Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          bMh4bFmmOufu2XK8Dndq2k+bHNof4q5GNSNUN+iY0ro=
Subject key identifier:   4F:AE:A2:99:1D:4B:82:32:45:78:B5:7C:AE:3A:63:F6:C2:2D:5A:EE
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       4B29015657E516D4A4DD93A2BB6522F1AA3350E0
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 05 Mar 2024 17:40:19 +0000
ROA not before:           Tue 05 Mar 2024 17:35:19 +0000
ROA not after:            Tue 04 Mar 2025 17:40:19 +0000
asID:                     263245
IP address blocks:        190.107.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:01:56:57:e5:16:d4:a4:dd:93:a2:bb:65:22:f1:aa:33:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Mar  5 17:35:19 2024 GMT
            Not After : Mar  4 17:40:19 2025 GMT
        Subject: CN=4FAEA2991D4B82324578B57CAE3A63F6C22D5AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:82:0b:b1:a6:8c:82:1b:11:5b:74:99:ec:
                    20:27:97:e4:1e:9e:03:3d:79:95:e2:73:79:0f:ef:
                    2e:a4:d8:eb:48:d1:aa:c7:38:cd:88:9a:6d:c8:6b:
                    6d:df:55:1e:25:a1:4c:32:9d:b0:e6:28:2f:bb:cd:
                    2c:5f:a6:bc:f9:fe:b9:18:09:63:09:69:75:e2:99:
                    fc:5b:79:5b:c7:ba:92:2c:de:8f:df:18:6e:6c:e3:
                    84:6d:4b:f0:7b:0b:1b:79:27:ab:70:05:80:7a:b9:
                    5e:81:e2:58:6d:04:8d:2d:52:3b:02:7c:bf:4f:89:
                    ae:e2:13:60:d4:aa:2a:7d:17:b6:c5:07:d5:09:4b:
                    15:08:5a:20:72:52:fb:1d:36:c7:32:b0:9f:45:75:
                    6f:d9:bd:cb:7e:32:dd:34:38:97:5b:92:0e:ff:8c:
                    d9:9e:75:d4:7b:d9:bc:13:7a:ac:f2:d2:cf:2f:a4:
                    6a:7d:c9:6f:f1:29:88:c7:17:6d:e6:b4:f7:5f:69:
                    ce:89:ea:55:81:89:24:fd:40:cd:88:d6:a8:55:b3:
                    47:97:05:6c:d5:73:5b:3a:e7:90:1a:91:49:2a:21:
                    c3:71:de:8f:cf:54:93:fa:e5:9a:64:6e:af:2b:64:
                    37:29:51:63:d0:95:df:db:f4:d8:98:0c:3f:a9:1c:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:A2:99:1D:4B:82:32:45:78:B5:7C:AE:3A:63:F6:C2:2D:5A:EE
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233372e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e6:5e:cd:95:3f:e8:d4:b5:8b:1b:be:e3:34:a2:82:bc:e6:
         aa:11:b1:80:d2:bb:71:ae:0d:18:0e:7f:87:2f:5b:d6:f4:e8:
         f0:48:09:d3:06:f4:e1:22:0b:2a:ae:65:22:77:19:d1:ed:64:
         69:61:c2:e2:b5:4f:0f:37:ea:04:01:e0:37:16:b4:ec:92:77:
         d8:d1:56:f7:cf:9e:f2:b6:7c:c0:bc:ea:c2:db:82:2b:06:10:
         b9:92:7b:94:2d:9b:46:8e:bd:38:54:3e:95:11:93:6c:6c:10:
         04:1d:10:c2:53:cb:46:1e:7a:ef:54:49:c9:09:ed:98:3b:82:
         da:7a:e4:af:31:34:62:13:8a:81:c6:de:cd:7c:0f:95:8e:2b:
         7d:f7:df:4d:74:c9:29:17:1c:b3:ab:5b:a0:0d:b8:73:0e:1b:
         65:4d:6b:d7:9f:e6:86:ac:d4:46:52:48:03:fd:da:0a:ee:f0:
         29:b6:69:42:f3:da:7a:c4:a2:0a:31:96:c6:db:26:6b:13:f8:
         3a:ad:84:9d:9f:ef:cb:02:3b:8a:bf:28:ef:2a:85:52:94:73:
         55:59:e8:15:d6:3e:4a:f7:85:b1:ef:f4:9a:10:6d:bc:dd:13:
         45:33:1c:79:4e:f6:e4:e1:1f:67:23:04:9f:50:d0:e5:be:17:
         4e:95:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org