Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233332e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233332e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          1qIhCVnXFHTaMVMHFXZlc1BbXfWKrcl2z4h0hV6HRtQ=
Subject key identifier:   A1:97:01:DF:71:9B:81:68:6B:D9:C4:0B:60:32:3E:0B:1C:F9:92:20
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       3BD5E9C9410CF28E0C71A1858E4A5B02E8851582
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233332e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 05 Mar 2024 17:40:22 +0000
ROA not before:           Tue 05 Mar 2024 17:35:22 +0000
ROA not after:            Tue 04 Mar 2025 17:40:22 +0000
asID:                     263245
IP address blocks:        190.107.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d5:e9:c9:41:0c:f2:8e:0c:71:a1:85:8e:4a:5b:02:e8:85:15:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Mar  5 17:35:22 2024 GMT
            Not After : Mar  4 17:40:22 2025 GMT
        Subject: CN=A19701DF719B81686BD9C40B60323E0B1CF99220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:b5:65:53:70:92:e0:25:ca:ea:96:2d:69:
                    ee:13:a9:51:13:32:1d:fa:86:6c:b5:6a:af:5a:33:
                    a5:f7:e0:2c:67:ad:ec:32:d7:96:a4:50:d6:30:a2:
                    2c:99:a6:61:cb:72:68:39:91:ff:84:cd:93:90:27:
                    43:5d:8d:0c:6f:52:93:6c:b1:27:49:bd:09:80:27:
                    98:e0:25:ac:02:4f:9a:c6:a5:59:50:a9:13:e9:eb:
                    02:b2:92:e5:e2:d5:f8:d0:87:b5:d2:e5:74:25:b8:
                    c5:fd:da:89:03:57:1b:89:41:cf:d9:4d:b1:ec:21:
                    53:8b:71:5f:97:b9:96:09:a6:91:8a:c2:9e:b8:9e:
                    d0:0f:87:39:e0:70:4e:17:b2:09:96:19:d5:02:80:
                    d6:82:34:0d:fd:f8:04:6e:f9:c5:9e:5e:9a:1d:5b:
                    58:f5:60:da:3e:11:e6:e5:ad:53:46:bf:9e:f5:8c:
                    75:21:f4:b5:28:d2:17:7b:d6:39:6a:01:5b:e2:98:
                    22:ed:6d:b3:a0:4c:ad:f2:d3:a1:8e:ee:2a:b8:07:
                    0d:85:9a:f2:9b:61:0e:80:06:74:b5:8e:49:ae:19:
                    5a:64:10:d3:80:b8:c8:77:b2:42:ed:dc:6a:11:2e:
                    6a:36:18:6b:70:64:35:99:39:97:f7:64:cb:f8:cf:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:01:DF:71:9B:81:68:6B:D9:C4:0B:60:32:3E:0B:1C:F9:92:20
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233332e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:72:51:f0:6f:1c:a9:1d:1a:93:70:ef:9f:88:ef:bf:ee:b5:
         6e:00:7a:d0:12:0f:1b:d6:75:6a:df:05:30:e6:11:32:13:92:
         1e:b0:c7:62:e1:86:30:52:e4:3f:80:29:a6:c9:4d:f4:de:71:
         c4:1c:a3:8a:54:12:f6:94:6f:64:a6:6a:d2:a5:a4:7e:20:d6:
         a0:25:5b:d1:a0:bf:77:b5:5e:1c:e3:b0:71:fd:24:66:38:70:
         c6:de:e2:40:10:3a:e6:49:8a:73:29:12:e6:ab:a5:57:45:98:
         53:9d:46:bf:57:a0:5a:cf:bb:ed:b0:83:93:89:90:ce:02:eb:
         be:a8:5c:71:5c:d8:a4:38:5f:2f:cf:81:25:03:48:d5:21:ca:
         7f:67:4a:c0:26:f2:59:30:db:91:c1:7e:70:b7:e9:c6:e8:30:
         12:42:fb:7b:2c:f0:6a:61:03:fd:4c:6c:dc:70:90:6f:a1:5e:
         35:fa:6f:29:88:14:55:8b:69:4b:44:38:f9:60:f2:15:3a:e6:
         fb:ca:94:ef:b6:2b:f4:af:a7:81:4a:eb:73:84:f6:f5:48:5d:
         e4:0f:78:f0:41:c9:ef:58:c6:8c:b7:fe:4e:91:47:4a:d8:c4:
         0b:9d:41:5a:8a:67:46:92:e1:4a:ba:b4:06:1e:c8:05:60:e1:
         cb:37:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org