Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32322d3232203d3e203532333238.roa
File:                     3139302e3231312e36342e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          8igXyabwx5OkK8cSb2SFZ3YdBrLD+McMDPr3SqEgcQY=
Subject key identifier:   49:66:7A:D2:E5:2C:60:55:39:40:41:97:A8:B7:83:1F:0E:4F:F6:CC
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       65286D1604CB7AF7D6A10092F588B2314DB28BE9
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:27 +0000
ROA not before:           Tue 05 Mar 2024 17:39:27 +0000
ROA not after:            Tue 04 Mar 2025 17:44:27 +0000
asID:                     52328
IP address blocks:        190.211.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:6d:16:04:cb:7a:f7:d6:a1:00:92:f5:88:b2:31:4d:b2:8b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:27 2024 GMT
            Not After : Mar  4 17:44:27 2025 GMT
        Subject: CN=49667AD2E52C605539404197A8B7831F0E4FF6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:2c:67:1f:bb:62:25:21:e0:c8:e1:3c:13:
                    5f:8b:97:79:09:e5:fe:08:93:02:e1:66:f5:f2:29:
                    06:d5:1c:24:b1:fe:7f:9a:10:78:b6:7c:0b:de:05:
                    d1:5c:46:1d:94:39:2d:2a:60:31:4f:3e:c6:29:8a:
                    0a:b1:e7:e0:43:f0:a6:8f:e1:84:f8:a7:e4:e2:a0:
                    2d:11:ab:1b:a1:b2:e5:a0:c7:0c:fb:77:1a:b9:fb:
                    08:26:e4:d2:b3:55:6d:cb:e8:fd:08:d5:7e:e9:b6:
                    ba:84:15:4c:0d:63:7a:57:b9:af:be:a1:bd:31:9b:
                    e3:e6:1a:b1:cd:91:07:a0:b4:d5:ad:62:76:91:50:
                    7f:7b:8c:86:25:58:91:a2:8b:a0:6a:c0:ee:a8:0b:
                    b8:73:82:28:7f:98:cd:89:bf:9b:3b:98:13:a4:99:
                    ed:bb:34:d7:1c:84:ec:46:a2:86:bf:89:dd:57:66:
                    99:9e:74:16:50:a1:57:d0:55:35:57:e4:43:ab:a6:
                    1e:cf:24:c0:d5:cc:03:d1:ff:04:85:3b:20:a5:61:
                    a5:7d:f5:8a:28:20:02:1c:d3:3b:1d:8d:29:0e:ed:
                    2e:c9:17:73:bc:7c:ca:f5:8e:79:df:f2:17:f6:59:
                    88:ac:48:69:5e:1d:b5:10:62:a2:74:3f:a9:8a:c2:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:66:7A:D2:E5:2C:60:55:39:40:41:97:A8:B7:83:1F:0E:4F:F6:CC
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:9c:9e:69:ed:dc:63:6e:f3:2b:e9:0d:16:f5:21:98:b9:
         76:38:c3:68:a8:fa:4d:c1:77:6a:14:ee:57:e7:01:46:11:4e:
         4b:cd:a7:d2:86:1c:9e:e2:5b:cc:48:2c:10:8b:25:be:7e:b9:
         8a:a3:f0:8d:c8:35:fa:24:35:24:6d:58:6a:b2:c1:a5:37:41:
         77:69:43:b8:29:f3:02:a7:6c:1b:1c:5e:8a:36:28:3f:00:26:
         71:8a:3f:51:b4:ef:23:b8:89:b8:e9:bf:ae:fb:01:40:f9:36:
         a8:37:32:20:3a:32:f6:ec:91:99:24:54:c0:d6:c4:66:5d:22:
         ed:40:5a:2d:07:f0:31:71:07:47:e8:02:20:1e:55:6f:85:af:
         3b:d0:bd:ca:a3:c7:22:96:30:43:f3:81:68:c8:38:8d:c1:c1:
         45:cf:42:1b:a3:8a:43:1d:d2:2d:87:70:ca:c2:53:7b:6f:58:
         c8:6a:bb:6b:e8:77:90:03:c4:2d:ec:53:0b:8e:83:39:ca:8d:
         b7:5b:ca:21:ce:bf:1e:f2:15:aa:f3:1c:1d:e7:e6:35:29:45:
         f9:99:64:62:6f:3b:ba:1f:9d:d4:58:50:09:dc:4f:20:f9:f0:
         1d:9f:f1:2f:f4:76:3c:5b:bc:6e:ad:1a:97:6f:bf:e4:9c:19:
         f9:44:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org