Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          0GaaOqfVdnn+sEDZHWHOpETcTL0EywhmlXP2oJ2miQg=
Subject key identifier:   35:5A:98:0D:B3:C5:81:FF:49:6C:3C:23:8F:92:0D:2B:8C:06:D9:70
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       06BED4B46DEC258DC5DCD74DAC91AE6AA998C6CC
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 05 Mar 2024 17:40:22 +0000
ROA not before:           Tue 05 Mar 2024 17:35:22 +0000
ROA not after:            Tue 04 Mar 2025 17:40:22 +0000
asID:                     263245
IP address blocks:        190.107.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:d4:b4:6d:ec:25:8d:c5:dc:d7:4d:ac:91:ae:6a:a9:98:c6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Mar  5 17:35:22 2024 GMT
            Not After : Mar  4 17:40:22 2025 GMT
        Subject: CN=355A980DB3C581FF496C3C238F920D2B8C06D970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:c5:26:f6:21:18:ec:ed:ac:2c:0f:a5:0d:
                    80:7a:84:40:e2:43:b9:0b:fa:e5:8d:ae:41:d9:bf:
                    42:fb:89:38:d2:23:60:eb:93:99:0e:1c:24:50:95:
                    b0:a3:6d:5c:4d:e1:b5:38:3f:5c:1c:cb:5e:89:61:
                    1d:32:b6:a0:12:5f:2b:85:44:78:0a:bd:9a:5f:af:
                    ef:65:a9:8b:1b:4a:6f:ba:f8:f8:46:2b:65:71:c8:
                    e7:52:e5:64:17:4e:32:a6:70:8c:d0:ef:01:b1:d9:
                    05:fd:e1:ff:95:0c:0c:f0:22:70:62:2a:00:5f:fb:
                    97:16:a4:54:9c:c8:72:fa:ab:0e:5b:7f:1a:3d:95:
                    99:e4:33:0a:12:b2:1e:18:94:a0:63:a0:c9:15:fe:
                    94:57:5c:55:b7:68:7b:23:11:d9:d1:01:86:54:78:
                    67:1d:a4:1b:a7:f9:0b:44:71:8a:ad:c2:5a:d8:c8:
                    a4:c3:85:56:7d:d7:4d:f4:c3:a5:46:40:71:0c:fd:
                    71:6f:92:a5:e7:55:90:50:2c:35:84:7f:ca:dd:b1:
                    48:f9:4d:fc:d3:c1:3b:be:0f:a2:50:88:6d:e5:5b:
                    f0:58:88:dc:26:29:ff:7f:b4:ea:93:f0:d3:48:7c:
                    bb:54:47:89:ff:07:c2:2b:60:5a:ed:95:43:80:37:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:98:0D:B3:C5:81:FF:49:6C:3C:23:8F:92:0D:2B:8C:06:D9:70
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:a2:d3:e8:46:5b:7e:3d:a2:87:0e:93:41:23:25:ca:a1:6c:
         ae:cf:75:3e:0d:a7:87:df:1d:3d:80:f3:60:99:26:0e:e6:7e:
         c0:cf:3f:13:38:55:8e:67:54:29:88:e8:ed:f9:15:95:80:a9:
         5a:9c:a9:fe:6a:85:88:f3:39:8f:af:61:c4:5d:80:13:db:a1:
         01:a6:74:d4:45:ee:19:98:0b:ba:63:78:72:eb:7b:a4:a4:8f:
         11:d4:9c:09:10:b7:4a:3e:c7:90:f6:0b:5d:01:2d:91:0b:a0:
         22:38:72:22:98:2c:1e:d1:f8:6b:17:9b:ce:aa:8a:14:41:ff:
         3b:43:f0:0b:3c:4a:cd:f1:52:6e:8c:f4:c1:25:9c:39:a0:b0:
         d2:77:b0:d4:cc:1e:2f:ec:2c:7c:b0:4b:a8:68:be:7a:e7:e4:
         42:e9:01:50:4b:d1:54:5a:81:06:8a:8a:48:c9:cf:f2:fe:8d:
         84:3f:e8:80:06:60:3c:b7:bf:6c:21:36:7d:4f:03:e8:73:97:
         07:16:98:7d:46:20:f2:d4:27:cb:80:6c:0b:63:bc:c0:8a:20:
         e8:91:34:9a:a6:03:44:de:66:2b:4f:c1:3f:56:16:8e:ba:c2:
         ca:d9:8e:ea:27:a0:12:14:d6:e7:70:bf:46:32:27:e9:f0:07:
         95:a2:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org