Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137302e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137302e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          Z3E9V7kcBCBDoforaNM9+dKkSR6k7jBzjDbn2rAy8bE=
Subject key identifier:   EC:F6:0F:60:D0:76:86:B0:63:24:95:2C:5E:83:E4:87:C0:61:5C:98
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       4C307207A62EF3DCF35CA73A28A0C735F9EAA26D
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137302e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:44 +0000
ROA not before:           Tue 05 Mar 2024 17:56:44 +0000
ROA not after:            Tue 04 Mar 2025 18:01:44 +0000
asID:                     28099
IP address blocks:        190.3.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:30:72:07:a6:2e:f3:dc:f3:5c:a7:3a:28:a0:c7:35:f9:ea:a2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:44 2024 GMT
            Not After : Mar  4 18:01:44 2025 GMT
        Subject: CN=ECF60F60D07686B06324952C5E83E487C0615C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:8a:8c:f9:3b:b6:3b:fd:ef:60:d0:8b:26:
                    ec:9c:5b:e7:dd:bf:10:a4:2b:de:ac:1f:12:d5:c2:
                    a9:13:83:c4:d7:83:af:db:7d:95:96:7d:9e:54:8c:
                    f2:3e:28:1c:e3:88:1d:32:20:16:09:54:f6:3b:12:
                    c7:bc:7c:fd:c3:44:4c:9c:4b:1a:71:9a:b9:cd:1d:
                    8e:e6:75:90:28:cf:aa:84:69:7f:f7:f5:36:fe:4a:
                    bb:9d:96:63:6c:32:0b:b0:af:50:a2:c5:56:a4:3f:
                    34:fe:c3:9a:8c:14:8a:6d:7c:c4:ac:8e:a1:8d:5e:
                    f5:04:61:69:44:e4:c0:40:e6:d8:c7:9b:3c:95:9f:
                    b6:52:f6:44:ce:54:8c:a8:2f:a3:49:8f:eb:3e:c4:
                    34:c1:cf:ac:90:eb:4f:87:01:30:64:80:72:82:ef:
                    54:40:db:88:e5:2d:be:eb:5f:2f:9c:08:2f:9b:8c:
                    bc:b4:78:99:29:6c:3d:08:9a:d5:3b:98:9c:5f:5f:
                    69:d9:16:cd:71:af:67:e4:ad:8e:87:5d:05:23:b6:
                    77:c3:72:ce:5d:c1:cc:4d:c8:51:3c:72:c6:3d:51:
                    51:e0:69:85:82:31:33:53:7c:d8:d2:b0:83:67:8b:
                    f8:2e:64:c7:96:9d:50:01:8f:98:a9:64:53:76:ea:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:0F:60:D0:76:86:B0:63:24:95:2C:5E:83:E4:87:C0:61:5C:98
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137302e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:93:0f:3d:a9:3f:31:50:0a:15:7a:47:b8:f2:8d:fc:59:70:
         45:b4:fa:2c:6a:19:47:3a:75:9e:b3:5f:9d:e6:ed:7e:57:43:
         27:5f:3c:83:aa:3f:ee:4e:e9:5f:1d:07:b8:25:26:ed:8c:20:
         1c:78:83:b4:27:8a:cb:49:85:3e:24:00:64:53:d4:35:98:c4:
         79:2c:92:6f:05:99:61:73:0e:55:14:90:82:86:60:a8:08:fd:
         10:76:a2:1b:fa:a8:04:71:56:ce:5c:37:f4:24:83:f3:bb:87:
         ff:8e:24:57:ad:03:b5:56:68:5a:e1:30:70:8e:27:92:b4:fa:
         d7:80:cd:6d:85:78:5f:8d:d9:27:f5:c1:20:61:c5:7d:4b:e3:
         33:9b:cd:4a:8a:72:0c:50:f2:7a:31:b2:54:8b:50:27:b2:cc:
         6a:f8:be:5d:8d:60:11:6f:c9:32:ec:f5:cf:84:39:a1:d6:e8:
         5e:7f:d3:a6:5b:91:00:d5:a6:a1:71:3c:6f:ad:26:7c:a7:38:
         37:80:3b:dd:ff:20:97:43:46:78:a8:c8:2b:71:38:c1:72:ef:
         a1:bd:6e:1a:1d:92:ed:c4:f5:31:10:c5:f1:e2:75:72:c2:91:
         68:74:6f:ab:58:72:3c:cd:9c:8f:10:9e:f6:9c:05:76:78:7e:
         c3:d8:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:42 2024 by rpki-client on console-ams.rpki-client.org