Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          4poDE29zjwgoX4+uvb/7Itq68r1xzwwe/QH92HMT+RA=
Subject key identifier:   37:70:ED:65:7B:C8:7D:DC:8A:9B:3D:F6:71:B5:12:C0:58:08:94:61
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       18CED8C84DBCEFE47D83B19CBF9791F2E8BB6572
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:13 +0000
ROA not before:           Tue 05 Mar 2024 18:07:13 +0000
ROA not after:            Tue 04 Mar 2025 18:12:13 +0000
asID:                     264688
IP address blocks:        190.107.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:d8:c8:4d:bc:ef:e4:7d:83:b1:9c:bf:97:91:f2:e8:bb:65:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:13 2024 GMT
            Not After : Mar  4 18:12:13 2025 GMT
        Subject: CN=3770ED657BC87DDC8A9B3DF671B512C058089461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:ee:06:32:fc:10:bf:c0:af:e6:59:b8:09:
                    6d:a8:47:9f:10:8a:1e:5c:7b:21:58:59:cc:6c:2f:
                    02:2d:2d:d1:2a:cb:97:f2:6f:3e:8e:42:b9:3d:fb:
                    f6:16:ea:50:b7:e0:96:dc:a8:ca:59:37:ac:61:91:
                    bf:6e:bc:b8:92:47:47:41:27:8a:8a:f2:e0:ee:10:
                    bd:a6:f5:e1:bb:89:4e:32:7e:1f:d0:15:c7:ef:53:
                    e1:c7:21:f2:0c:61:b7:64:79:fd:ae:8e:29:e0:c1:
                    8a:ee:29:1c:1e:ad:69:53:4b:06:84:84:e5:04:90:
                    d2:cd:da:6d:44:0e:55:3d:37:da:5d:08:8e:1b:94:
                    e4:24:87:c2:ac:3d:e1:2d:46:6e:ef:f5:f9:8b:cc:
                    94:b9:71:cd:4d:0e:08:1d:cc:4f:66:25:ca:a4:39:
                    fb:b4:8d:84:1e:c4:d8:f2:43:10:8b:69:64:38:f2:
                    7f:6d:45:cb:3b:f1:86:58:41:68:5b:39:d7:b9:ab:
                    16:09:60:75:4a:71:ad:95:f8:6b:ad:6f:06:54:27:
                    a7:11:dd:48:00:17:24:d8:2d:62:7c:5c:c9:c1:96:
                    58:62:d0:4c:ae:86:2c:62:dd:cb:10:df:e1:88:4b:
                    d1:b8:62:f9:77:95:2c:3d:51:37:dd:75:3e:a4:f8:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:ED:65:7B:C8:7D:DC:8A:9B:3D:F6:71:B5:12:C0:58:08:94:61
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:9b:84:a2:e7:77:67:44:4b:2a:2f:fe:99:af:2a:fa:d6:
         c5:01:13:51:99:b4:a1:a5:a2:6f:ae:bb:07:7c:91:4c:62:74:
         ee:60:99:e3:17:24:a7:e6:f3:f3:9b:2c:46:78:fe:7d:37:c5:
         de:78:0c:0a:e9:c1:ca:6e:f6:45:15:20:51:c5:64:bb:d2:ed:
         67:25:48:86:3c:af:27:a0:28:a8:9c:ad:aa:0a:f9:47:4c:80:
         01:19:ed:0b:17:fa:5e:89:c5:6f:33:1f:99:75:df:39:1d:85:
         1f:72:a8:64:a3:44:c5:09:7e:5a:e4:ad:42:f0:f0:5a:6c:3c:
         7d:5a:68:9d:74:3f:54:06:31:64:5d:70:e8:aa:cf:c9:9b:3b:
         4d:6b:ac:96:aa:2a:a1:67:b5:c0:67:ba:07:86:5e:b1:4b:5a:
         f7:ac:47:56:b8:0e:6b:ea:9f:c6:21:d7:57:4f:bb:63:8f:86:
         88:0d:98:5a:c4:c1:50:a0:65:b2:86:b6:8e:0b:c0:74:bd:7f:
         b0:23:ab:f4:8b:26:77:8e:53:d5:3e:f6:3f:0d:69:09:ac:6d:
         a5:f4:53:28:a5:13:68:16:1a:95:ff:9d:69:a4:cf:80:7b:6e:
         d7:8e:38:2d:80:02:e0:25:44:74:d9:c2:47:58:9d:f0:96:8b:
         b0:bc:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:57:08 2024 by rpki-client on console-fra.rpki-client.org