Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3137342e302f32342d3234203d3e203532323333.roa
File:                     3139302e342e3137342e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          Ppa44pzUmM9U3ljns0DE1acHL8EbwiT4MANlanDcU3o=
Subject key identifier:   92:03:1F:94:AA:72:44:AF:A9:74:67:08:CE:E7:AD:12:F1:B3:8E:80
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       37DA23DD4FF42F5BEF5B30CB87C219D950B5AEC8
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3137342e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:07 +0000
ROA not before:           Tue 05 Mar 2024 17:37:07 +0000
ROA not after:            Tue 04 Mar 2025 17:42:07 +0000
asID:                     52233
IP address blocks:        190.4.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:da:23:dd:4f:f4:2f:5b:ef:5b:30:cb:87:c2:19:d9:50:b5:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:07 2024 GMT
            Not After : Mar  4 17:42:07 2025 GMT
        Subject: CN=92031F94AA7244AFA9746708CEE7AD12F1B38E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:66:cf:eb:35:49:b3:16:a9:05:ba:cf:35:
                    b1:26:c7:12:93:1e:a8:96:54:d9:01:fc:71:3f:b2:
                    06:ff:de:4a:01:2a:99:83:f9:c0:1e:9d:21:d7:24:
                    95:5e:bf:09:ee:a4:21:16:13:d7:6d:b5:c6:13:9c:
                    a9:a0:6e:8c:fa:e8:09:de:5b:c8:16:a4:6f:2e:c5:
                    44:24:42:c3:a3:c6:dc:e9:30:b5:ff:ac:79:4d:e2:
                    bb:80:22:fa:fc:d8:6f:c4:72:80:e3:0e:7d:95:f5:
                    c2:30:7b:14:97:d1:1a:e1:d3:5c:5c:50:b0:fa:d6:
                    68:ce:cd:2e:b1:97:35:37:1c:66:88:c8:66:d0:3d:
                    ae:fd:c5:b1:81:d4:10:da:69:e5:11:e8:4b:85:88:
                    1e:e5:ac:37:b5:cc:2e:ab:95:36:97:37:3f:a2:7c:
                    e2:ee:17:14:0b:b8:b4:bd:cb:e0:fc:d7:c5:b2:a4:
                    8e:6e:85:72:62:69:16:2f:e4:d9:20:f9:ac:29:9b:
                    1e:6e:89:b5:cb:de:fa:00:7f:7e:4f:98:05:1d:84:
                    8d:d8:c8:e2:32:a6:0c:1b:d3:92:7e:54:34:62:fc:
                    be:3a:95:71:cd:5f:8e:60:25:96:a8:3a:8d:e6:70:
                    06:bf:1e:7b:44:e5:58:bd:77:ff:13:96:8e:9f:8a:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:03:1F:94:AA:72:44:AF:A9:74:67:08:CE:E7:AD:12:F1:B3:8E:80
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3137342e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:e0:cb:b6:df:7a:1e:6a:99:ab:ca:0d:4b:f3:02:9c:8e:
         24:e3:7a:e9:b2:f9:88:0f:8b:02:e0:db:af:3a:ae:d5:91:c6:
         05:52:c6:0b:b1:48:27:4d:28:1b:74:43:79:0b:82:a0:1c:c4:
         eb:66:69:2d:1c:fd:38:9f:89:ed:a2:3b:67:7b:e8:f2:3c:d9:
         fc:6d:4e:d6:95:8b:47:37:4a:9b:5f:3c:44:67:3d:1a:e9:eb:
         bf:d8:d7:ae:ac:6b:b7:da:1e:70:ad:5d:26:c0:ad:51:68:48:
         1f:53:c2:e6:f2:91:38:ce:59:bb:17:6c:b8:d9:02:2d:5e:8f:
         81:90:64:d8:44:a7:2f:ae:42:43:33:1b:af:b1:64:84:71:82:
         43:26:bb:69:18:6b:be:5c:c1:12:7d:4e:de:f8:a9:ad:ab:b7:
         23:8a:73:ba:73:d8:3c:31:08:b5:7d:c7:a5:77:ba:b6:c0:63:
         41:7c:89:a4:06:0e:c0:6f:c7:bf:41:28:94:76:99:c5:49:e0:
         7b:1a:17:5c:df:3b:b2:9d:a3:5c:2a:96:4b:13:89:93:e1:7e:
         81:71:a1:47:22:d8:ed:1d:54:e5:2b:f8:ce:4b:f0:73:25:e2:
         72:13:ce:ee:45:bd:4a:72:61:b9:ea:0f:e9:05:b8:ad:c6:73:
         dc:b2:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org