Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          t8DO2VumXNVagKlGCeh1pkBZLlR0ikJZHy+iRVLagUc=
Subject key identifier:   E1:7B:6A:B9:36:3C:71:C2:AE:60:D7:1A:F7:78:52:68:EA:5E:DE:2D
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       032B0004C972CBBB633BAF9CB6195042C7DD2E10
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:14 +0000
ROA not before:           Tue 05 Mar 2024 18:07:14 +0000
ROA not after:            Tue 04 Mar 2025 18:12:14 +0000
asID:                     264688
IP address blocks:        190.196.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2b:00:04:c9:72:cb:bb:63:3b:af:9c:b6:19:50:42:c7:dd:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:14 2024 GMT
            Not After : Mar  4 18:12:14 2025 GMT
        Subject: CN=E17B6AB9363C71C2AE60D71AF7785268EA5EDE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:f0:21:2d:7c:f3:13:ea:d7:cc:0f:a9:75:
                    e6:b3:d4:b2:ca:64:2b:ee:c9:62:d0:a3:db:bf:f9:
                    24:df:2b:22:79:cd:89:4f:6b:d9:c7:c2:d0:4c:e2:
                    07:28:b1:cc:7d:9a:f1:6c:6d:6a:13:b5:33:08:38:
                    44:df:e1:d1:5f:83:11:04:53:44:5f:c5:ba:02:19:
                    3c:a8:c3:2c:8e:4e:32:68:a0:c2:57:16:c6:4f:a5:
                    40:d6:1a:ce:06:cf:c7:c4:cc:12:6f:5b:bd:16:87:
                    c9:99:fc:5a:ea:1e:85:ad:60:e0:b1:22:50:41:b4:
                    ba:9b:b4:d8:83:38:95:be:59:51:d3:11:03:5b:9a:
                    c3:87:0d:0b:29:6c:13:12:53:8e:fd:a8:31:0f:4f:
                    0d:77:66:b6:36:17:11:e4:7e:13:f2:69:ae:d0:45:
                    f1:22:05:9f:40:c2:5d:c5:3a:55:5b:d8:e9:0b:8c:
                    b9:3d:4c:3f:53:4f:97:48:82:85:60:2b:82:13:f7:
                    88:a3:ed:91:e6:4e:6c:3c:19:5f:38:6d:47:f0:03:
                    ca:00:19:bc:49:aa:f0:9c:80:65:fb:50:7c:4c:b0:
                    4e:ad:cf:25:c8:89:b5:03:77:1a:8f:a8:12:35:41:
                    70:5c:0a:c1:05:c3:48:cf:bb:00:cb:e9:65:1b:57:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:6A:B9:36:3C:71:C2:AE:60:D7:1A:F7:78:52:68:EA:5E:DE:2D
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:78:4a:e7:24:6f:31:5e:6e:42:a9:14:80:2f:92:8f:2a:78:
         4f:03:e1:e3:e6:b8:c7:2a:c3:cf:df:60:ac:f2:b7:62:d4:46:
         3c:15:8b:29:8b:eb:fd:09:c5:9f:7c:db:93:a8:fb:a0:af:7b:
         98:2b:0c:83:97:2a:9c:fe:80:b4:1b:98:b1:41:57:50:d9:a0:
         fb:f3:1d:6b:90:a4:3c:7c:b9:14:42:db:40:98:60:d0:eb:a0:
         6e:04:91:6f:f3:bc:43:88:12:90:f1:7b:54:86:ac:0d:0e:16:
         91:97:89:f0:f4:54:12:3c:30:4a:64:e4:54:68:2d:81:d4:14:
         a2:91:e6:89:e8:18:7b:a8:c5:b5:a2:95:37:4b:2e:48:4b:0a:
         b2:91:6e:74:6e:ac:63:af:b0:17:ac:b8:aa:75:7c:3f:1e:76:
         3f:73:2c:3b:5f:f9:bc:d7:73:73:6c:ae:6a:37:be:42:8f:39:
         6e:bd:7e:15:64:2d:26:01:91:47:c2:99:a3:13:4a:73:b8:17:
         b9:85:e1:8c:87:d9:1e:aa:ad:45:ec:64:7f:4a:76:37:d1:d4:
         2e:8e:10:e5:b6:fc:aa:ab:42:17:e1:2d:35:2d:32:83:e7:c9:
         f2:bf:49:78:c3:de:bd:1a:cf:33:10:f0:b7:eb:72:0b:47:c6:
         b5:29:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org