Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137322e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137322e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          AG4gLBhcqEckQd46xn1Maw5tt/b4tQmtJGKSar44EvI=
Subject key identifier:   85:AE:D2:63:A1:D4:56:D7:08:A3:99:EE:CF:1F:D9:0E:19:49:30:CA
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       4A13BC6A86ED4497E2A55326AB44F46F50B12589
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137322e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:45 +0000
ROA not before:           Tue 05 Mar 2024 17:56:45 +0000
ROA not after:            Tue 04 Mar 2025 18:01:45 +0000
asID:                     28099
IP address blocks:        190.3.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:13:bc:6a:86:ed:44:97:e2:a5:53:26:ab:44:f4:6f:50:b1:25:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:45 2024 GMT
            Not After : Mar  4 18:01:45 2025 GMT
        Subject: CN=85AED263A1D456D708A399EECF1FD90E194930CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:65:8c:e9:3b:dd:12:1b:80:f2:2a:8d:6b:
                    08:63:7f:fc:52:da:7f:db:d9:da:a0:a0:3c:fc:ae:
                    22:a8:77:9a:6e:30:c4:1d:68:84:ff:b4:b3:db:05:
                    9e:bb:7d:09:2f:17:ed:8e:51:7e:9f:1d:68:64:b7:
                    b2:2b:2d:12:8c:78:df:99:b9:c4:7a:b7:7f:ad:56:
                    72:7d:44:17:40:a5:0d:d4:43:45:23:cb:94:2b:70:
                    6f:79:90:22:e9:ee:cf:b9:02:61:77:4b:40:5a:bf:
                    08:4b:0f:2b:45:c9:81:69:a2:dd:a9:bd:a6:01:e6:
                    7d:81:98:79:80:8d:ed:95:bc:83:75:84:07:96:f8:
                    8d:bf:ec:ad:c3:40:37:1c:d1:af:55:e1:af:94:68:
                    a4:73:47:71:21:f4:d0:a8:6a:a2:f4:be:dc:88:4b:
                    e6:71:7c:90:8f:e2:1c:eb:1d:f0:40:50:54:0d:f6:
                    0d:b3:38:8b:d5:10:86:01:31:cd:f4:6e:f4:66:e4:
                    9c:25:95:4c:39:e9:3a:b4:c2:cf:02:c6:b0:d7:72:
                    58:25:c9:41:d0:e3:49:12:f8:6e:a5:5f:fa:35:1b:
                    40:40:5e:1e:b0:57:30:b6:aa:a8:e4:2a:34:90:6d:
                    17:2c:5f:4f:34:55:52:8a:dd:c5:4c:b6:fd:ff:72:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:D2:63:A1:D4:56:D7:08:A3:99:EE:CF:1F:D9:0E:19:49:30:CA
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137322e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:01:f4:c9:fd:d1:31:16:c4:e2:b6:dc:f2:51:44:36:7d:
         e0:eb:8c:a0:24:59:99:a4:5a:0a:a0:a5:f2:f8:cf:79:f1:3f:
         f6:4b:85:6c:e0:c5:7f:1a:11:9d:90:db:5f:b3:0a:31:4d:8c:
         de:80:a9:ae:fa:fc:d8:1e:cd:2d:a3:47:7e:bd:dd:b1:5c:90:
         b1:08:47:ef:7d:1f:97:ee:e8:82:78:f1:3d:98:74:03:b9:96:
         4f:91:b8:76:f0:f6:7b:74:0d:53:0c:cf:e8:ee:11:4d:94:dd:
         2f:49:18:fc:f2:27:32:f6:af:71:10:c4:2d:2a:26:ee:6e:46:
         37:65:bd:da:e3:24:b9:45:61:42:69:42:50:fa:a6:00:3c:b5:
         45:54:8a:84:66:07:fd:00:39:58:22:de:71:c8:d7:2b:e8:1a:
         7b:58:41:87:fa:c5:69:c3:0c:3f:1c:04:56:1e:cb:b8:92:ac:
         a4:2c:28:39:9b:b6:fc:c9:eb:45:2d:f3:32:94:72:2a:21:da:
         07:24:4a:de:5b:fc:7a:17:3e:fc:0e:75:70:70:97:8c:a4:b8:
         8b:2e:ca:cc:25:e3:71:26:42:c2:47:fe:91:b4:20:b8:99:61:
         5e:13:dc:52:b9:9f:7f:6f:dc:b5:4d:f0:25:7b:99:d7:a9:87:
         4b:78:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org