Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa
File:                     3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          pp1/OhmUzhARyziWnrRHXlFE98uS87cQ1hPOpb1MtmI=
Subject key identifier:   3A:0A:21:46:11:CE:8B:9D:A9:0D:45:DC:7D:8E:15:20:A8:5F:EB:21
Certificate issuer:       /CN=E10A7D4A0B75981E0FB5EA86605DC22332B137C0
Certificate serial:       0E95E58DDE878099840BE57B827701FAF13B1779
Authority key identifier: E1:0A:7D:4A:0B:75:98:1E:0F:B5:EA:86:60:5D:C2:23:32:B1:37:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 18:17:27 +0000
ROA not before:           Tue 05 Mar 2024 18:12:27 +0000
ROA not after:            Tue 04 Mar 2025 18:17:27 +0000
asID:                     262197
IP address blocks:        190.113.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:95:e5:8d:de:87:80:99:84:0b:e5:7b:82:77:01:fa:f1:3b:17:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E10A7D4A0B75981E0FB5EA86605DC22332B137C0
        Validity
            Not Before: Mar  5 18:12:27 2024 GMT
            Not After : Mar  4 18:17:27 2025 GMT
        Subject: CN=3A0A214611CE8B9DA90D45DC7D8E1520A85FEB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:d4:17:12:9c:69:58:86:1f:58:22:64:23:
                    5e:0b:40:80:fe:07:bd:8c:63:91:3a:e4:aa:8c:0e:
                    bf:52:db:23:89:2f:45:26:ab:13:95:43:01:29:6c:
                    dc:16:4c:07:ae:50:53:62:f9:fe:b6:ae:a6:48:b6:
                    c2:51:db:b3:d2:47:05:bb:95:f1:94:de:2c:35:60:
                    24:da:4f:8f:34:33:54:bb:3b:bb:dd:9f:be:fb:92:
                    b2:ee:30:5a:eb:32:ae:99:63:fb:49:5a:89:b2:64:
                    bb:01:ec:6a:69:f9:33:d9:ea:bc:fa:b9:b7:bd:5d:
                    2f:89:fe:f8:2d:7a:fb:f0:92:2b:20:bd:0d:3d:18:
                    c7:5d:44:2f:ba:20:67:7f:16:86:b4:f8:73:b8:79:
                    4d:01:fa:49:49:29:14:f8:10:66:a4:07:58:4f:6d:
                    4e:a8:ec:16:27:c0:41:44:04:61:1b:7f:6a:be:2b:
                    09:00:cf:87:88:f6:de:fe:ed:71:9e:7e:ab:7b:fa:
                    57:fe:f8:d6:d5:13:6e:0b:73:19:05:12:be:c7:6e:
                    2e:54:1c:2c:f5:cf:01:ad:11:22:b8:e0:2e:5e:e7:
                    11:f8:c8:3f:6e:b2:6e:9a:af:4f:55:88:ab:64:10:
                    25:7b:ed:36:f6:35:6d:02:99:67:d7:e3:e6:c6:67:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0A:21:46:11:CE:8B:9D:A9:0D:45:DC:7D:8E:15:20:A8:5F:EB:21
            X509v3 Authority Key Identifier:
                keyid:E1:0A:7D:4A:0B:75:98:1E:0F:B5:EA:86:60:5D:C2:23:32:B1:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E10A7D4A0B75981E0FB5EA86605DC22332B137C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC0D51BB079E91FDAB712EA2BE61943F56BFE45E0B83359873A6F61ED825CF77/0/3139302e3131332e38312e302f32342d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:69:42:3a:9d:67:d4:e5:dc:81:d3:9a:a1:c4:6e:53:cb:
         52:cf:88:99:c9:06:dc:65:53:72:1c:1c:21:92:05:9b:54:8a:
         1e:d1:9e:08:b1:46:52:66:8d:3b:84:49:34:c2:ce:65:ed:79:
         38:7e:28:e1:d2:7f:8f:72:2f:44:82:44:1a:46:5f:18:84:1b:
         7a:40:b6:54:3b:27:9b:58:c2:9f:9c:9d:1b:ca:14:25:d1:c0:
         2a:44:fa:1d:b2:cf:15:61:ac:fa:c5:1c:5d:ac:36:ff:aa:ab:
         8c:1b:e8:90:1b:6d:01:60:b9:f4:01:59:40:71:51:85:20:d4:
         f5:9f:c7:43:c6:a4:60:e2:fb:90:56:a2:d5:de:d1:1a:76:6f:
         4f:c0:9c:9c:ef:21:81:67:93:68:2a:28:50:41:13:01:86:0f:
         e2:23:d0:34:e4:c7:e9:49:d4:2f:69:14:27:c4:8b:22:5f:d7:
         95:1a:44:d7:71:1e:e2:bd:1d:c0:ca:e4:bb:1e:48:e0:16:ac:
         53:86:89:e3:5d:08:10:f4:67:5d:6c:82:19:51:36:99:9d:f9:
         a1:26:62:24:91:8f:5b:ab:4c:1d:20:43:76:99:d9:15:c9:fe:
         ca:59:08:02:9e:f6:76:09:8a:2f:59:7a:ed:bc:7a:cb:a5:12:
         f2:cd:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:46 2024 by rpki-client on console-fra.rpki-client.org