Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37322e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          EmbTSWyt+4ad5m3yXYbwaIxy9FI9V3miH9JHLzTS+/4=
Subject key identifier:   86:F7:8F:42:16:35:49:29:12:1A:7E:D2:B0:43:5D:74:68:45:A5:44
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       5DB83E558CFDA1293338BC830A29C557BBBAE0C2
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:21 +0000
ROA not before:           Tue 05 Mar 2024 17:39:21 +0000
ROA not after:            Tue 04 Mar 2025 17:44:21 +0000
asID:                     52328
IP address blocks:        190.211.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b8:3e:55:8c:fd:a1:29:33:38:bc:83:0a:29:c5:57:bb:ba:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:21 2024 GMT
            Not After : Mar  4 17:44:21 2025 GMT
        Subject: CN=86F78F4216354929121A7ED2B0435D746845A544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:36:5e:65:3f:20:84:f8:72:dc:03:2d:0a:
                    7f:2c:7d:bd:26:be:b6:a4:7c:12:41:85:50:2d:c5:
                    83:9c:33:8a:03:69:62:5d:1b:d0:e1:35:6b:17:f1:
                    e8:b1:97:58:7c:fa:f3:b6:f7:5a:2d:97:2b:3a:a5:
                    59:d3:f6:e9:c9:28:86:65:99:65:fe:b6:86:26:76:
                    f7:fd:d8:1f:a7:00:4d:a4:26:bf:f6:3e:97:79:a2:
                    81:16:bc:e9:b5:75:21:37:d9:b8:10:09:e6:37:52:
                    70:79:07:a6:60:8c:98:ac:e7:5f:a8:fc:a6:14:8c:
                    1a:c7:64:b0:3b:bd:4f:d2:85:4d:01:da:a3:bc:84:
                    96:ae:d4:37:58:23:86:ff:0d:5e:2e:e0:94:a8:02:
                    8e:0e:57:ce:ae:57:0f:cb:63:fa:b6:1c:96:43:37:
                    9b:e8:94:0a:57:5a:f3:37:bc:eb:88:ca:a3:62:ef:
                    3a:c3:20:31:f8:9f:a5:5b:ac:98:24:4c:1a:7b:fa:
                    a0:7e:85:50:da:10:cf:ad:98:e8:f1:67:2d:e1:5d:
                    87:6c:ef:b3:28:d8:db:ac:64:09:b0:2b:59:74:95:
                    74:80:82:53:f6:b1:35:61:21:0f:fe:18:fc:e4:37:
                    93:25:5a:4a:38:36:bb:56:87:32:f4:d3:85:8c:96:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:8F:42:16:35:49:29:12:1A:7E:D2:B0:43:5D:74:68:45:A5:44
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37322e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:49:fd:ac:74:68:da:b5:95:3c:61:27:35:0f:65:53:b6:
         e5:03:b7:8a:ef:bf:60:9f:1e:fe:49:ff:bf:50:cf:6f:34:c7:
         d7:cb:d0:17:1e:8d:ab:ff:54:4b:6a:16:f8:da:6c:1a:17:78:
         94:97:20:b3:3a:dd:96:a6:d2:19:55:78:81:4e:d7:b5:19:68:
         b6:56:5b:fb:5e:9d:89:e4:e8:59:97:4c:ea:c1:e5:d1:e5:44:
         0e:f9:fb:2b:1a:3e:ab:13:3e:79:a7:5c:76:c1:90:25:42:73:
         9d:25:bf:5f:47:c8:aa:c0:65:4e:a1:eb:e6:e5:1b:e8:90:ec:
         8e:55:69:2a:78:94:77:9e:bf:cd:ec:6b:a2:f6:7a:f7:6d:54:
         6d:0e:f8:45:10:78:b9:84:88:93:1d:b2:26:64:ab:d9:72:8a:
         c3:0c:46:21:9e:22:af:11:3a:ed:09:23:da:48:a5:97:3a:19:
         97:5f:eb:9d:a0:6c:b5:5a:5d:bd:40:97:cf:b7:97:90:27:e6:
         b9:d0:34:4c:b0:d1:f8:91:f1:33:7a:79:27:9a:fe:03:69:30:
         fc:d0:f7:60:32:d8:0b:25:08:3a:96:58:bb:b7:03:54:18:fd:
         b3:52:4d:a2:ca:59:53:03:6e:c7:7d:39:1a:20:b8:85:a6:42:
         69:17:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:49:31 2024 by rpki-client on console-fra.rpki-client.org