Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e36382e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          G0BpGAgY2eJa+95q+xIUEjdafzpfpYnVtF/GzsIvoCQ=
Subject key identifier:   47:52:3E:61:8E:48:05:92:A9:29:5A:08:1A:12:F2:43:B8:AD:AF:C5
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       556AD16F2A79FFEDFDC5CBC221198E6AFD6B8648
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:22 +0000
ROA not before:           Tue 05 Mar 2024 17:39:22 +0000
ROA not after:            Tue 04 Mar 2025 17:44:22 +0000
asID:                     52328
IP address blocks:        190.211.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6a:d1:6f:2a:79:ff:ed:fd:c5:cb:c2:21:19:8e:6a:fd:6b:86:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=47523E618E480592A9295A081A12F243B8ADAFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:80:1a:3d:df:b2:2b:5c:1b:00:d9:44:4a:
                    9a:6a:4d:46:0e:9a:ab:34:9d:d2:f2:ea:26:ef:8a:
                    8f:fb:5f:24:c1:93:e3:b2:75:44:a1:33:e8:2a:27:
                    71:17:10:dd:cc:19:e7:6c:90:f1:71:23:7f:25:42:
                    17:d7:fe:eb:b5:e4:0d:75:48:17:03:4b:71:4a:bf:
                    2e:1c:c1:37:b6:3b:78:7f:4b:c4:5a:f2:a6:a7:ac:
                    92:df:cf:ed:ab:5e:0a:4b:9e:17:94:bc:9b:38:81:
                    f5:81:4c:d6:97:ea:b3:02:7a:c1:4d:e2:7d:4f:e7:
                    1b:72:58:0f:99:91:f1:01:f4:0c:05:5f:e2:38:bf:
                    8c:bd:ce:e1:6b:78:5a:54:fa:13:75:78:8e:ee:64:
                    81:eb:f3:76:93:66:a7:ca:52:d9:f3:ad:38:d4:af:
                    81:95:29:a7:cb:d6:c9:a8:d5:45:10:a8:bb:7f:36:
                    30:b5:c0:e0:b2:a6:b3:5b:89:a7:df:93:92:fe:0d:
                    42:10:57:68:dc:f1:30:bd:14:30:f0:5a:31:70:b2:
                    75:fb:b7:d8:fb:da:04:6e:d6:f7:77:4d:b2:e6:8f:
                    c0:ca:3e:ef:87:98:f2:b2:93:ff:74:07:e9:b3:91:
                    1a:e1:33:f7:d8:e5:5b:e2:15:0a:db:34:08:e1:ac:
                    4d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:3E:61:8E:48:05:92:A9:29:5A:08:1A:12:F2:43:B8:AD:AF:C5
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:d3:f4:12:6b:2b:0d:01:c5:8c:85:a4:4f:a9:b5:a1:a6:
         cb:fb:7c:d7:ab:49:12:33:18:60:d6:29:2a:67:f0:7c:cb:de:
         b9:4d:09:48:57:ff:f8:cc:b9:d8:29:7d:76:f6:39:66:c9:e8:
         c3:5b:ea:87:70:24:93:62:b4:3f:97:02:97:ee:92:e8:62:5a:
         41:0b:6b:08:78:d7:67:b5:95:77:74:5d:7a:54:b9:b6:ec:f1:
         83:2f:42:a0:22:ee:95:f8:be:4e:2b:0f:2b:73:6e:cb:46:1f:
         3e:b6:d8:7e:de:f3:c0:68:c3:b3:13:b6:99:ad:de:eb:da:ec:
         95:1f:bf:b9:81:8f:db:b4:73:01:33:8b:99:0f:0e:7c:86:02:
         b9:3c:a8:b9:a6:cf:d7:10:75:14:f1:af:6e:82:be:5b:08:e6:
         ca:f9:1f:ac:a0:b0:67:d4:b4:be:88:67:7f:58:7b:0d:f3:09:
         e0:1c:3c:27:c3:dd:80:f1:e7:89:df:bf:59:5d:24:cf:15:22:
         b0:96:5d:ca:91:fe:22:57:19:79:42:d3:08:5b:f2:4b:27:37:
         44:08:3c:5b:85:26:f4:b0:4b:ef:06:af:d5:ed:b8:45:ec:2f:
         71:2f:ce:94:5d:1a:ca:1e:fa:4b:f7:a9:83:a5:14:c3:18:b3:
         db:33:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org