Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          yqQ781g6i6Et6AlVGzkS+5DyJZGHH35ZoNjXX3Vs4nU=
Subject key identifier:   12:EC:D1:EE:D3:E0:09:07:06:E5:00:96:B4:41:F8:39:07:A9:C4:6B
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       0926E8E19E0C369D27B5B3E898C423DBEAA9373C
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:10 +0000
ROA not before:           Tue 05 Mar 2024 18:07:10 +0000
ROA not after:            Tue 04 Mar 2025 18:12:10 +0000
asID:                     264688
IP address blocks:        190.196.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:26:e8:e1:9e:0c:36:9d:27:b5:b3:e8:98:c4:23:db:ea:a9:37:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:10 2024 GMT
            Not After : Mar  4 18:12:10 2025 GMT
        Subject: CN=12ECD1EED3E0090706E50096B441F83907A9C46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:41:9c:24:44:2f:d9:7a:7a:91:8b:61:4e:
                    d6:a6:9a:3c:38:94:9c:00:99:21:44:73:8e:4e:91:
                    ce:99:88:17:fd:89:ea:47:b8:8c:58:6b:f1:7b:d1:
                    0c:e5:e0:05:c1:6c:3e:38:5a:7a:19:8a:ed:b7:d2:
                    fb:e5:60:d1:c4:dc:0f:7b:35:53:f6:91:42:98:ea:
                    55:fd:eb:0b:ae:0d:e2:b5:8b:fa:29:9f:63:a7:df:
                    79:d3:2f:a0:d0:33:a2:b7:07:e2:55:9e:51:5c:5f:
                    07:8e:d3:da:14:d4:43:4b:2b:67:83:32:e2:1e:43:
                    b5:4a:76:98:35:26:06:9c:4e:db:92:19:08:49:be:
                    18:75:bd:29:86:05:e1:2e:ba:2c:0d:c8:8f:34:4f:
                    96:ab:2e:aa:41:1b:ca:cb:a5:9a:5d:fd:4e:6b:19:
                    0c:93:7f:a9:8d:6a:09:49:91:4f:bc:21:be:78:91:
                    87:7b:7e:7d:09:ee:f2:f7:ae:1a:eb:26:29:e2:df:
                    a3:61:38:cc:e6:fa:a9:a0:bd:ca:18:77:c3:5e:7b:
                    04:ee:23:b5:ba:6d:eb:45:e5:e8:04:95:b4:c5:47:
                    37:7f:34:49:ab:fb:9b:45:b4:bc:35:b1:58:df:fe:
                    22:24:0c:20:71:59:50:8d:46:be:8b:c1:5c:60:e6:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:D1:EE:D3:E0:09:07:06:E5:00:96:B4:41:F8:39:07:A9:C4:6B
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:3f:7b:3c:83:e7:13:75:05:1e:4c:76:c2:30:79:15:05:
         98:a4:e3:70:d9:1f:cb:3f:75:21:13:b9:60:3c:b6:9e:2d:51:
         f4:d2:d4:e2:ce:60:8c:12:02:3e:3f:58:70:27:97:09:b1:c5:
         e2:83:4c:ea:52:05:61:2c:c2:87:b2:e6:89:71:51:a3:c7:71:
         ae:95:82:0e:ba:ff:46:65:ce:83:61:2d:c0:b1:b9:0f:ab:1b:
         ac:4a:0f:34:a6:27:eb:1a:7e:d8:56:eb:24:73:c0:ce:fe:a7:
         5c:8a:84:10:a2:35:3b:20:39:b8:46:00:20:b0:c8:57:02:d3:
         e8:84:e9:77:71:a8:0a:fc:01:d4:80:ae:0e:91:fc:b5:dc:fd:
         d2:5d:67:3d:3b:ba:a4:ee:e8:87:31:2d:c7:c5:80:bf:67:90:
         2d:35:39:10:de:13:93:fe:af:9d:58:f8:0b:93:f9:e6:f3:35:
         69:fa:70:28:ba:c0:15:02:bc:91:70:7c:58:97:ad:ef:ee:b7:
         1f:6e:21:57:4e:85:c3:b8:61:59:ae:22:47:9e:67:b6:c9:c2:
         86:da:67:23:4c:a2:93:c7:05:62:1d:ec:4a:6c:98:cf:03:bf:
         53:75:8f:89:59:c4:c8:eb:4f:80:cf:26:b3:19:02:3d:c3:d4:
         84:de:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org