Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32372e302f32342d3234203d3e203532333034.roa
File:                     3139302e3132342e32372e302f32342d3234203d3e203532333034.roa (raw, json)
Hash identifier:          oAcOuSIT0O1VbDd6yHJBzZsgZE8rJVUeEt/kogLCzPw=
Subject key identifier:   D7:09:7B:73:01:71:FB:FB:19:DC:C6:CF:E4:05:8C:96:64:3B:C2:0E
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       1B49A6C714AB34B3D59981D40E00D3A7FCEEB661
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32372e302f32342d3234203d3e203532333034.roa
Signing time:             Tue 05 Mar 2024 18:13:05 +0000
ROA not before:           Tue 05 Mar 2024 18:08:05 +0000
ROA not after:            Tue 04 Mar 2025 18:13:05 +0000
asID:                     52304
IP address blocks:        190.124.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:49:a6:c7:14:ab:34:b3:d5:99:81:d4:0e:00:d3:a7:fc:ee:b6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Mar  5 18:08:05 2024 GMT
            Not After : Mar  4 18:13:05 2025 GMT
        Subject: CN=D7097B730171FBFB19DCC6CFE4058C96643BC20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:6e:df:8f:6b:ea:29:1d:cc:be:30:48:ad:
                    a7:ea:46:fd:aa:6e:cb:be:a2:4a:bc:12:92:13:c6:
                    76:54:7f:b2:92:bf:1d:2f:03:a1:ba:31:39:cd:a7:
                    ac:13:f5:b3:54:98:05:ac:9a:75:94:b6:c5:95:a5:
                    30:a4:b2:cf:10:cb:17:7d:62:01:73:0d:8e:00:d1:
                    9b:0b:9c:57:48:90:dd:eb:2d:ec:1e:7e:fc:c5:98:
                    36:a0:13:f7:7d:80:62:11:51:2d:fa:99:07:d5:41:
                    b7:29:16:2c:c3:43:ef:99:4a:98:6b:80:87:91:ff:
                    40:96:5f:96:d9:a5:3a:fe:00:7f:e7:bf:e5:13:f5:
                    69:b5:31:9e:59:21:f2:b7:5d:7e:fc:5f:69:ac:b5:
                    d4:aa:1f:64:ef:9d:07:a6:47:3a:10:0b:cb:a5:01:
                    d7:d0:35:9d:26:31:c9:b2:f0:bb:a4:a6:ce:fe:1e:
                    46:b8:77:44:b0:3b:ff:74:05:72:dc:38:59:ac:c4:
                    e1:91:98:bb:ad:57:2f:9a:58:25:54:4e:69:33:6f:
                    64:b9:43:00:cf:4d:c1:70:b1:09:13:ed:80:76:28:
                    fb:ec:e2:bc:86:c8:e5:6e:e5:9d:79:a8:31:4b:0d:
                    33:b3:2d:2f:24:2d:25:db:f0:c7:b8:92:d2:f6:6d:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:09:7B:73:01:71:FB:FB:19:DC:C6:CF:E4:05:8C:96:64:3B:C2:0E
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32372e302f32342d3234203d3e203532333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:94:96:2b:79:8d:00:a6:39:ca:d2:00:eb:e8:a3:ab:43:7c:
         80:08:5e:b4:3b:87:67:13:2a:07:2a:d8:5d:0f:05:ae:aa:6a:
         3d:b0:f9:e0:e8:20:ec:85:ff:c9:3e:7b:42:ba:5c:54:cd:7e:
         94:3c:b0:ba:2a:7a:40:c2:71:eb:bd:c2:c3:7c:1d:5e:a9:c5:
         3c:2c:cd:40:23:52:87:cc:8a:ec:75:cf:82:21:a5:a8:57:22:
         cc:f4:75:51:cc:8d:92:65:ca:cc:4e:ad:d4:d6:01:24:aa:21:
         03:8f:a2:ad:ef:bc:e3:e2:26:e8:6c:70:85:ae:71:b0:36:c9:
         b6:87:50:67:72:ed:53:d3:48:ed:e2:d0:ed:06:67:70:cb:5c:
         1e:f0:80:92:0a:26:b9:98:a3:25:de:61:7a:bb:4d:bb:76:ce:
         59:03:9f:e6:c1:9a:78:b1:2d:80:83:8f:9a:e4:b0:1f:55:bb:
         3c:3e:eb:bf:05:ed:54:e3:5c:cf:22:57:00:7e:08:bb:c0:be:
         5a:f8:32:67:22:8a:d0:73:92:a2:bb:29:51:7e:80:1f:70:84:
         83:b5:65:43:68:80:51:98:17:06:3d:59:45:36:e0:a2:a5:39:
         5e:65:bb:bf:57:e8:67:ae:87:78:2a:9e:05:72:69:bd:c5:fa:
         cd:40:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org