4D5B70519BBE3A764
Authority key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa
Signing time:             Tue 05 Mar 2024 18:23:02 +0000
ROA not before:           Tue 05 Mar 2024 18:18:02 +0000
ROA not after:            Tue 04 Mar 2025 18:23:02 +0000
asID:                     262212
IP address blocks:        190.96.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:86:f0:86:80:f0:99:8a:00:7a:5b:a4:d5:b7:05:19:bb:e3:a7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
        Validity
            Not Before: Mar  5 18:18:02 2024 GMT
            Not After : Mar  4 18:23:02 2025 GMT
        Subject: CN=491FB424D0E6849E94D3E574FF23BB5D4497BA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:15:8c:d8:65:18:d8:36:2b:2f:72:06:4c:
                    a0:82:e5:c9:71:66:64:1a:cd:8a:c4:4f:d6:89:eb:
                    37:60:45:80:3a:ba:40:34:32:30:c0:9e:02:68:0d:
                    d4:b4:13:1b:57:b8:27:7c:d6:46:7a:ba:89:48:ac:
                    ff:7b:62:21:e1:5c:03:02:be:52:e0:c2:f6:14:3c:
                    38:52:70:52:35:65:e4:0d:a4:c4:82:8e:81:cc:dc:
                    8b:02:31:0b:52:8d:97:13:4a:be:89:82:59:6e:7c:
                    ae:ea:62:2d:55:c7:73:4c:0b:30:98:83:02:86:bc:
                    81:76:23:b3:47:05:a4:73:aa:af:9b:33:f6:38:1d:
                    c8:ab:68:3e:5a:65:1e:e5:3e:c2:14:d9:dd:d9:e3:
                    bf:8a:da:da:3e:4b:3a:a3:2f:38:c5:a4:57:91:aa:
                    3d:4f:ab:31:c0:fd:34:fd:cd:1f:41:82:22:8a:3f:
                    ad:b2:37:9c:bb:35:36:58:fb:3d:0a:5f:46:66:d0:
                    ee:85:1f:ca:f1:4d:6d:6b:31:c6:99:ba:f0:68:1c:
                    ae:94:86:25:b0:80:58:40:65:04:bc:e6:bc:9e:d5:
                    ef:1d:d8:65:3e:37:d9:48:69:21:33:25:1b:c2:e1:
                    5c:9a:74:12:07:eb:88:d4:ad:d2:f2:62:49:c0:49:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1F:B4:24:D0:E6:84:9E:94:D3:E5:74:FF:23:BB:5D:44:97:BA:73
            X509v3 Authority Key Identifier:
                keyid:C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:49:cb:d8:ca:63:21:74:0c:f5:1f:eb:3f:8b:c6:2c:d4:f1:
         c0:e2:ac:7d:7e:44:2b:63:9f:93:07:39:7d:0d:e4:cc:d0:3c:
         ea:d2:f6:af:f4:c8:af:e7:31:6c:06:a2:82:6c:12:85:28:99:
         9f:67:10:1f:2b:e2:07:c0:af:6c:10:6a:a2:ec:3f:c3:87:c9:
         1d:ba:2d:53:73:b9:f7:15:29:ce:22:29:e6:ce:c8:7e:cf:01:
         06:1b:62:a0:8d:74:b0:77:02:6c:8a:24:44:ee:82:89:62:3a:
         c8:ff:95:87:0a:b7:a8:57:f7:60:7a:04:b1:f7:c9:02:d5:09:
         ee:56:63:ac:46:0a:dd:34:dd:d5:d6:02:63:c9:87:09:17:e4:
         d0:b7:c6:1b:26:55:8f:5b:e3:95:03:95:70:36:4b:44:72:af:
         e1:03:16:72:e2:51:a3:2d:a2:bb:01:ac:0f:51:c6:f5:4e:82:
         0e:d9:c2:a6:51:b9:56:b8:24:b4:84:06:e6:a6:f5:8f:9c:4b:
         01:cd:47:6f:d6:de:d1:11:38:1d:be:be:65:e8:2d:ec:b1:0c:
         b5:6c:a8:e1:0e:90:a6:1e:b3:15:35:02:2d:b0:dd:43:79:a4:
         56:f5:f2:d9:c7:82:8c:59:fa:8e:b7:54:06:4d:54:98:37:ad:
         19:1f:c2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org