Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3139302e342e38382e302f32312d3234203d3e203136393733.roa
File:                     3139302e342e38382e302f32312d3234203d3e203136393733.roa (raw, json)
Hash identifier:          EQk6oEO5wv2dCSmEX0K1/6TRA1ZqoYyMC/rW28FLqiU=
Subject key identifier:   33:96:76:28:72:24:3B:3C:80:CD:9E:89:24:09:72:9F:98:6F:27:D7
Certificate issuer:       /CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
Certificate serial:       E27BA81113EDB090F9DA6623E300AA2BDC923F
Authority key identifier: 71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3139302e342e38382e302f32312d3234203d3e203136393733.roa
Signing time:             Tue 05 Mar 2024 18:11:56 +0000
ROA not before:           Tue 05 Mar 2024 18:06:56 +0000
ROA not after:            Tue 04 Mar 2025 18:11:56 +0000
asID:                     16973
IP address blocks:        190.4.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e2:7b:a8:11:13:ed:b0:90:f9:da:66:23:e3:00:aa:2b:dc:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
        Validity
            Not Before: Mar  5 18:06:56 2024 GMT
            Not After : Mar  4 18:11:56 2025 GMT
        Subject: CN=3396762872243B3C80CD9E892409729F986F27D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a9:78:8c:f3:a3:8b:27:bb:2a:b1:35:2b:73:
                    9d:5b:50:40:7c:e5:fe:4e:47:fc:a8:77:e3:1c:40:
                    81:a8:fa:34:aa:af:ae:2f:98:d0:90:3d:bc:b5:8b:
                    ad:f5:1e:92:ce:72:2c:29:98:cc:d9:6d:da:80:48:
                    fd:c1:3f:5e:58:a7:be:51:53:ef:d0:8d:e2:5b:5f:
                    7f:8d:cc:8b:4a:c6:f4:f6:45:4d:5a:d3:83:6b:4f:
                    e9:0d:0f:a4:12:ed:51:48:03:4c:c0:19:aa:42:2c:
                    52:fd:f3:77:06:2b:68:71:50:5d:e8:4e:b3:d7:12:
                    25:dc:81:b3:35:22:90:39:cc:81:8f:4a:51:4e:0d:
                    b7:e1:b4:c3:84:c7:07:87:73:f2:3b:25:c3:0b:ac:
                    bd:1a:f1:29:31:c9:db:17:ec:83:33:e3:c0:62:71:
                    19:07:f9:b3:0b:37:f8:c1:92:a0:df:71:00:2a:7b:
                    9f:38:e7:c1:86:8a:e0:fc:c5:b6:5f:9f:33:8c:b7:
                    90:8c:15:ae:e1:5a:01:37:54:4d:c7:68:37:4d:eb:
                    76:19:c4:7f:fd:04:c0:22:ff:d1:3e:8d:11:32:b5:
                    7a:0d:b9:6f:94:1c:7e:ba:73:66:1e:07:de:b8:7b:
                    c1:24:08:55:b4:90:86:3f:00:e6:88:0e:fa:45:38:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:76:28:72:24:3B:3C:80:CD:9E:89:24:09:72:9F:98:6F:27:D7
            X509v3 Authority Key Identifier:
                keyid:71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3139302e342e38382e302f32312d3234203d3e203136393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:6e:99:71:5f:b3:84:c4:96:49:eb:c8:05:94:73:88:71:
         19:34:1e:12:42:73:a1:c5:84:ef:9c:2e:89:23:49:4a:3a:65:
         bc:d5:d4:df:f0:b2:78:2c:cc:32:1c:a0:6c:c8:68:50:97:d9:
         64:84:a3:f2:b1:af:23:58:8a:4a:7b:90:3e:08:29:ab:5d:d8:
         c8:26:e4:b9:49:40:f7:64:82:b0:3f:74:6c:88:0d:6f:26:58:
         0a:95:06:3d:f3:2a:a0:33:22:e6:52:27:f6:bf:41:2b:7f:6a:
         2d:15:7d:22:45:e1:56:69:f1:47:d8:f3:58:7d:71:06:88:ec:
         fa:62:96:95:ed:a6:e7:8e:bb:ff:4d:63:c0:4a:e7:c8:45:4a:
         1f:c7:3a:31:60:33:ed:51:40:09:f5:0b:98:4e:af:8a:16:7c:
         ab:61:61:7f:aa:fe:4c:df:4d:c9:e5:de:7f:97:e5:19:48:55:
         bb:7e:a2:24:1a:60:37:bd:4a:07:11:94:7a:7c:95:42:f8:e1:
         d8:bb:03:a1:78:39:f5:88:ca:ca:52:96:d3:dc:93:16:34:9e:
         7c:1f:48:e4:09:d6:84:e4:ec:d2:5d:84:3d:43:0e:86:90:39:
         ce:8a:6f:19:24:51:5f:0d:31:23:88:31:0b:5d:13:9e:b6:f1:
         64:3d:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org