Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e20323634363338.roa
File:                     3139302e3231302e3230362e302f32342d3234203d3e20323634363338.roa (raw, json)
Hash identifier:          pce0b5ianEMBVGtx6TOHimc82bhP5MlHypWQP/eDyVA=
Subject key identifier:   85:DB:D7:CE:25:05:C6:D0:2A:EA:05:41:9B:A6:DB:81:34:57:64:90
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       78BDD8BE64494E84C7F9C8B020C24D7C18FA480B
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e20323634363338.roa
Signing time:             Tue 05 Mar 2024 18:12:04 +0000
ROA not before:           Tue 05 Mar 2024 18:07:04 +0000
ROA not after:            Tue 04 Mar 2025 18:12:04 +0000
asID:                     264638
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bd:d8:be:64:49:4e:84:c7:f9:c8:b0:20:c2:4d:7c:18:fa:48:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:04 2024 GMT
            Not After : Mar  4 18:12:04 2025 GMT
        Subject: CN=85DBD7CE2505C6D02AEA05419BA6DB8134576490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:54:2f:bc:a8:6d:b3:fa:76:4d:ed:09:0a:
                    f1:dc:6c:61:e8:fc:59:98:62:25:4b:10:ad:fc:7e:
                    c6:8b:f7:f8:73:f0:89:8d:4e:2a:e5:6c:9f:a4:59:
                    be:6c:0b:dc:cb:63:0f:95:ad:ab:f8:84:f2:04:35:
                    b4:d9:a5:17:10:a7:67:56:16:3f:0a:f7:13:3b:43:
                    9b:e8:5e:a5:49:d6:41:c1:09:18:f2:28:f7:6a:89:
                    c4:ce:d5:6e:ed:bf:ad:98:24:a0:f1:42:32:6a:7c:
                    7e:4d:98:c9:6d:04:f6:36:7d:de:ed:ca:84:38:d1:
                    48:76:bf:c5:b0:32:22:85:13:b2:27:cc:94:15:cf:
                    0f:03:e5:dc:63:89:aa:c7:75:a6:6d:a6:0c:74:a7:
                    6c:f3:9b:e8:83:92:37:5b:9e:64:f3:2a:f0:ed:1c:
                    40:b6:18:07:99:44:6e:d0:22:76:63:7c:a2:4f:49:
                    0a:12:60:92:95:6e:21:aa:78:14:a9:77:d1:6c:16:
                    2a:a6:91:07:73:0a:94:02:28:eb:da:56:7d:1c:fb:
                    58:f6:4f:4b:a4:79:ad:c2:f9:a9:f3:55:91:7e:ed:
                    11:05:47:41:49:07:9b:7a:a1:29:af:9e:ed:0a:4e:
                    0f:7c:1e:43:d9:74:9e:59:b7:99:0e:6d:85:24:3c:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:D7:CE:25:05:C6:D0:2A:EA:05:41:9B:A6:DB:81:34:57:64:90
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e20323634363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:01:8e:86:44:22:d4:7f:ac:b2:f3:dd:a5:c8:e6:44:3b:
         78:2b:5b:1a:1e:69:ad:a4:c3:4a:5f:6f:cd:d7:92:05:12:90:
         8d:78:79:38:fb:a3:90:dc:9b:b5:a6:2f:5d:7f:7a:65:7a:8b:
         6b:75:06:5f:65:60:02:1e:3f:55:15:59:22:15:27:dd:ae:9b:
         cf:d5:0a:a9:b1:08:fa:50:4a:97:70:67:99:c4:01:2b:03:ee:
         a4:20:67:15:19:5e:69:d3:fa:fe:ed:16:38:b3:e5:ff:dc:ef:
         ee:21:b6:0c:b3:36:14:73:73:66:25:da:b4:01:70:f7:ea:11:
         d8:b8:e0:f2:6c:94:69:1e:de:e7:2e:da:0f:af:b5:92:39:4b:
         87:a5:f9:db:17:5c:bb:1b:3f:93:ee:ff:9f:d6:25:0d:2f:7d:
         a6:48:c9:56:b6:04:8b:79:af:32:36:02:36:93:00:03:b0:a2:
         01:cc:4f:19:a8:bd:53:83:59:14:5b:90:1d:c5:e7:d7:3b:b4:
         42:81:c4:ac:19:34:7c:d5:96:0a:22:62:d6:15:67:b3:a4:26:
         cf:76:71:99:be:c5:6e:f9:44:5d:e6:2a:f1:23:03:50:30:cf:
         5a:19:72:16:9f:8d:54:b4:4b:26:8c:3c:8f:67:2e:e4:6b:e6:
         14:36:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org