Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa
File:                     3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa (raw, json)
Hash identifier:          vDP4yGbV9uetiQNTAgM7Q4TRi8eP0MK0/owDX6SlHEA=
Subject key identifier:   8F:ED:81:D4:A4:B4:B8:9A:EA:9C:88:F7:03:B7:79:B3:A6:C4:B4:E5
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       2B52906BE80E6BA4319EE38096C553D69B0740F0
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa
Signing time:             Tue 05 Mar 2024 17:48:43 +0000
ROA not before:           Tue 05 Mar 2024 17:43:43 +0000
ROA not after:            Tue 04 Mar 2025 17:48:43 +0000
asID:                     271926
IP address blocks:        190.113.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:52:90:6b:e8:0e:6b:a4:31:9e:e3:80:96:c5:53:d6:9b:07:40:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Mar  5 17:43:43 2024 GMT
            Not After : Mar  4 17:48:43 2025 GMT
        Subject: CN=8FED81D4A4B4B89AEA9C88F703B779B3A6C4B4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:41:b3:22:e6:79:c6:50:ad:70:26:38:ee:
                    43:3f:86:3e:42:44:22:9d:ba:4a:9d:ae:9a:14:d0:
                    b7:3d:31:f1:6a:db:a7:a8:1f:ac:df:10:71:30:85:
                    9a:bf:f1:47:6a:75:37:f0:43:f0:43:88:ca:79:d6:
                    e1:ad:53:53:30:59:85:29:45:a5:32:a8:f8:87:6d:
                    ca:8f:11:82:a6:79:1d:ac:0f:17:68:ba:26:ba:45:
                    ec:30:f0:dd:e3:fe:c8:9f:f9:6c:d7:dd:e7:b4:23:
                    b6:23:3f:ee:cc:3f:e3:69:42:14:a4:f4:81:b6:ca:
                    36:e6:ba:b4:d2:ef:cf:4c:d5:35:42:b0:7d:65:63:
                    7b:dd:73:5a:dd:ff:0b:20:6d:01:98:60:57:1a:ae:
                    e3:da:d2:3a:30:73:27:e0:9f:2c:7f:a2:92:bf:af:
                    78:d2:28:e3:87:90:77:e3:39:e7:6a:58:6d:04:66:
                    95:98:b7:88:87:1f:b4:1e:4d:b2:ad:d4:16:35:5f:
                    e9:b3:cc:4f:02:1d:8f:d6:7d:0f:c4:4f:ce:c4:d1:
                    26:82:38:f6:ea:f6:87:6f:b9:0a:b7:52:bd:bf:e1:
                    e0:c1:a2:8a:ef:84:8f:b7:d2:48:85:38:cc:ea:b2:
                    f6:f4:1e:33:b2:be:5c:38:7c:b1:dd:2f:54:2a:11:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:81:D4:A4:B4:B8:9A:EA:9C:88:F7:03:B7:79:B3:A6:C4:B4:E5
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:ac:01:96:e9:3d:1c:2e:25:77:a5:f2:d2:55:4d:20:d5:
         51:87:e5:e3:4b:47:d1:70:d2:0f:28:44:b5:ed:54:d5:f9:78:
         75:77:34:d7:4c:73:d5:64:9f:03:a9:50:99:7c:c2:81:a7:13:
         3e:d1:f4:26:2f:59:a8:94:94:e6:99:6e:f4:fd:1d:54:d4:af:
         f8:f2:26:37:af:e3:3b:6e:97:b0:97:7b:6e:6d:71:1d:3c:d1:
         8f:27:6e:f4:ec:e3:80:fe:71:c8:c1:38:7c:31:24:07:b6:f3:
         31:4e:04:94:e3:f2:39:01:c2:9f:cc:09:3f:81:3f:c2:19:d7:
         63:b0:75:a4:8d:ea:35:1e:89:e1:de:1f:a0:fc:f8:81:b3:e5:
         6f:42:b4:88:74:4c:8c:1d:86:f5:37:4b:50:90:68:5c:cd:ca:
         b7:70:eb:06:ba:1c:ca:40:3b:45:9e:74:f5:24:98:36:7c:d0:
         6f:d2:20:cb:79:7d:76:24:69:0e:ed:3b:fa:19:10:3b:8c:95:
         a8:91:21:d5:00:24:14:88:b7:a3:34:d3:24:64:ed:1a:e4:f0:
         35:fa:9c:d2:e0:c1:42:61:67:af:65:69:2b:44:9a:4a:59:bc:
         ca:6a:5e:b1:fe:c0:e1:d4:d3:4d:3b:6f:34:14:0e:18:c5:61:
         0a:ad:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org