Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134352e302f32342d3234203d3e20323632323339.roa
File:                     3139302e3231312e3134352e302f32342d3234203d3e20323632323339.roa (raw, json)
Hash identifier:          2I6B5fAUqirnEWsAwVqzOm809KYx1rMZ+K8XVpPz5Y8=
Subject key identifier:   51:AD:D0:C7:7C:5D:E7:07:A1:A1:E8:96:E0:88:CA:6F:28:FA:2D:BC
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       297B1B0447BE76874C1E966252EB0C7AEC37D9BE
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134352e302f32342d3234203d3e20323632323339.roa
Signing time:             Tue 05 Mar 2024 17:42:13 +0000
ROA not before:           Tue 05 Mar 2024 17:37:13 +0000
ROA not after:            Tue 04 Mar 2025 17:42:13 +0000
asID:                     262239
IP address blocks:        190.211.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7b:1b:04:47:be:76:87:4c:1e:96:62:52:eb:0c:7a:ec:37:d9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Mar  5 17:37:13 2024 GMT
            Not After : Mar  4 17:42:13 2025 GMT
        Subject: CN=51ADD0C77C5DE707A1A1E896E088CA6F28FA2DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:83:e5:b7:38:3e:ad:bf:f1:ac:19:d4:4f:
                    be:f3:a5:67:c0:a6:67:29:9d:51:3d:24:eb:77:dc:
                    82:89:bf:2f:b9:6e:da:7b:cb:e8:64:a4:df:d1:aa:
                    be:97:90:33:41:12:09:c5:3d:62:61:95:19:af:71:
                    52:90:1f:21:75:65:b0:dc:98:ef:d8:19:66:f9:04:
                    45:c7:eb:c6:ea:3b:0c:a4:49:88:03:db:ab:9e:be:
                    2f:51:02:b2:34:e1:11:c9:6e:29:45:85:c5:15:ab:
                    e1:e4:20:19:94:0f:0b:d2:b2:be:cc:07:b2:d2:fe:
                    0a:06:53:2f:fe:cf:4b:ce:4b:7d:53:c0:ac:b7:ad:
                    b2:9f:92:a5:f6:22:6a:86:c5:47:e3:6e:77:16:d3:
                    1d:9d:db:5e:d6:3c:75:7b:c6:d5:f2:cc:02:da:ab:
                    d8:fa:b2:8e:6e:a2:2e:2c:04:c9:94:f4:56:9c:5e:
                    ec:d2:b6:a7:78:29:7e:9a:11:f5:34:de:56:0e:d6:
                    03:33:2b:43:73:9d:6d:50:ff:b0:8f:ed:98:39:13:
                    08:5a:ec:9f:a4:6a:3c:3a:f5:62:39:26:27:98:1e:
                    ab:8b:26:89:a1:78:ec:97:63:ca:16:f0:33:90:ad:
                    2e:8b:a3:47:af:28:62:58:12:0a:5a:f9:85:56:d4:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:D0:C7:7C:5D:E7:07:A1:A1:E8:96:E0:88:CA:6F:28:FA:2D:BC
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/3139302e3231312e3134352e302f32342d3234203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:71:1b:d8:a4:66:6d:41:ac:2b:64:ed:5d:c7:36:90:74:ec:
         ad:95:0e:9d:ad:52:60:b3:35:d5:70:ca:7d:4b:c9:44:59:cc:
         c0:70:37:fc:4e:32:f3:3f:1a:c2:54:15:d8:b7:ad:53:4f:aa:
         d3:1a:38:ce:98:44:71:6b:b4:35:47:6b:cc:46:2b:75:65:15:
         28:bc:15:57:00:4d:3f:cc:23:46:d8:24:7f:2a:0d:94:24:f8:
         55:fb:6f:0c:6e:bc:e7:4c:83:4c:5e:63:a0:53:ec:ed:b8:8b:
         87:8c:1b:dd:22:15:a2:fd:d0:39:c7:0f:9b:cc:03:dd:42:89:
         ca:6a:03:ae:f9:b0:61:44:1e:fa:c0:e6:5a:44:72:7d:10:8f:
         fb:f8:a0:aa:d8:1a:5f:c3:d0:f1:24:1d:27:87:b2:ac:c4:2d:
         99:d4:62:d3:c2:9a:33:e3:ea:80:b9:9c:90:1f:f7:f1:0f:72:
         62:91:2b:c1:5f:9f:d3:da:62:5d:ae:f0:74:76:60:e9:70:df:
         b3:cc:55:27:6e:55:ed:ba:3f:93:26:a4:8d:01:f0:ba:3d:15:
         07:fc:05:96:39:9e:4e:e2:2d:53:72:21:38:10:a4:82:08:88:
         c9:0a:f6:4d:fc:b8:fb:90:b7:fd:49:7b:ba:e4:7d:f2:51:a5:
         0a:a5:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org