Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37302e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37302e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          2GQsH7lJeCITs3hiA8uQYFqiJtSgYaA2d/UpkACf/N4=
Subject key identifier:   C3:29:F7:89:0E:4B:1A:EA:77:C9:66:49:F6:7D:27:44:61:B0:17:A5
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       3D67DC438EC6BD816606C7C21E59CA6721B80FBB
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37302e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     52328
IP address blocks:        190.211.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:dc:43:8e:c6:bd:81:66:06:c7:c2:1e:59:ca:67:21:b8:0f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=C329F7890E4B1AEA77C96649F67D274461B017A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:86:c0:10:d8:a0:6b:9f:88:bd:7a:33:d7:
                    95:ec:69:b2:18:c7:74:64:3c:a0:5f:83:b0:b0:6b:
                    a3:62:8e:1d:78:a2:a5:48:07:c8:53:4f:96:59:6c:
                    bc:ba:42:0d:38:3b:22:55:dd:eb:0f:5d:1c:9e:aa:
                    54:88:3a:5e:8b:4f:66:b7:31:09:52:37:58:f6:8a:
                    3e:fe:7d:3d:ba:ed:c4:90:88:e9:f2:b3:00:1b:6a:
                    9c:50:c3:d4:3d:09:99:59:49:12:a7:31:11:d7:55:
                    df:80:d7:08:a5:5a:47:8c:69:a7:37:0f:91:0b:87:
                    bf:a6:4f:dc:c5:98:ab:71:e2:3f:f0:9b:94:75:1c:
                    e5:cc:cd:fd:b4:4b:12:c5:59:0c:f6:20:a7:1f:e6:
                    45:c9:72:50:01:d9:7d:78:8f:31:e7:b2:66:95:51:
                    ac:0f:5e:0d:ea:a8:86:79:c4:9b:36:f6:a2:ed:98:
                    d6:76:c8:81:59:7d:34:8d:e2:2a:74:6b:fa:ed:cf:
                    ab:39:b3:a3:66:cb:3e:9e:f6:4d:db:a6:89:aa:d7:
                    c0:87:b4:9d:9d:0b:c1:9a:83:54:01:8b:5b:28:47:
                    37:76:48:99:64:a3:8d:c3:d4:84:cb:ff:b9:80:5b:
                    10:65:83:08:45:fe:e7:26:4c:90:22:ec:66:bf:33:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:F7:89:0E:4B:1A:EA:77:C9:66:49:F6:7D:27:44:61:B0:17:A5
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37302e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:a1:7f:5e:98:3e:2d:31:f6:bf:20:4b:31:d0:d4:0c:4e:
         2a:3e:0c:6f:a8:eb:92:ee:74:3b:c4:88:50:4d:83:4a:23:ca:
         e6:e2:b9:19:ca:b6:68:28:98:5b:fa:82:42:b6:6b:e0:9a:be:
         20:c0:0d:18:6b:2f:94:66:0e:26:d7:09:1a:e5:27:82:60:05:
         bf:57:5f:a5:10:d3:99:4b:36:37:0d:8c:98:15:e2:c3:78:d8:
         bf:0d:92:95:d5:9f:cb:0b:e1:99:82:82:a9:83:86:61:43:a5:
         80:80:20:23:84:b9:b3:f8:21:0b:5a:6a:10:29:49:18:54:03:
         64:21:23:30:55:51:fa:de:aa:13:27:1d:64:80:c1:b5:bf:13:
         8f:1e:3b:6f:8c:de:62:33:06:02:0f:f4:8e:a3:7e:27:87:e0:
         98:cd:b4:06:33:6a:d6:16:ac:9b:85:f8:e6:a5:55:8d:48:28:
         e2:4e:6f:ff:f0:96:d9:b4:a2:b3:8a:1b:55:b8:bd:35:6b:c9:
         d7:81:9f:a7:d9:87:d1:7a:b3:e7:c2:10:5d:78:00:37:9d:27:
         a5:78:bb:fe:bf:00:ef:88:b3:83:9f:9d:f8:00:c0:33:46:56:
         c0:92:90:d0:a7:25:3b:cd:57:5b:49:22:2e:51:58:55:9f:33:
         67:a8:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org