Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234342e302f32332d3234203d3e203238303336.roa
File:                     3139302e3134332e3234342e302f32332d3234203d3e203238303336.roa (raw, json)
Hash identifier:          8dHRGTHOFWJlW/9vwxXX2QxLWHnN5pHLJMel1kP688Q=
Subject key identifier:   25:B2:40:60:52:B0:DA:46:CA:ED:4A:D5:5F:E6:8B:B0:E9:37:78:A6
Certificate issuer:       /CN=C0CE7DDA676A306A376374B13782ABD923687F5D
Certificate serial:       24FF66502CA4D9E8F83910B88DB333F852E5FF94
Authority key identifier: C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234342e302f32332d3234203d3e203238303336.roa
Signing time:             Tue 05 Mar 2024 17:42:11 +0000
ROA not before:           Tue 05 Mar 2024 17:37:11 +0000
ROA not after:            Tue 04 Mar 2025 17:42:11 +0000
asID:                     28036
IP address blocks:        190.143.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ff:66:50:2c:a4:d9:e8:f8:39:10:b8:8d:b3:33:f8:52:e5:ff:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CE7DDA676A306A376374B13782ABD923687F5D
        Validity
            Not Before: Mar  5 17:37:11 2024 GMT
            Not After : Mar  4 17:42:11 2025 GMT
        Subject: CN=25B2406052B0DA46CAED4AD55FE68BB0E93778A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:4d:6b:a3:32:91:86:24:5a:b9:d8:09:8e:
                    41:98:51:5f:9f:21:34:38:ca:47:92:77:c3:7f:3f:
                    0f:57:f1:d7:e5:78:63:be:4b:ec:8b:15:f3:77:46:
                    44:42:6c:78:c3:d3:b4:cd:51:2b:ec:7a:bc:28:01:
                    51:07:2b:02:99:3d:99:c9:64:5a:5d:3b:90:ec:f5:
                    45:e2:78:3f:3e:33:b1:87:39:b5:84:84:b0:9c:8b:
                    fc:6f:35:3e:ad:59:af:e1:a5:f2:c6:29:01:57:df:
                    e5:42:3e:3d:68:b7:c2:32:b5:38:52:6b:f8:56:4b:
                    80:5a:74:da:db:8a:ec:3c:c1:f6:31:a1:4d:ef:25:
                    ef:f6:d5:9e:01:50:ad:6e:11:23:15:1b:ec:f0:5c:
                    9e:28:8d:b5:ae:46:0e:97:72:c5:d4:88:db:88:8a:
                    15:36:6b:41:60:26:95:75:3d:bb:84:d5:80:02:6c:
                    5e:d4:3e:30:cc:6d:0e:ec:43:7f:07:a5:8a:cb:34:
                    95:f9:20:9d:d1:50:84:91:e6:e8:fe:37:22:50:81:
                    f2:15:41:00:43:79:39:91:4c:91:cb:d3:73:a0:06:
                    0a:e8:58:b7:f2:74:8e:d0:3a:6b:d8:a9:20:b1:9e:
                    cb:35:28:1f:5c:6f:38:bf:0a:df:04:f1:74:1a:ce:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:40:60:52:B0:DA:46:CA:ED:4A:D5:5F:E6:8B:B0:E9:37:78:A6
            X509v3 Authority Key Identifier:
                keyid:C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234342e302f32332d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:36:52:bb:be:ec:3d:1b:fc:4c:89:5d:57:cf:a2:91:6f:30:
         34:13:d4:d6:e8:ab:4b:7e:c1:89:98:f5:2d:b2:59:10:bd:fc:
         4a:6d:f1:e0:49:ec:e1:53:f6:72:c9:fb:dc:bc:e4:31:3f:59:
         a8:26:9b:ae:64:4f:b0:5e:e3:c8:aa:78:37:2d:47:2a:44:61:
         d4:41:e3:9d:f8:57:f9:33:a3:a7:b9:2e:fd:52:8d:12:78:ce:
         9e:59:61:5c:42:77:16:c8:6d:6c:77:2e:8e:b2:71:fe:8e:8c:
         10:a7:75:40:f4:ba:a4:cb:94:ca:fa:b8:2d:f1:a4:7d:3d:f8:
         e6:68:e9:8c:12:16:b0:1b:75:73:4f:0c:25:69:47:75:64:3a:
         5a:53:f2:85:e4:8f:87:30:14:25:3f:9b:67:98:6b:5e:e7:e3:
         2c:e7:0f:24:1f:a7:c6:85:92:f6:77:11:18:80:1a:7f:13:c1:
         ba:8e:2b:96:a4:2a:3b:c8:d6:c9:3d:0e:9e:b0:48:2f:10:48:
         a8:f4:93:37:dc:ac:cb:53:a4:4d:f8:b4:b4:03:1f:31:b4:2d:
         1e:40:ce:33:d9:ad:80:12:a6:11:ce:71:c7:9c:1a:e4:99:8d:
         9e:23:10:a9:27:44:c9:50:f5:05:29:f6:9c:32:a4:b6:63:7b:
         05:0c:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org