Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e302e302f31382d3234203d3e203136383134.roa
File:                     3139302e322e302e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          7Dwtkq7rBoPHtJcuR6ekozAC9DSv58mB6MqWCFDWsqw=
Subject key identifier:   38:77:FE:82:DA:57:0C:4D:52:7A:CC:48:C1:A7:DB:03:DD:7A:BC:2C
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       160A381AAD570E143C22BF81AC50E3CA5ECA3430
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e302e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 05 Mar 2024 18:12:09 +0000
ROA not before:           Tue 05 Mar 2024 18:07:09 +0000
ROA not after:            Tue 04 Mar 2025 18:12:09 +0000
asID:                     16814
IP address blocks:        190.2.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:38:1a:ad:57:0e:14:3c:22:bf:81:ac:50:e3:ca:5e:ca:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:09 2024 GMT
            Not After : Mar  4 18:12:09 2025 GMT
        Subject: CN=3877FE82DA570C4D527ACC48C1A7DB03DD7ABC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:3b:34:a2:5b:fa:13:5e:c7:ef:3d:b5:02:
                    2b:af:de:4a:fd:bc:3c:6b:e5:04:86:2b:8a:0d:6a:
                    d6:b0:bf:8c:00:dc:74:83:8a:fa:96:a9:d3:bc:b2:
                    b6:4d:4a:ee:3c:24:f2:d8:b3:c4:25:1b:ef:f1:1c:
                    86:21:24:6a:19:14:20:d8:47:f9:63:93:08:3f:0d:
                    4f:2a:bf:d0:bd:97:9b:fd:51:9e:25:0a:69:4d:5c:
                    bd:a2:68:9b:e9:81:94:3e:2a:f7:9e:07:38:1e:2d:
                    0a:1c:d2:91:df:8e:2c:0d:8e:04:10:44:ac:5b:89:
                    3c:bd:b5:2c:83:34:a1:12:87:76:16:8b:ac:d8:0a:
                    67:40:af:ee:39:44:da:13:9b:aa:11:33:61:9b:94:
                    ba:f9:c9:4c:5b:66:8e:31:c1:4d:68:b2:02:9b:bb:
                    3d:4c:d8:59:10:6d:ff:4c:d8:ab:77:65:89:c3:4a:
                    7a:2f:9c:d6:78:02:f7:6d:82:6d:9b:f7:6a:b5:b7:
                    f0:be:13:2f:87:e0:bf:17:29:d7:a7:42:f0:3f:86:
                    d1:70:54:fd:20:fb:6b:99:41:38:7f:05:38:16:d5:
                    f0:83:83:93:3b:31:78:55:5a:1c:d0:6a:f5:d1:f6:
                    4b:4e:82:ae:ba:c3:48:1e:01:e1:35:6e:49:b0:18:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:77:FE:82:DA:57:0C:4D:52:7A:CC:48:C1:A7:DB:03:DD:7A:BC:2C
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e302e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:5e:1a:eb:1f:d9:55:41:30:dc:18:1f:a7:17:0c:37:ac:
         aa:74:73:22:a4:a5:2b:92:5c:76:52:ad:05:21:a9:af:3e:1c:
         f9:66:44:12:ae:a8:e4:43:55:35:13:0f:c7:f9:dc:81:fd:9e:
         b7:81:a2:36:e3:7a:83:c8:8d:a8:0f:e3:a6:40:86:e4:91:fe:
         43:4b:2c:35:6c:db:d2:95:71:01:34:4a:a2:11:3f:ac:ff:1b:
         db:1c:1a:53:ea:1a:b1:7e:55:9f:eb:81:a8:ca:c3:21:d6:fa:
         e7:16:35:4e:a7:5e:f6:4e:fc:38:15:12:ca:34:d7:f0:fb:05:
         35:c0:52:24:44:66:29:54:95:e9:f5:11:69:fc:f7:65:95:50:
         ef:92:75:f7:dc:52:7b:17:16:4e:00:85:dd:24:10:54:10:c3:
         91:f2:6c:08:14:ac:fe:e9:ae:ff:96:3a:e7:84:2f:72:28:5b:
         0b:e5:b5:f8:7e:5a:a0:7a:dc:e3:d9:f6:ed:b5:89:01:d4:66:
         bd:cf:0b:e3:8a:2c:6b:42:26:ab:0b:c8:f7:7d:b9:a0:18:f2:
         29:a6:2c:0c:0c:95:1d:ed:b5:92:f7:38:c2:a0:6d:3b:ff:da:
         bd:ca:85:73:08:17:22:ba:be:6d:51:8b:c2:f4:b6:ae:bf:c5:
         85:06:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org