Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136382e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3136382e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          lc8+5nVO+FTh4zt8XDYFiToh9bGNn3gWHxp/YAhBDaY=
Subject key identifier:   D0:56:93:F0:24:4E:2D:D1:4B:63:19:CD:4F:9A:7D:9A:D0:9E:89:B4
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       107195E9E53EB237FBD8FDF378AB6ED4183C0AA5
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136382e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:46 +0000
ROA not before:           Tue 05 Mar 2024 17:56:46 +0000
ROA not after:            Tue 04 Mar 2025 18:01:46 +0000
asID:                     28099
IP address blocks:        190.3.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:71:95:e9:e5:3e:b2:37:fb:d8:fd:f3:78:ab:6e:d4:18:3c:0a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:46 2024 GMT
            Not After : Mar  4 18:01:46 2025 GMT
        Subject: CN=D05693F0244E2DD14B6319CD4F9A7D9AD09E89B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:05:39:64:80:a2:85:55:3a:ab:0c:01:f1:
                    7c:8c:24:27:df:78:66:75:f0:12:a3:61:f5:96:6b:
                    eb:3d:77:ba:d8:fc:ab:53:05:df:d3:25:dc:43:18:
                    ef:b9:90:16:c0:c2:ca:7b:48:e7:db:78:d2:2e:f3:
                    32:46:53:9e:93:2c:89:00:88:44:ce:43:f8:cc:43:
                    c4:df:18:0b:bb:a6:49:a6:87:8f:62:aa:dd:41:df:
                    46:1c:04:f9:56:03:1d:24:c7:cd:dc:b8:de:5f:d4:
                    f5:7f:28:5f:07:82:b9:cb:85:45:91:7b:33:bf:3d:
                    01:e4:82:c5:40:8f:f8:11:59:a8:61:5d:c6:29:7b:
                    69:9c:65:0a:8f:ac:14:34:df:d3:f0:94:3a:97:2b:
                    66:84:57:ed:66:8c:91:e4:36:f1:47:4b:a4:18:71:
                    6d:a7:e3:90:07:e3:c2:96:7e:3d:82:8f:bb:5e:05:
                    b1:e6:58:5b:1e:c1:79:db:9c:e0:dd:2f:b6:2d:34:
                    78:0f:df:c8:1e:a1:f0:f7:4b:79:f8:b4:e2:d0:bd:
                    fc:d2:ed:04:6b:ca:03:71:67:54:b9:f6:59:d5:8a:
                    b5:f5:f6:cd:a6:d5:ef:ec:d0:0f:27:11:58:75:2a:
                    fe:89:4d:cf:f4:05:77:1f:68:c2:fe:49:70:af:3b:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:56:93:F0:24:4E:2D:D1:4B:63:19:CD:4F:9A:7D:9A:D0:9E:89:B4
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3136382e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:8f:9e:25:76:bf:a7:ef:3c:55:d4:1f:35:49:8f:f8:d3:
         fb:0f:c7:fa:53:f0:aa:cb:d7:ed:5b:42:4a:8e:5f:34:7d:20:
         87:7f:d9:a3:1e:f3:38:8b:9e:3e:4e:11:73:a1:9e:da:90:8b:
         56:48:c4:36:3a:07:97:17:82:de:ac:1b:f3:a4:02:db:87:43:
         46:c6:8a:a6:fc:ec:d9:ba:cb:37:af:4f:7d:15:45:7b:17:da:
         80:b1:4d:e5:ce:38:d3:b5:29:07:72:3b:0e:45:d1:44:ce:1d:
         09:5c:d1:d3:6a:a5:2b:ed:3a:df:f1:d8:81:48:2c:5c:0e:33:
         64:00:bf:1b:a9:23:4f:4b:e7:23:a8:91:88:2a:78:b9:f1:ce:
         ff:42:6e:2b:a2:9b:a0:95:d0:66:ee:b1:f2:a2:56:ce:ba:2a:
         e4:6b:d6:64:57:3f:bb:6c:54:56:6e:e3:78:ba:9f:1f:56:c7:
         06:77:c8:68:39:bb:cd:11:3d:ac:c7:0b:8a:8a:c8:fb:ad:9f:
         fb:93:13:77:2f:93:04:1a:c3:2d:d5:38:29:83:a4:ec:0a:64:
         4f:c5:bc:26:64:24:20:76:25:e2:99:bc:ba:ec:53:38:9d:64:
         af:b2:f3:4b:de:3b:07:eb:f4:c2:02:19:29:2c:02:07:f2:8c:
         55:86:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:06 2024 by rpki-client on console-ams.rpki-client.org