Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa
File:                     3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa (raw, json)
Hash identifier:          s+RGc0UqDUVKqzeoL5Gqp/zXUZmmA4GeuFU8vJ7PfZM=
Subject key identifier:   3A:BA:FB:0D:26:61:FF:52:A4:0F:BE:69:CE:FB:49:47:42:87:71:E6
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       4FF73CEC6A64D17689542737469C7DCBBFB57C2B
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa
Signing time:             Tue 05 Mar 2024 18:12:05 +0000
ROA not before:           Tue 05 Mar 2024 18:07:05 +0000
ROA not after:            Tue 04 Mar 2025 18:12:05 +0000
asID:                     23456
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:3c:ec:6a:64:d1:76:89:54:27:37:46:9c:7d:cb:bf:b5:7c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:05 2024 GMT
            Not After : Mar  4 18:12:05 2025 GMT
        Subject: CN=3ABAFB0D2661FF52A40FBE69CEFB4947428771E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:e4:b9:95:5a:55:11:48:52:c7:69:15:ff:
                    9f:fa:ae:bc:b9:6f:0a:8c:0e:26:58:e1:13:29:c0:
                    4e:52:42:fa:08:01:25:88:71:19:34:8a:3a:25:6a:
                    9c:c6:2b:5a:90:d7:7f:95:d3:f9:e2:9e:db:72:a3:
                    d9:4c:7a:28:9f:ac:40:b7:d1:c1:80:9f:d4:5f:a9:
                    f9:c6:59:7a:e2:99:ec:2b:ac:7c:6d:c4:9b:0f:33:
                    40:c3:4f:5b:1d:08:14:93:df:b5:da:07:46:cf:fd:
                    8d:c0:83:24:36:c3:42:dd:f0:04:cf:08:db:e7:a1:
                    c5:d2:4c:11:9b:15:85:fc:80:26:0d:e8:53:bd:9a:
                    a5:3c:6d:44:a6:77:e8:c3:cf:9f:f0:28:ff:6d:81:
                    0a:f8:8f:21:41:da:4d:fb:07:9c:1d:37:c2:ee:ba:
                    62:28:54:ce:c7:24:21:d6:61:68:b9:bc:e7:bd:82:
                    04:b6:79:9a:cc:2d:76:9c:1e:4c:e1:a5:6d:ac:85:
                    8a:a0:11:ce:ef:f2:2a:54:7c:2d:8c:0c:ad:7f:c1:
                    b2:00:5f:0b:b5:e4:43:c3:3b:e3:40:4a:b8:23:b4:
                    97:99:3e:be:fd:8e:35:6e:11:37:f7:47:8c:c2:8f:
                    0d:2b:53:c7:0e:08:58:20:a4:ca:23:75:69:64:b5:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BA:FB:0D:26:61:FF:52:A4:0F:BE:69:CE:FB:49:47:42:87:71:E6
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:a8:cf:72:cb:d3:be:35:a0:5d:89:1b:d3:cb:f1:c9:df:
         60:bb:26:b0:e9:09:3e:c2:63:b5:10:7e:04:d2:1f:49:62:25:
         54:ff:3f:f1:2e:22:ba:67:74:3e:1a:a9:b3:77:48:13:c8:b3:
         c9:6c:5d:9d:79:45:d7:3f:01:29:46:06:d2:aa:9b:10:12:a2:
         10:0f:e7:e7:78:50:d7:22:d6:c9:e3:1f:3c:de:f4:5d:84:55:
         02:c1:73:8a:30:9f:f7:e5:1b:3a:0e:e8:f4:7b:f8:6b:21:82:
         76:11:57:f3:57:31:e3:0b:56:24:54:64:42:b1:a6:d7:c8:fc:
         d8:62:e4:95:0e:4f:38:fe:52:56:55:d4:8d:65:1b:18:67:fc:
         28:f4:8c:af:d4:b8:33:f3:b5:2a:69:dc:04:4f:21:b6:fe:12:
         23:d0:b8:bc:49:05:05:a8:9a:47:86:44:60:c6:7c:dd:72:09:
         ec:f4:2b:4a:5c:98:04:99:99:ed:aa:9e:e5:b2:93:40:ce:40:
         70:7f:6e:a9:39:93:53:56:f7:98:5c:29:ab:d9:6c:f4:b2:65:
         df:52:ea:7f:f0:1a:18:d9:43:9b:49:1d:ab:c6:00:9a:17:c3:
         15:4e:0c:98:29:c9:61:60:5e:53:dc:f3:41:7d:b0:6f:f1:33:
         2b:d0:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:58 2024 by rpki-client on console-fra.rpki-client.org