Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/3139302e302e3232382e302f32342d3234203d3e20323033333335.roa
File:                     3139302e302e3232382e302f32342d3234203d3e20323033333335.roa (raw, json)
Hash identifier:          d2aEJnes+5JMvGuXtG8+fTd72Dd1xYWcVF0AJCu5W+I=
Subject key identifier:   41:9E:CB:61:9D:74:2B:7F:5F:9F:A5:C4:48:D6:DD:6C:1A:EC:72:BA
Certificate issuer:       /CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D
Certificate serial:       285D87D3DBA84B3C8F8B96A9DC177EDAD43FCE32
Authority key identifier: 1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/3139302e302e3232382e302f32342d3234203d3e20323033333335.roa
Signing time:             Tue 05 Mar 2024 17:57:22 +0000
ROA not before:           Tue 05 Mar 2024 17:52:22 +0000
ROA not after:            Tue 04 Mar 2025 17:57:22 +0000
asID:                     203335
IP address blocks:        190.0.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5d:87:d3:db:a8:4b:3c:8f:8b:96:a9:dc:17:7e:da:d4:3f:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D
        Validity
            Not Before: Mar  5 17:52:22 2024 GMT
            Not After : Mar  4 17:57:22 2025 GMT
        Subject: CN=419ECB619D742B7F5F9FA5C448D6DD6C1AEC72BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:b0:4f:85:ea:ff:83:69:82:f9:36:5f:95:
                    16:18:11:5e:e4:89:8e:8a:e3:91:fb:04:68:22:09:
                    31:b9:39:38:82:82:b0:e4:23:73:53:f1:9c:c6:f5:
                    e9:36:32:9f:48:b3:f2:fe:5b:ea:c2:1a:9a:55:db:
                    40:ce:47:c8:3c:d4:a6:18:64:15:74:d8:1b:84:ea:
                    0a:8c:99:3f:f6:13:41:98:6d:66:c6:40:e4:8a:21:
                    1b:17:45:c3:ca:30:74:3e:5b:8b:42:78:54:31:b2:
                    15:b1:61:bb:2f:59:fb:c8:68:aa:cb:4a:9c:0d:0d:
                    7b:92:9e:f5:c3:9d:4a:e1:f6:4d:06:27:f6:2e:3a:
                    6a:b4:33:de:83:65:20:4a:19:b8:b4:e0:5e:87:cc:
                    1d:af:f0:32:4b:ea:d5:23:9f:12:43:78:cb:32:15:
                    ff:bf:c2:b2:89:c6:f1:ff:d7:ab:5e:fc:f7:d7:1a:
                    72:0b:66:38:ca:54:38:9a:7b:db:f0:5e:df:f7:51:
                    f6:eb:13:69:0f:4f:1c:70:63:99:f8:eb:3c:89:b4:
                    44:f2:92:a8:29:89:16:35:22:b3:a8:ac:47:48:68:
                    35:ea:32:f4:3d:bd:58:5e:ff:a7:ed:21:34:6f:8e:
                    98:d5:68:f7:8a:a3:a3:70:95:5f:e3:b7:9c:d5:2d:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:CB:61:9D:74:2B:7F:5F:9F:A5:C4:48:D6:DD:6C:1A:EC:72:BA
            X509v3 Authority Key Identifier:
                keyid:1F:E1:4B:93:7D:D7:6E:5B:FD:D9:CA:AB:4B:F1:12:CF:61:E3:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FE14B937DD76E5BFDD9CAAB4BF112CF61E3929D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA196223E73F9DD9FAC2B86B2F7AB7AE4AA6AC676F72446DC4A948213DF8FE2A/0/3139302e302e3232382e302f32342d3234203d3e20323033333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:8f:dc:9e:29:8e:57:53:d2:b6:28:b7:a0:ca:98:57:8e:
         a1:02:c4:3e:26:00:48:c6:0e:c7:4a:c2:10:4a:71:11:55:81:
         62:ad:b9:51:ea:0b:10:a5:0e:20:8e:48:4b:88:d0:6f:fc:22:
         89:a9:34:c9:de:b0:34:db:32:ea:3c:ed:b2:82:f4:03:e3:50:
         a3:3b:9b:17:9a:5c:2d:61:55:64:7f:14:49:dd:79:d4:7f:d3:
         51:71:c1:65:cf:22:c2:db:db:2a:f3:d3:7e:1c:78:3c:e9:37:
         f6:51:cc:98:1c:d7:1b:a6:77:cd:9d:db:a6:b7:a2:45:ee:30:
         aa:68:cc:3e:91:de:6c:9f:73:b8:12:f7:1c:ae:4a:d3:14:30:
         35:71:96:b4:3d:58:4e:5f:a4:b1:91:13:5c:c1:80:48:58:19:
         14:f6:4f:90:9f:39:35:bb:15:a1:8c:38:2e:f0:5c:8c:c8:d6:
         73:d6:9d:99:e3:c3:dc:89:f2:77:68:0c:ed:f8:5e:8e:44:6a:
         0e:a1:31:a7:d3:bf:ed:79:66:51:c8:a7:64:bf:04:2b:5a:1b:
         bb:35:7d:d8:18:b3:98:be:45:e2:7a:45:24:99:b5:b1:8a:75:
         f4:e3:93:04:ec:4c:c3:97:98:1e:a5:78:5c:43:f7:4c:a4:5d:
         7b:6e:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:14:11 2024 by rpki-client on console-ams.rpki-client.org