Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234362e302f32332d3234203d3e203237373432.roa
File:                     3139302e3134332e3234362e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier:          1nS6EF6gl8uY4cpKO9vnspMSQPAoD1D3dkV/oPEiqsk=
Subject key identifier:   17:BC:72:CB:A3:10:14:3B:69:2D:E2:02:49:95:3A:EA:CE:FD:0E:A9
Certificate issuer:       /CN=C0CE7DDA676A306A376374B13782ABD923687F5D
Certificate serial:       6DACA91CD98C6F47BBCC16E87335E010E62FF3CD
Authority key identifier: C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234362e302f32332d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 17:42:12 +0000
ROA not before:           Tue 05 Mar 2024 17:37:12 +0000
ROA not after:            Tue 04 Mar 2025 17:42:12 +0000
asID:                     27742
IP address blocks:        190.143.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ac:a9:1c:d9:8c:6f:47:bb:cc:16:e8:73:35:e0:10:e6:2f:f3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CE7DDA676A306A376374B13782ABD923687F5D
        Validity
            Not Before: Mar  5 17:37:12 2024 GMT
            Not After : Mar  4 17:42:12 2025 GMT
        Subject: CN=17BC72CBA310143B692DE20249953AEACEFD0EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:d5:29:db:cf:66:e9:a8:22:35:95:12:e9:
                    02:50:be:30:09:33:35:f4:a4:9f:48:cf:16:a1:5c:
                    4a:48:ce:cb:be:12:30:31:19:a3:b1:a6:7c:7b:58:
                    0a:16:6b:47:9a:a1:55:34:20:16:37:20:61:eb:10:
                    25:f2:d7:8c:5b:19:37:33:c8:0a:a6:37:4d:5e:91:
                    97:ec:f9:cb:dc:19:b6:ae:15:ba:05:01:78:cf:c8:
                    3c:53:a3:a7:bc:d6:f4:b1:66:7c:b7:3d:ba:63:75:
                    13:78:20:d1:fb:dd:34:c2:25:f9:c9:38:75:a4:1c:
                    43:44:eb:58:e7:d1:73:3d:8f:2a:ea:99:b0:df:ef:
                    84:29:86:43:91:70:f9:0c:1d:f1:5a:7a:20:12:5d:
                    b6:81:91:c2:2d:e5:2c:40:b4:c3:29:85:03:80:7f:
                    da:8d:24:36:2a:2d:1f:3c:71:31:ee:b3:ae:30:2f:
                    60:9b:13:1b:4e:89:78:14:5d:f8:ad:d8:d3:85:c5:
                    3a:52:0f:38:02:d5:71:b7:a6:08:0f:a0:29:cf:76:
                    50:04:69:da:03:01:c2:a7:da:47:bc:91:73:18:18:
                    de:d0:91:07:f5:0a:39:03:dd:d6:f8:37:f1:a4:9b:
                    27:45:3e:62:72:65:d1:8a:58:4d:e2:70:32:aa:04:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:72:CB:A3:10:14:3B:69:2D:E2:02:49:95:3A:EA:CE:FD:0E:A9
            X509v3 Authority Key Identifier:
                keyid:C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3134332e3234362e302f32332d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:72:ce:59:5a:20:39:91:46:01:bf:c5:5a:9e:e2:7e:1e:
         83:c8:05:76:1a:48:70:d1:52:ba:ce:26:03:e4:bb:92:3c:21:
         43:f7:e0:e7:60:eb:6c:c3:c4:24:8c:9e:84:b2:58:8b:5e:55:
         27:3a:30:22:ba:37:d5:bc:cc:90:9d:b4:41:21:08:75:38:94:
         9e:b8:de:0a:69:72:a7:2c:72:d6:a8:57:a3:78:f3:b0:46:7b:
         72:cd:de:a3:8f:64:c0:14:a0:b2:d2:b1:75:1c:28:f7:ea:64:
         c4:a4:4e:b4:32:9d:2e:ec:92:20:66:14:77:7c:db:d8:18:9d:
         4d:01:61:6a:ad:3e:ef:21:92:5a:cc:9b:39:22:54:07:cd:d1:
         4f:c7:9e:b9:b5:bb:25:34:25:48:04:44:a5:26:d0:c0:c3:e6:
         36:22:1f:7d:a6:f9:0f:9e:a3:ef:9b:82:6c:8e:fb:80:00:6f:
         e5:42:91:f4:bf:af:38:b5:81:7f:73:b2:e1:85:52:51:84:f4:
         d5:c0:4f:33:77:1b:40:d6:16:d4:b8:47:a0:a6:e3:b5:48:c8:
         12:02:ff:70:05:4f:db:8e:9b:4b:d5:13:da:3c:37:00:ae:be:
         06:45:9e:87:97:9b:6d:bd:0f:6e:18:6f:04:66:f4:7e:a2:1f:
         87:61:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org