Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          w42IUnTyD0lWhsCnptjvgVQ090oqX+qtXOhwk9u5Ago=
Subject key identifier:   35:06:49:22:82:86:E7:62:54:92:D2:1F:FB:48:F9:BD:D5:93:EF:64
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       14F669725E583DCA6D0A6AA272BA0CEE90C85C63
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:11 +0000
ROA not before:           Tue 05 Mar 2024 18:07:11 +0000
ROA not after:            Tue 04 Mar 2025 18:12:11 +0000
asID:                     264688
IP address blocks:        190.107.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f6:69:72:5e:58:3d:ca:6d:0a:6a:a2:72:ba:0c:ee:90:c8:5c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:11 2024 GMT
            Not After : Mar  4 18:12:11 2025 GMT
        Subject: CN=350649228286E7625492D21FFB48F9BDD593EF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:43:73:a5:24:8e:f6:e9:e0:cf:82:c3:3c:
                    b2:55:48:c7:db:ae:67:83:09:73:e8:11:f9:34:65:
                    4b:38:b0:60:cb:ca:6a:00:9f:db:ab:bf:84:f0:25:
                    9e:28:f1:ea:c9:0f:5f:73:10:be:1a:ed:2a:3a:4f:
                    61:c3:29:89:14:b4:f7:8e:02:92:26:c5:62:27:4e:
                    f0:96:84:cd:4b:17:50:a1:0c:a3:91:a3:d2:d8:a8:
                    a9:0c:0c:e8:6a:60:17:37:44:0d:16:25:8f:f8:6d:
                    e2:d1:07:94:d2:50:2f:16:da:a5:be:b4:17:0d:4c:
                    9c:db:8f:7d:df:b5:e5:b6:4e:42:6e:8b:3e:16:92:
                    bf:e2:60:61:eb:05:0b:8b:81:c6:81:14:fd:eb:af:
                    16:21:4b:31:a1:a0:e2:94:1c:24:94:b0:14:8c:10:
                    fe:1b:47:3f:a2:e1:c3:af:75:95:a1:5b:f7:62:59:
                    e5:7b:06:23:9c:3d:4f:74:0f:65:fd:98:20:ea:16:
                    69:42:20:bc:80:cb:0a:c1:64:9a:36:75:55:72:13:
                    42:82:f5:5d:68:12:41:e7:0e:71:8f:b5:d0:37:16:
                    25:39:9b:87:c7:1c:20:3d:a2:dc:b1:a9:44:46:c6:
                    91:c6:a3:2a:b0:51:91:16:40:eb:05:fa:e7:4b:8a:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:06:49:22:82:86:E7:62:54:92:D2:1F:FB:48:F9:BD:D5:93:EF:64
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:a4:95:9b:d6:4f:5f:b7:1c:a9:e1:0b:f8:c3:f3:b6:1b:aa:
         53:ec:b4:b4:6f:24:16:98:1c:72:6e:19:a8:6b:f4:0c:43:1a:
         27:18:b3:3f:83:78:9f:44:81:ae:85:8e:80:84:52:9a:f7:55:
         d2:ff:53:82:7f:28:3c:90:32:f5:4b:84:0d:35:d4:4f:00:92:
         b2:3d:04:e7:ac:c2:f3:ce:b4:55:1f:58:2b:82:dd:09:25:4c:
         f2:f8:cf:5a:9b:21:5b:63:67:05:fb:48:62:bc:41:d5:5b:9a:
         b9:96:bb:dc:56:15:f8:18:39:c0:cf:7a:5d:26:17:cf:58:09:
         81:29:4e:9f:10:20:b8:32:c0:97:1c:b0:f5:3c:da:b7:56:40:
         8f:f6:3c:ba:73:d5:56:2d:4e:03:ec:26:96:7b:67:b1:fa:74:
         3e:b0:6b:53:eb:fd:13:1a:93:cf:93:65:19:95:fe:7c:9c:53:
         bd:68:c5:7b:d3:64:21:5c:51:7c:df:39:eb:cb:70:a2:f2:d3:
         3e:40:c7:a8:2c:99:21:16:90:88:6b:0e:4c:5f:54:32:d5:4c:
         36:ba:f2:38:d7:88:f3:05:93:47:16:69:9d:52:14:9e:23:d8:
         4c:f6:10:60:11:96:4d:0f:04:fb:ee:68:a3:4b:c5:66:f9:80:
         67:2a:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:19 2024 by rpki-client on console-fra.rpki-client.org