Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37362e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          uHPuPCOwC7wjcaw6FKf2kQwzxc3gx/xaRvC0cRVV35w=
Subject key identifier:   F1:AD:4D:3B:F5:C3:02:B4:76:BC:D3:87:E3:57:0A:D4:45:A8:7E:B3
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       3B5140E53BD8A79F470ECD9D49A3BDE177B24F32
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:32 +0000
ROA not before:           Tue 05 Mar 2024 17:39:32 +0000
ROA not after:            Tue 04 Mar 2025 17:44:32 +0000
asID:                     52328
IP address blocks:        190.211.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:51:40:e5:3b:d8:a7:9f:47:0e:cd:9d:49:a3:bd:e1:77:b2:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:32 2024 GMT
            Not After : Mar  4 17:44:32 2025 GMT
        Subject: CN=F1AD4D3BF5C302B476BCD387E3570AD445A87EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:a6:04:6f:d9:36:48:95:89:59:ff:b6:8e:
                    59:ac:0b:a7:85:b9:ca:ec:4c:d9:e4:6a:27:63:9a:
                    b8:ff:67:d6:a1:8a:e9:8d:ee:94:ae:51:2c:15:ae:
                    5f:c5:86:4f:e9:17:b1:7e:71:80:c9:12:c8:e8:e6:
                    db:d1:fa:59:ad:0a:f1:41:0e:ef:8e:65:27:83:f6:
                    5f:ac:8d:35:2a:d7:22:cd:15:93:d7:41:36:6a:81:
                    87:21:c8:e9:ba:7d:55:18:69:ec:af:08:e4:25:39:
                    25:2d:80:4e:9a:a7:e8:be:45:74:15:85:11:86:72:
                    23:43:30:42:5c:fb:8a:29:0f:59:98:f5:1a:e2:f5:
                    95:cd:4d:df:5b:e3:16:14:9b:a5:cd:bd:2e:8c:a5:
                    7d:8e:51:1e:3a:fa:20:2d:84:9d:19:01:a9:dc:cf:
                    c5:fd:0e:78:b6:7b:6d:20:ab:da:1b:99:9c:4d:7b:
                    58:02:d7:e4:03:60:b1:15:ba:05:ed:0f:6a:f1:de:
                    61:aa:b4:eb:f3:e7:d4:ea:a3:8f:84:96:d3:4a:d1:
                    bc:0f:6f:e4:ca:c1:87:ba:69:d5:48:5e:25:34:ef:
                    e1:c7:76:a9:3a:2c:10:66:a0:ea:06:2b:6c:aa:cb:
                    24:fe:0d:a9:48:1e:00:8a:82:63:97:27:c4:dd:e0:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AD:4D:3B:F5:C3:02:B4:76:BC:D3:87:E3:57:0A:D4:45:A8:7E:B3
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:10:6a:40:93:f3:6b:df:63:e9:6e:85:04:94:d3:b3:10:7d:
         72:53:84:f6:07:da:f4:b9:8e:fb:7c:9e:91:8b:9d:55:d4:d2:
         cf:8c:ed:7a:8f:4e:45:e0:14:a2:92:c9:7a:4d:b0:39:90:4f:
         06:6b:61:c3:c3:ab:e0:5b:10:a2:27:9f:7e:90:3a:26:2e:02:
         3b:73:a0:bb:86:d0:37:c5:4a:ce:4a:25:37:27:50:da:3e:e8:
         ca:2c:7f:09:70:84:25:c1:ac:b1:bd:4b:8e:59:0f:84:2f:bd:
         e7:c1:0d:93:d1:bd:71:93:ca:87:20:17:e1:c1:a7:8b:8b:e5:
         36:65:6b:c2:7b:af:ee:b2:a7:fd:c6:da:dc:d0:ae:0b:3a:32:
         6b:0d:d6:a3:8d:75:e0:5e:c4:fc:5c:1d:3a:d4:d4:02:fa:a6:
         27:cc:dc:69:a2:50:73:52:d4:94:73:4d:68:55:48:b5:50:60:
         df:82:92:1a:4a:3b:cf:5b:d7:20:7e:19:49:74:3b:ca:c7:2f:
         3b:15:f9:bf:09:79:9a:ae:41:8d:07:dd:1a:0c:e3:a9:6a:a0:
         99:ee:1f:36:6d:6a:32:f9:ee:2a:17:0a:0d:b7:d8:6b:41:3d:
         47:d9:19:55:fd:2f:0e:a8:82:6c:5d:82:ac:55:63:ce:97:71:
         87:aa:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:49:31 2024 by rpki-client on console-fra.rpki-client.org