Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32342d3234203d3e203238313033.roa
File:                     3139302e3131302e3232362e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          YWKmHkno70MNELrlupCa6YI1FI+0wfa4CM2SeziXXTU=
Subject key identifier:   52:C0:34:51:B2:AB:06:02:0B:8F:1E:8F:74:2E:24:8F:26:60:B0:2B
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       7CCF111B997AF6925F416F3D2D98864EAA4BBFCF
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:50:02 +0000
ROA not before:           Mon 12 Aug 2024 12:45:02 +0000
ROA not after:            Mon 11 Aug 2025 12:50:02 +0000
asID:                     28103
IP address blocks:        190.110.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cf:11:1b:99:7a:f6:92:5f:41:6f:3d:2d:98:86:4e:aa:4b:bf:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:45:02 2024 GMT
            Not After : Aug 11 12:50:02 2025 GMT
        Subject: CN=52C03451B2AB06020B8F1E8F742E248F2660B02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:3b:18:04:5f:5f:3d:28:41:14:e9:ce:ff:
                    5c:e7:26:14:a3:68:61:c4:49:2a:1d:78:77:aa:e1:
                    7e:b9:52:09:84:08:71:91:59:36:b5:26:21:0d:84:
                    1a:74:1a:42:ad:3f:00:d9:56:5b:87:7e:68:95:62:
                    f9:d6:ec:1f:67:23:aa:6f:7a:3e:d5:0b:cb:b0:9c:
                    f8:79:e1:ee:5b:2f:6f:46:53:fe:59:0b:f8:f6:2b:
                    cd:50:fd:ae:74:f2:97:eb:df:87:18:d0:8e:18:22:
                    91:6c:ed:a7:a8:bb:74:29:6c:40:be:94:86:42:34:
                    de:c7:77:e6:54:bd:95:a4:10:5a:3a:9a:71:00:2c:
                    66:fc:58:33:0c:7c:17:34:02:52:9c:69:41:d1:aa:
                    da:b8:a9:90:8d:eb:af:26:5a:9b:d8:13:33:e4:89:
                    70:7a:fc:4f:ed:d9:3a:94:28:23:78:f4:aa:e3:a7:
                    b5:e8:17:4b:9e:54:50:82:45:0f:b2:35:d1:4e:ce:
                    80:28:68:89:28:be:f6:3c:80:b8:3f:e7:84:f7:9c:
                    0b:3f:70:fc:a1:66:34:a5:59:6f:13:57:09:12:a1:
                    53:49:94:aa:e8:95:ba:1b:6e:9e:07:11:93:83:1c:
                    e1:e8:94:f9:90:e9:8c:2d:7d:c6:83:70:bb:0a:43:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C0:34:51:B2:AB:06:02:0B:8F:1E:8F:74:2E:24:8F:26:60:B0:2B
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:89:68:c8:83:1b:14:8d:e6:0c:6a:2d:f8:5b:5d:da:f7:0b:
         fd:f9:c6:01:16:96:83:50:ca:5c:b8:3b:46:57:97:ce:0b:f6:
         ad:46:4e:d6:cb:c0:55:55:25:0f:dd:ab:f5:f6:b1:31:4a:c3:
         59:6b:3e:ef:58:1d:29:d4:11:85:8a:ca:6c:0b:e6:8e:bc:7a:
         d9:36:c0:21:9f:56:16:f7:f9:3a:c8:8c:7c:0d:7e:0c:bc:d7:
         cd:a0:8d:1a:47:bf:52:5d:a8:29:d3:cc:82:31:e7:ca:49:62:
         5e:3b:32:cd:27:5a:b0:22:11:70:2a:c8:60:0b:fb:d4:4a:ec:
         6a:65:36:6f:31:da:0c:1c:92:f0:6d:ca:00:17:ba:d1:01:b0:
         5d:06:5e:dd:7b:23:a1:c7:0c:f7:16:15:80:e8:99:49:ee:76:
         14:32:05:ac:61:f4:dc:1d:8b:f6:5d:bc:29:6e:f6:93:2e:a8:
         af:90:68:88:08:28:c2:0c:d2:7b:7c:2e:e6:de:c1:02:5c:ec:
         0a:b2:38:33:bf:62:d7:d7:b0:17:21:28:56:83:b2:a3:2b:1d:
         78:69:d1:2b:62:aa:0d:67:88:5e:d1:fe:0b:fc:02:33:c6:dd:
         af:d6:ee:b8:91:cf:d8:36:7f:b9:64:e7:1f:ae:05:1e:59:9f:
         57:9e:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org