Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f31392d3234203d3e203237383831.roa
File:                     3139302e31352e3232342e302f31392d3234203d3e203237383831.roa (raw, json)
Hash identifier:          fUcMFvKMugeLdui75w7EO25CU2ah/eRIQR28hEzjV+U=
Subject key identifier:   F9:FC:65:66:75:36:CF:F9:A3:53:E9:BC:4A:B4:E9:FD:26:6B:26:0D
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       0DD6B8CEAE2D81365671A7EFC60024787CD66698
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f31392d3234203d3e203237383831.roa
Signing time:             Mon 04 Nov 2024 20:25:00 +0000
ROA not before:           Mon 04 Nov 2024 20:20:00 +0000
ROA not after:            Mon 03 Nov 2025 20:25:00 +0000
asID:                     27881
IP address blocks:        190.15.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d6:b8:ce:ae:2d:81:36:56:71:a7:ef:c6:00:24:78:7c:d6:66:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Nov  4 20:20:00 2024 GMT
            Not After : Nov  3 20:25:00 2025 GMT
        Subject: CN=F9FC65667536CFF9A353E9BC4AB4E9FD266B260D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:ad:95:16:1d:2f:40:63:4d:9a:9d:46:02:
                    25:90:02:41:35:31:e0:01:02:49:8a:62:b8:5c:63:
                    00:48:26:2b:0a:f6:47:bd:ce:63:84:81:36:29:11:
                    c3:38:5c:60:6c:c5:0a:ac:f6:33:08:d1:99:b2:6c:
                    95:43:d0:6a:7f:a9:a9:3e:37:86:b2:4f:f1:3f:34:
                    bf:53:60:79:d2:83:61:46:a1:4f:c7:5f:6e:db:72:
                    42:f4:67:7d:3b:4f:64:87:76:25:dc:cb:9c:ec:96:
                    1c:23:fe:ce:e5:d0:f9:77:63:ef:e2:9c:8b:7a:8a:
                    d7:22:44:ff:27:36:77:3c:47:e3:f2:e1:02:34:0b:
                    c5:a2:86:2a:57:05:da:46:8f:e2:89:c8:3d:e5:cd:
                    44:85:d2:0a:0d:2b:63:1d:9c:b5:18:3a:8d:96:de:
                    cf:c4:5e:36:99:6c:dd:2a:4f:7d:82:fd:c5:38:f0:
                    e8:36:f5:02:68:ba:75:6b:05:f2:ba:a6:7b:dd:bc:
                    63:ce:0e:30:79:d7:99:59:75:a4:a3:18:fc:33:00:
                    b0:6e:ec:73:9a:76:26:70:cc:a2:0e:fe:3c:59:96:
                    fe:9b:eb:05:b1:97:07:bf:34:ed:65:ca:d8:0a:a7:
                    fc:72:e8:bf:8a:d5:7c:a7:87:f0:db:7e:65:50:fd:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FC:65:66:75:36:CF:F9:A3:53:E9:BC:4A:B4:E9:FD:26:6B:26:0D
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e31352e3232342e302f31392d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:de:8e:92:7b:0c:3c:c6:01:eb:2b:19:d3:d0:2a:aa:32:
         30:29:ae:02:22:c4:5a:d0:ce:db:5c:2f:02:4c:32:29:1f:27:
         20:e9:cb:ae:79:9f:98:95:03:2b:e9:a4:5f:ab:6f:9e:48:d8:
         7c:f6:aa:19:54:1e:92:04:a9:5f:8d:3b:d6:f2:ef:5b:66:bb:
         b5:b3:c0:d2:b4:3f:7d:a2:e1:ea:bf:67:53:66:65:e1:14:6e:
         9d:b0:5c:c1:4c:35:d4:fe:93:54:93:f5:bc:e8:de:bd:ef:a0:
         a2:7d:53:a9:65:3b:f0:d5:82:15:b3:a8:ca:70:52:9e:84:03:
         fd:57:2a:0f:85:af:c6:7e:2b:9a:1f:8c:3e:2c:97:5f:64:58:
         bd:da:79:ef:7f:20:39:30:57:2d:5b:24:45:6a:40:e6:9f:1d:
         71:5d:82:b6:75:21:e5:ef:be:69:25:ca:93:76:4b:22:6d:2f:
         66:59:a5:d5:d7:9d:12:63:64:10:22:24:cb:c0:24:7d:27:ba:
         eb:10:b8:78:95:e4:81:c9:6d:49:3c:25:b5:24:8b:f2:ec:4a:
         01:5b:e1:80:fe:44:ec:6e:d7:01:94:56:06:70:70:dc:41:d8:
         dd:0e:1d:d9:f6:c5:d6:e1:30:f6:58:d5:9f:f5:fb:5d:a3:f3:
         08:42:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org