Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa
File:                     3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          +GOeZYl57+zvR5IVI8Ni9uK7J/LSK8ZHMUORNFk+fqA=
Subject key identifier:   0E:24:6D:C9:5E:9D:96:F4:9A:76:23:18:F0:21:22:35:14:A3:9E:B7
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       324A90D7FF208F843D48799324024839D0D1F112
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:40:00 +0000
ROA not before:           Mon 12 Aug 2024 12:35:00 +0000
ROA not after:            Mon 11 Aug 2025 12:40:00 +0000
asID:                     28103
IP address blocks:        190.110.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 17:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4a:90:d7:ff:20:8f:84:3d:48:79:93:24:02:48:39:d0:d1:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:35:00 2024 GMT
            Not After : Aug 11 12:40:00 2025 GMT
        Subject: CN=0E246DC95E9D96F49A762318F021223514A39EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:2e:ec:c6:23:be:2b:00:54:93:a6:af:cc:
                    89:be:96:0e:fa:5a:6c:65:38:96:83:b6:80:e8:1b:
                    b5:d5:d9:11:40:51:e5:f0:58:8b:22:46:3a:06:54:
                    c1:81:43:25:72:dc:b8:03:b3:78:8f:ac:9a:b6:32:
                    97:8a:61:13:e9:29:0b:80:c1:92:ba:25:db:e1:c2:
                    b1:9e:f1:0a:fe:f1:3a:6f:dd:bf:fb:37:13:7f:bd:
                    de:ba:5f:2f:93:60:9a:a0:4f:32:b3:36:78:7b:86:
                    e8:31:ee:70:91:81:4b:22:b0:25:c0:0e:f1:c9:37:
                    65:9c:23:04:e8:ce:04:52:b6:3e:53:1b:fa:ce:d2:
                    db:e2:6c:5f:fd:ae:80:d8:71:52:c9:cc:9a:06:42:
                    0f:55:17:86:78:88:1a:6c:5a:89:2d:3e:23:7b:62:
                    d4:e2:9c:12:17:80:b6:f0:e3:b2:57:d0:ca:4b:72:
                    27:3c:e2:28:e9:b4:7a:28:d1:75:27:02:b0:00:7a:
                    56:04:98:e2:74:47:22:be:6b:3b:3d:94:01:1b:b1:
                    24:f2:55:e9:85:e4:d6:dc:df:2c:fe:7e:db:e8:1a:
                    e4:53:8d:45:f2:84:ea:71:e1:89:22:09:16:9c:3d:
                    79:99:97:f6:84:08:7e:90:f4:5b:0c:33:61:9f:0e:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:6D:C9:5E:9D:96:F4:9A:76:23:18:F0:21:22:35:14:A3:9E:B7
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3233302e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:fe:3c:bf:dd:4c:d0:e2:5b:a5:3f:05:dc:ef:e2:e9:0d:
         0b:61:21:51:b6:4c:bc:ee:bb:5f:6c:52:c7:32:8a:ab:02:db:
         c3:51:18:11:70:da:17:ab:e7:10:20:5c:ad:43:10:5c:a7:40:
         1a:13:15:27:28:51:48:2d:be:ee:23:c2:fc:4b:e1:35:89:ef:
         d9:a1:4d:0e:8d:a3:b2:90:45:88:29:b4:17:f9:3f:fd:b1:04:
         94:36:07:53:84:cd:45:ef:5f:65:36:53:67:d2:bf:92:93:c3:
         02:b8:47:c1:d6:98:26:9f:95:77:39:a1:d8:6a:1a:b8:51:17:
         b1:3b:aa:f7:84:cb:3e:3a:72:51:a4:cd:02:89:9d:7e:e6:88:
         a6:41:78:64:47:bf:27:57:30:34:38:1c:83:a2:81:95:5e:1b:
         4f:b3:18:e2:17:78:f7:74:d8:1e:96:64:8c:66:06:ec:68:73:
         8e:f0:92:40:2d:51:60:17:c5:06:d1:f7:c9:df:10:a6:f5:0c:
         e5:a2:fb:9f:38:4a:e9:fd:81:40:77:64:26:9d:31:e4:63:af:
         c1:d2:5e:be:8f:fd:78:e4:ec:10:26:97:b7:9b:bf:cc:c2:76:
         fa:86:96:5a:7c:ee:32:1f:51:95:30:41:a4:b2:e9:bf:1b:16:
         7d:9d:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:47 2024 by rpki-client on console-fra.rpki-client.org