Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e36382e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          OLCSqJqbmrlt6jjdNwIFhBEOXIokZm+S+qyjQXfubyU=
Subject key identifier:   C7:18:E1:2D:11:A8:8C:DB:7B:23:73:E6:D6:73:8C:D1:5B:94:42:56
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       059301DFCF0315DF5900482CC0BC02BFAE6C04E9
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:26 +0000
ROA not before:           Tue 05 Mar 2024 17:39:26 +0000
ROA not after:            Tue 04 Mar 2025 17:44:26 +0000
asID:                     52328
IP address blocks:        190.211.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:93:01:df:cf:03:15:df:59:00:48:2c:c0:bc:02:bf:ae:6c:04:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:26 2024 GMT
            Not After : Mar  4 17:44:26 2025 GMT
        Subject: CN=C718E12D11A88CDB7B2373E6D6738CD15B944256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:61:93:bd:5a:69:05:84:0f:0f:3e:c6:92:
                    ee:d5:1e:5c:02:d0:5c:dc:23:08:a1:e9:55:37:99:
                    fc:a8:e1:25:b4:aa:41:75:a7:db:81:af:0c:01:83:
                    a5:f1:22:a8:ff:d8:fa:9e:d6:57:2d:00:df:f8:45:
                    6d:e3:2d:a3:6c:14:84:54:86:f7:64:b7:a2:80:9c:
                    77:9a:53:4e:33:c0:62:b0:cf:bf:32:ec:08:2e:d9:
                    ab:f8:f8:b9:58:e5:95:be:4a:0d:51:93:71:04:32:
                    3e:e2:da:c4:86:6a:81:82:ad:f3:98:5c:68:d9:6b:
                    a6:c6:8a:fa:ac:4d:7f:a4:40:b1:45:4d:4b:e3:2f:
                    3c:15:da:13:78:d4:d3:c7:7c:60:ab:7d:b1:68:89:
                    99:bd:17:6c:b1:f8:c1:b5:4f:32:63:2b:c2:65:1f:
                    58:4a:d5:dd:40:8b:d3:d7:07:aa:8a:98:67:fe:bf:
                    4d:36:ef:8e:71:c7:c4:06:b8:60:2b:c5:26:c8:6b:
                    32:36:81:3b:ad:1e:7b:44:14:47:3b:2e:fc:1d:91:
                    39:cd:41:4b:5e:26:13:ee:6d:f7:fd:e4:31:46:60:
                    06:43:e2:6f:49:ab:c1:70:24:7d:95:32:89:72:f6:
                    65:88:89:0c:fd:25:02:6f:e4:9e:e9:6b:d2:dc:f0:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:18:E1:2D:11:A8:8C:DB:7B:23:73:E6:D6:73:8C:D1:5B:94:42:56
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:01:f9:50:cd:db:59:c3:0c:65:0d:ca:6d:ac:0a:09:16:
         0c:02:e9:ce:4f:67:1f:45:fa:f6:35:8f:d6:d9:6d:2e:fe:c7:
         d7:1a:d3:35:40:25:b5:80:15:f2:92:c7:c2:12:03:f4:d7:e9:
         b1:ff:1d:10:e1:e0:cc:68:ee:1c:03:d8:a1:04:3b:fc:94:0e:
         47:c5:11:23:0b:d8:49:f7:f9:76:18:3f:59:9e:3c:b3:b8:14:
         2e:09:7d:7f:31:e3:57:20:de:41:a5:df:77:db:8f:ca:00:3c:
         22:2f:0e:0c:8b:f9:4a:ff:fc:8d:54:a3:40:88:cd:49:91:78:
         b5:0e:34:b3:c4:49:9e:db:bb:5d:6d:95:cb:a6:12:c3:ed:01:
         3f:74:64:45:63:04:6f:23:0d:00:73:27:2b:39:e4:77:2d:e5:
         e2:40:8f:43:81:af:30:99:c1:dd:4b:9a:5a:b5:74:63:87:4f:
         2a:b8:82:7e:66:75:d3:cc:ab:47:22:87:f9:86:84:1f:33:bc:
         c4:b7:31:88:71:0e:9c:8d:68:d1:70:a7:1c:01:cf:a5:b1:ff:
         67:7b:b7:a3:8e:87:25:9c:91:5f:97:ec:d1:21:16:19:86:0f:
         8c:57:19:84:e2:26:80:db:59:00:94:3c:6b:0a:b9:6d:e8:63:
         48:0e:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org