Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa
File:                     3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa (raw, json)
Hash identifier:          EcjOxHjCmT/dLWf0RLnIw+ZFnajsMeoIRIpvps6zrcw=
Subject key identifier:   1B:98:68:EA:26:8B:FA:B6:AF:08:D9:F3:BE:B0:EB:C1:AD:8E:F4:83
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       059CB2258FA673748FFBB5B7763B55ED4D669EB3
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa
Signing time:             Tue 05 Mar 2024 17:48:44 +0000
ROA not before:           Tue 05 Mar 2024 17:43:44 +0000
ROA not after:            Tue 04 Mar 2025 17:48:44 +0000
asID:                     271926
IP address blocks:        190.113.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9c:b2:25:8f:a6:73:74:8f:fb:b5:b7:76:3b:55:ed:4d:66:9e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Mar  5 17:43:44 2024 GMT
            Not After : Mar  4 17:48:44 2025 GMT
        Subject: CN=1B9868EA268BFAB6AF08D9F3BEB0EBC1AD8EF483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:2e:ae:6e:4b:0d:0c:8c:38:8a:9b:29:2c:
                    d3:e7:c4:d5:67:b6:2f:15:41:53:da:80:ff:62:1c:
                    22:f7:a2:d6:65:6e:2e:00:62:71:76:75:61:7d:80:
                    29:d2:25:af:a1:52:1c:7e:05:82:ba:92:f5:31:61:
                    76:72:9c:b1:af:5f:f9:c9:c0:1c:96:19:73:a8:f6:
                    c3:e5:d7:db:19:9c:c0:68:52:24:18:3f:01:03:fc:
                    62:73:65:64:a7:1e:87:35:7a:c1:78:44:44:51:2c:
                    1f:f1:87:69:95:7e:88:bc:2a:00:ae:ef:e4:ba:b2:
                    f4:d9:03:a6:9e:a1:e4:dd:72:59:18:5b:8d:e0:ba:
                    0e:ce:02:03:2f:fb:87:db:b0:97:81:af:b7:6d:97:
                    8c:6a:39:c8:68:75:cb:4d:cf:06:8c:76:7b:8f:b9:
                    45:2b:3f:01:90:e0:f5:b5:8b:3b:b1:4c:66:ff:0e:
                    5a:e3:76:89:6a:bc:48:ed:66:77:95:d3:ce:bb:4d:
                    5a:69:78:d0:1b:7a:3a:2b:11:99:bc:ff:a3:4e:77:
                    2f:a2:93:05:d1:8b:56:71:e0:d4:39:7b:87:ec:de:
                    7c:4c:45:37:f7:dc:94:6f:53:ae:23:c4:84:b3:9d:
                    53:fd:7b:83:d0:e2:74:de:79:de:c9:fe:cf:72:72:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:68:EA:26:8B:FA:B6:AF:08:D9:F3:BE:B0:EB:C1:AD:8E:F4:83
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:10:9d:fa:f9:13:81:53:c2:35:7c:0f:68:43:9a:67:05:de:
         ab:66:d0:77:f8:d8:3b:c7:9f:0d:71:4a:f8:b5:07:17:69:8b:
         22:df:86:22:43:9d:57:c5:a9:48:21:49:b3:3a:c8:c3:52:45:
         32:2c:39:60:28:a8:60:35:f8:b3:3d:96:ce:5c:25:ed:c3:c2:
         3f:18:be:7d:be:ea:0d:e3:df:9c:2d:24:fc:a2:72:e3:e9:bd:
         6c:95:02:32:06:6b:8b:bd:b0:cf:cf:0c:ab:d7:db:83:fc:7c:
         22:1d:d0:d6:4b:72:68:69:9e:84:ab:d8:79:57:db:d7:c1:32:
         1c:d4:6c:ff:01:0f:32:20:94:db:36:f6:05:d4:4e:c4:0a:82:
         92:bc:59:e9:8d:0e:80:a3:7e:91:be:ec:2a:84:db:f9:13:cf:
         2b:d3:c2:e3:92:ed:41:7d:76:52:c6:3a:79:82:9b:d5:a0:04:
         a0:02:d2:8d:74:80:e2:6b:df:72:76:e9:f7:96:b5:de:8e:15:
         ac:54:3f:5a:db:84:67:e7:56:a3:7a:ed:17:7b:1b:28:8a:2a:
         93:23:e2:e3:1a:97:a6:c8:18:a7:a6:96:0d:c6:c1:54:d6:60:
         7d:d7:ff:61:88:ae:fd:e4:ff:0e:53:d8:ee:7e:da:a8:99:6d:
         42:2f:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org