Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa
File:                     3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa (raw, json)
Hash identifier:          3Bi/A4uon8jNnc8SDNwAd1daQ8FTRxan3nj1ebVbGBw=
Subject key identifier:   CC:A5:18:45:B9:F5:16:0A:9E:05:FF:7F:22:5C:C9:75:CC:80:20:68
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       4B17ACA8998507A9E040C67856195149FAFAC704
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa
Signing time:             Tue 05 Mar 2024 17:48:44 +0000
ROA not before:           Tue 05 Mar 2024 17:43:44 +0000
ROA not after:            Tue 04 Mar 2025 17:48:44 +0000
asID:                     271926
IP address blocks:        190.113.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:ac:a8:99:85:07:a9:e0:40:c6:78:56:19:51:49:fa:fa:c7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Mar  5 17:43:44 2024 GMT
            Not After : Mar  4 17:48:44 2025 GMT
        Subject: CN=CCA51845B9F5160A9E05FF7F225CC975CC802068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:08:18:20:0f:0b:dd:e2:cb:95:d8:4a:d2:
                    cf:5d:b5:f7:13:5e:17:5d:d1:4e:5d:80:45:7c:58:
                    a1:12:92:00:1e:1e:50:aa:d8:60:20:64:f1:d8:2c:
                    fc:bc:a8:1b:c8:f5:c7:f9:bf:88:ce:19:c8:c6:a7:
                    c9:96:a7:d8:70:3f:5d:e9:cf:a7:fb:bc:d1:15:40:
                    fb:93:25:82:09:3f:49:09:fa:a5:fa:06:69:77:86:
                    b7:6f:49:36:44:32:f0:4f:9a:9c:d4:60:1e:54:d8:
                    7a:a4:d7:2b:fb:f3:51:a9:e6:d4:14:99:6a:71:39:
                    11:33:4f:f4:92:4f:28:9e:ee:25:87:d3:44:39:02:
                    1d:cd:75:dd:38:be:00:af:f1:dd:25:34:00:c9:49:
                    0f:7f:4c:96:9e:a3:00:9c:c2:13:a3:8f:3f:c4:17:
                    0e:c0:0d:25:4f:b7:6b:55:62:31:b4:34:8e:11:50:
                    41:05:f1:9a:1b:fa:ce:2a:ba:55:0e:fd:15:c6:ba:
                    39:f9:d8:a7:94:e8:74:11:41:72:e8:28:14:9f:eb:
                    21:5e:cf:f3:3c:b6:92:93:61:71:39:5b:59:0e:ff:
                    4f:b6:2b:a7:a1:6e:76:bb:00:f2:dd:8a:12:b2:fa:
                    6a:cf:14:7b:1f:ff:94:b0:28:f9:e8:05:54:bc:17:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:18:45:B9:F5:16:0A:9E:05:FF:7F:22:5C:C9:75:CC:80:20:68
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:5f:d9:9a:80:62:86:2d:fb:28:f0:f1:60:94:1f:44:ad:66:
         73:7b:60:7b:d1:f4:3a:28:f6:20:ec:bd:fa:6f:e6:7c:1f:76:
         90:5d:9f:38:46:05:44:e1:ac:79:76:4b:da:8c:d9:b1:df:28:
         06:bf:20:50:b0:19:d0:2c:b2:9a:31:fd:7a:9d:cd:4d:3b:6a:
         f0:cd:2d:4b:cc:3b:62:6e:6c:2c:0c:db:16:32:71:92:a6:82:
         04:21:0e:f1:c5:7a:37:d8:90:0b:db:eb:83:a7:13:19:57:78:
         a8:07:99:db:eb:69:a8:f4:e3:3e:a4:fb:92:a4:8f:77:aa:99:
         4d:8a:91:16:a2:21:8a:11:9e:cb:12:dd:be:ce:71:ac:2e:64:
         96:e7:13:c4:a3:ed:86:9b:f4:f0:eb:14:b3:7a:4d:27:ed:47:
         d9:b8:5b:09:ad:d7:98:c7:24:66:3e:ed:5c:0c:1e:df:93:a7:
         d2:f0:3f:6d:61:81:23:19:a5:64:b5:df:52:82:2f:02:96:d3:
         1c:4f:92:8b:ac:08:7c:8c:4a:cd:3c:95:2f:12:76:b4:14:59:
         0d:4f:a6:0c:3c:7f:50:f2:b0:8c:88:0d:65:93:10:fe:04:6d:
         69:54:0e:ff:4e:6f:18:5c:65:e8:fa:ac:90:28:c3:b1:cc:9e:
         5d:10:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:54:06 2024 by rpki-client on console-fra.rpki-client.org