Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3132392e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e3132392e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          FIdFmCr5BE8a5mkjer8Vxo03LfK3Gei61W/+wUzgI94=
Subject key identifier:   6C:C1:2D:DF:C4:91:4B:C9:88:C6:AE:B5:2C:E9:06:C6:F7:A9:CF:7F
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2E6C18476F776CDE95EF97AA763BC888105F761E
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3132392e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:07 +0000
ROA not before:           Tue 05 Mar 2024 17:37:07 +0000
ROA not after:            Tue 04 Mar 2025 17:42:07 +0000
asID:                     52233
IP address blocks:        190.88.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6c:18:47:6f:77:6c:de:95:ef:97:aa:76:3b:c8:88:10:5f:76:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:07 2024 GMT
            Not After : Mar  4 17:42:07 2025 GMT
        Subject: CN=6CC12DDFC4914BC988C6AEB52CE906C6F7A9CF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:78:de:39:a5:b4:cc:38:a4:b2:57:d1:84:
                    65:d3:4c:59:6d:a7:46:2a:cc:0f:af:bc:dd:82:50:
                    c3:53:5f:45:e4:3a:0a:9d:44:1f:80:4e:c5:58:ea:
                    78:de:e8:3d:fc:ae:10:12:ea:7c:b6:79:db:62:51:
                    04:55:ad:6d:0e:d6:e9:aa:d8:01:d0:bc:01:61:90:
                    8b:ea:50:df:c4:37:e8:5a:0e:ea:14:e6:6d:22:bd:
                    85:2b:00:91:27:df:92:81:c0:a8:d3:ce:72:f5:e4:
                    e5:a3:de:49:80:b9:29:c7:e2:17:f6:1d:e6:af:ed:
                    23:e4:0d:49:cb:72:53:7f:52:33:2f:d3:02:a2:8c:
                    a9:44:18:a9:2b:d7:aa:0e:94:46:c1:bf:f6:49:fb:
                    f7:07:bb:2e:06:59:fc:9b:93:fc:df:0b:a9:1b:a1:
                    44:dd:2a:7c:23:94:7a:05:37:1c:d5:3e:63:cb:18:
                    bb:90:b7:dd:cc:6a:35:25:6e:8c:ca:6c:16:24:af:
                    e2:86:08:53:30:07:36:bd:cd:aa:85:ee:67:b8:0e:
                    f3:1e:a0:ba:a0:48:19:39:a8:31:0b:76:fc:39:29:
                    0e:a2:b9:a6:58:2a:9d:bb:38:2f:af:2f:93:c2:ec:
                    c1:a4:76:53:8c:55:d9:45:14:67:9b:63:f9:19:73:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:2D:DF:C4:91:4B:C9:88:C6:AE:B5:2C:E9:06:C6:F7:A9:CF:7F
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3132392e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:81:05:08:b6:ab:30:2b:2a:d3:2d:1f:14:a8:9e:cd:6b:
         85:bb:29:8f:0c:3d:70:58:47:60:4d:59:be:9a:6f:a9:52:78:
         42:4e:f5:ed:a3:3e:cd:a9:a1:30:82:53:e8:45:64:85:d1:a5:
         94:ab:83:35:52:47:25:8a:b4:c6:e7:ca:74:47:43:3e:c7:29:
         6b:c7:ad:b1:ea:ad:03:45:e7:4f:0b:4a:aa:d9:0e:96:26:57:
         7a:b4:e2:47:78:86:1b:d9:c0:18:b0:b1:f7:13:37:fd:c6:cc:
         95:ad:36:49:09:95:4e:64:12:ee:00:a6:ef:4d:02:57:7c:c8:
         46:79:5b:97:31:9b:d7:40:cc:5a:fa:c1:66:70:78:79:57:69:
         1c:82:ea:62:93:7d:4f:0d:5f:22:d8:78:8a:a5:32:d5:e5:98:
         d8:57:12:b8:e7:52:5c:95:c7:c0:ba:4a:65:ae:e3:c0:05:ef:
         65:9f:8d:d1:6c:43:76:b7:d2:96:d8:7d:54:75:08:43:35:e8:
         5e:b6:51:a9:27:63:fb:dd:7c:58:e0:28:fb:8b:7a:93:3c:57:
         f8:2d:9a:6d:4d:68:ce:05:3e:7b:5e:cd:5b:93:77:80:7b:3c:
         40:af:ab:09:ed:a9:06:aa:48:a8:6b:45:65:79:58:71:eb:45:
         fb:23:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org