Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          wKeLLtux9jfgF5LbvJF5x6xOqDwJaZmy86IJ8ZSW3YE=
Subject key identifier:   E8:74:84:AB:F0:FF:A3:57:77:51:33:D0:A3:7D:5D:92:D8:80:92:9A
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       6370170824338A51BD1B36CEC7744EEE044104CC
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:11 +0000
ROA not before:           Tue 05 Mar 2024 18:07:11 +0000
ROA not after:            Tue 04 Mar 2025 18:12:11 +0000
asID:                     264688
IP address blocks:        190.196.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:17:08:24:33:8a:51:bd:1b:36:ce:c7:74:4e:ee:04:41:04:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:11 2024 GMT
            Not After : Mar  4 18:12:11 2025 GMT
        Subject: CN=E87484ABF0FFA357775133D0A37D5D92D880929A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:e6:57:a3:02:70:3c:ed:f2:de:e8:e6:26:
                    fc:5b:31:37:f8:16:19:75:ad:dc:e7:5d:a0:6c:6c:
                    85:8a:c5:65:7a:d8:45:24:d4:75:dc:7a:87:e6:80:
                    d5:5f:16:46:80:0d:60:83:41:44:70:a5:d3:0f:b3:
                    9a:23:3a:a4:d3:c4:56:d7:36:94:39:80:3c:e9:e6:
                    a3:68:5d:b9:b0:ca:03:ac:86:7a:a2:f8:32:c0:5c:
                    c4:bc:6a:c0:7e:af:f4:12:88:64:5a:39:e9:3c:a9:
                    81:96:b8:27:af:0a:9c:16:1d:8c:c6:10:c1:84:20:
                    54:44:a1:ea:f3:69:8a:91:7f:15:18:4e:79:c2:51:
                    a7:6e:1a:c1:39:b0:83:38:46:32:9d:32:25:38:c4:
                    29:07:54:7b:77:bf:e9:56:94:c1:1c:39:28:37:2c:
                    e3:8c:9c:47:74:24:2b:d4:d3:85:5a:f4:81:61:37:
                    b7:e7:8b:26:0b:e0:ac:a2:14:43:7c:ef:d2:b6:e5:
                    44:c4:05:42:6b:f4:8b:df:ac:85:6f:79:98:10:aa:
                    2f:5f:0d:c1:bb:e7:4a:6f:cb:dc:9f:62:e7:8f:40:
                    69:ee:a3:2d:53:44:a9:aa:42:bf:2a:1c:fc:f8:66:
                    21:cf:19:75:b2:40:01:92:b9:f1:ef:27:60:76:44:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:84:AB:F0:FF:A3:57:77:51:33:D0:A3:7D:5D:92:D8:80:92:9A
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:c5:55:6e:51:71:f8:d2:9f:9e:36:5e:3a:8c:50:09:63:
         f5:b3:67:77:f5:48:90:e5:80:59:6a:16:ba:0d:aa:4f:2c:51:
         b8:d0:44:f6:30:87:a5:5d:c5:91:e7:42:78:fb:55:9b:5f:2e:
         23:f2:c7:b0:b3:01:88:f5:45:ca:54:1b:ad:6e:0a:d6:46:c0:
         f7:c3:dd:50:52:6d:fb:76:2e:de:04:cd:46:50:47:4c:3f:ca:
         ca:c3:be:16:1e:e8:0f:ed:7d:81:5d:46:8f:f3:d5:7a:68:e5:
         1a:45:77:e4:06:e9:fb:bc:af:b3:d9:14:df:95:8b:4d:b9:7f:
         d3:ff:49:e9:2a:e7:77:96:ce:5c:e8:c0:5a:d2:58:e5:ec:dd:
         62:8a:da:34:69:38:8a:34:26:b0:3c:1a:1c:0b:fe:9c:af:88:
         19:a3:3f:97:c8:b0:12:00:aa:a6:30:f1:fe:76:a1:53:0b:ed:
         17:cb:b5:87:b0:d2:10:51:1c:ea:ae:1e:32:e9:4f:75:c8:3e:
         84:73:ff:30:ec:ed:48:07:3a:0b:a4:a1:ef:ba:0e:91:70:f2:
         22:7c:6f:04:5c:76:d5:6c:0d:aa:21:b0:7d:16:fb:b2:56:18:
         c1:a4:0a:43:3f:7b:b9:b9:02:58:da:8a:d9:0e:01:41:e4:70:
         03:cf:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org