Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e35342e302f32342d3234203d3e203238303335.roa
File:                     3139302e3231302e35342e302f32342d3234203d3e203238303335.roa (raw, json)
Hash identifier:          ogrb9fMnECyoY6di4FIpX8+k9eZvHmSqus9/MtAj3pw=
Subject key identifier:   5C:3F:30:76:ED:B8:3F:FD:CB:6C:48:DC:02:83:8D:26:73:89:0A:C0
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       404D98D16EEF8B848B5E35178FD1DF6E971179F7
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e35342e302f32342d3234203d3e203238303335.roa
Signing time:             Tue 05 Mar 2024 18:12:05 +0000
ROA not before:           Tue 05 Mar 2024 18:07:05 +0000
ROA not after:            Tue 04 Mar 2025 18:12:05 +0000
asID:                     28035
IP address blocks:        190.210.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4d:98:d1:6e:ef:8b:84:8b:5e:35:17:8f:d1:df:6e:97:11:79:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:05 2024 GMT
            Not After : Mar  4 18:12:05 2025 GMT
        Subject: CN=5C3F3076EDB83FFDCB6C48DC02838D2673890AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:70:f2:58:0c:13:22:cb:50:2f:9e:38:9f:
                    41:4f:e0:cb:21:91:b9:9f:90:4f:ff:57:e3:c7:51:
                    ae:cd:90:df:95:54:86:aa:7a:5e:35:1e:70:3f:14:
                    36:f8:d8:56:7a:ee:4e:02:ad:cb:5d:8f:97:8d:f1:
                    62:c4:fa:ba:e6:fb:c8:67:38:d8:b3:96:f1:3d:2a:
                    02:5e:3d:2b:ea:70:d2:8c:89:76:65:46:eb:c9:65:
                    ee:36:1b:bb:cf:5f:4e:da:e4:1c:28:db:58:2e:b3:
                    54:b4:3c:7a:20:aa:d7:20:2d:f5:46:05:e7:18:24:
                    f2:58:b8:3a:0a:2e:ad:50:75:87:55:35:d9:52:8e:
                    07:46:c5:c9:8d:1a:71:7f:64:1f:f8:42:82:79:95:
                    2f:0b:3d:7c:94:82:dd:7c:66:b1:65:cf:e4:e8:4b:
                    94:2d:95:1b:25:99:1b:fc:5e:7a:7b:3b:ff:32:48:
                    c7:1c:e6:1d:bf:9c:1b:9c:61:14:6f:d6:04:fc:52:
                    8b:ac:4f:88:99:39:06:75:5e:89:25:b2:d3:ff:23:
                    68:bb:15:ad:ee:b0:7c:06:48:99:0f:7c:b0:62:83:
                    17:11:57:06:1b:e7:93:c1:56:32:5d:eb:29:30:19:
                    fb:e4:ef:05:59:c2:13:58:e3:00:2b:99:1e:7d:58:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3F:30:76:ED:B8:3F:FD:CB:6C:48:DC:02:83:8D:26:73:89:0A:C0
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e35342e302f32342d3234203d3e203238303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:79:21:b7:91:5b:b9:f4:38:b2:40:eb:27:5c:a2:08:95:
         b8:26:0d:40:14:08:3a:ed:5c:96:4e:46:50:d5:71:9e:cf:fe:
         a7:46:2d:7a:e6:21:90:7d:3a:0d:47:04:7f:26:a0:ba:fd:52:
         60:f0:39:77:14:6b:7a:13:f1:41:da:5c:f0:04:4c:e1:0b:98:
         9f:fd:c9:54:19:27:92:39:b5:ab:56:38:71:b3:e3:db:19:1a:
         7c:cd:a3:c7:5c:87:e5:85:69:0e:5e:25:b1:89:a6:2e:0f:f2:
         71:65:38:67:4b:49:2b:db:4e:bf:68:fd:2b:df:30:4a:ba:40:
         cf:58:49:92:29:64:10:21:45:be:fe:60:35:8b:c9:a9:46:d7:
         13:d7:38:df:d2:13:d6:3f:c5:80:39:d9:47:c8:0a:e6:8f:7d:
         03:d9:e5:77:0a:19:0b:12:f1:dd:fd:72:38:25:5e:18:f5:bb:
         32:f0:e0:73:26:df:32:c8:6d:00:10:44:22:73:02:75:a7:a4:
         12:a3:cb:76:9a:82:aa:11:ed:95:2e:85:b5:39:16:35:ae:07:
         e5:62:26:f7:63:70:4b:8c:7c:1b:70:55:4e:51:44:3d:ae:9c:
         33:f9:dc:92:dc:85:74:3f:00:0e:de:40:b5:30:d8:46:8a:22:
         cc:44:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:50:50 2024 by rpki-client on console-fra.rpki-client.org