Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137332e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137332e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          JLE/JqGcinY8ELw3t+fgDCRpA+kdmELlKIG1MNAPCis=
Subject key identifier:   0A:B4:22:51:D2:80:E2:CA:EB:5A:E0:D4:51:F5:50:62:1B:F2:6E:FA
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       5905DDE46BA41C1AA2B50EBF7385DFF77F22A6F3
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137332e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:45 +0000
ROA not before:           Tue 05 Mar 2024 17:56:45 +0000
ROA not after:            Tue 04 Mar 2025 18:01:45 +0000
asID:                     28099
IP address blocks:        190.3.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:05:dd:e4:6b:a4:1c:1a:a2:b5:0e:bf:73:85:df:f7:7f:22:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:45 2024 GMT
            Not After : Mar  4 18:01:45 2025 GMT
        Subject: CN=0AB42251D280E2CAEB5AE0D451F550621BF26EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:6d:72:e2:48:e4:f8:e9:b9:40:44:b7:36:
                    60:e1:79:48:ee:0a:38:fe:8a:1b:0a:d5:68:07:62:
                    e4:95:73:ba:06:6e:c3:a3:1e:6c:20:a1:0b:cb:c2:
                    fd:2b:48:7f:40:b6:36:cb:80:5f:6b:d5:6e:6f:f4:
                    da:2d:8d:40:ed:9c:95:56:db:00:be:a9:67:e7:a8:
                    4d:b2:09:b1:2d:73:ad:0a:fe:24:de:af:99:14:b8:
                    b6:82:65:ed:ec:42:59:d8:86:46:14:bb:77:f4:ce:
                    ce:24:72:84:c9:9c:73:57:18:76:a7:cd:95:0c:3d:
                    f1:38:8d:3b:e6:18:be:d1:32:c5:55:c8:ed:7b:79:
                    c3:41:34:e9:bb:17:90:d1:3c:c0:98:28:b9:15:af:
                    1d:b5:92:71:bb:ea:a6:b8:9e:3c:5c:96:42:4b:e0:
                    c5:0e:f2:95:d2:6e:b6:73:69:34:8e:c0:79:0b:d9:
                    94:33:2a:3e:6e:2c:96:8b:1b:dd:96:f8:7e:db:08:
                    a2:a9:d2:7b:59:cd:48:b7:ef:5d:a4:d5:10:f8:ed:
                    52:a9:5a:07:19:f9:df:1f:66:f8:1d:03:84:be:36:
                    2e:6d:4f:ed:63:62:c4:1b:cd:fa:13:5e:64:bc:1b:
                    9e:1f:25:5f:42:f0:25:31:a6:62:93:e0:20:8d:22:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B4:22:51:D2:80:E2:CA:EB:5A:E0:D4:51:F5:50:62:1B:F2:6E:FA
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137332e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:85:b8:e3:89:1e:fa:86:42:d0:d6:f5:ec:f0:d0:b0:bb:
         e6:8b:c2:f7:c7:35:af:21:77:26:80:50:50:e2:76:c3:0a:9f:
         1b:32:6a:ba:e5:de:09:dc:ac:5d:18:fa:48:6f:b0:f4:5e:5b:
         fc:cc:51:47:5a:42:04:56:e0:8d:77:67:7e:06:91:9d:fe:be:
         89:20:31:ab:69:28:f8:a7:4a:e0:48:ce:61:ab:5f:e8:f2:e5:
         1f:c1:2e:9b:8a:30:1b:39:00:4e:b1:52:ac:f6:68:45:d0:82:
         8c:bc:e3:30:6f:93:c5:94:57:4f:3d:2a:3e:3a:c4:c6:b3:cf:
         45:33:dc:95:01:33:8a:c2:8e:7d:db:a1:0e:19:7d:7b:37:e8:
         08:01:ab:98:94:39:d2:52:e4:6b:e7:96:14:5c:de:37:e2:0e:
         25:a6:fd:7d:32:aa:a0:06:9d:5d:a8:c8:80:f1:28:f6:b4:0a:
         bf:b5:37:fe:14:7f:c9:37:7c:ed:2b:93:31:83:7a:f7:12:79:
         9b:fe:e1:0c:5b:a3:35:6b:43:f2:dd:2d:c8:04:2e:43:bb:1d:
         c8:a1:2d:76:c9:37:be:b0:39:fd:11:a0:67:5b:10:83:cb:b5:
         e9:54:06:f5:99:78:88:b5:07:7d:24:59:3c:82:1e:dc:ea:c5:
         e8:1e:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:06 2024 by rpki-client on console-ams.rpki-client.org