Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3137372e302f32342d3234203d3e203238303135.roa
File:                     3139302e352e3137372e302f32342d3234203d3e203238303135.roa (raw, json)
Hash identifier:          lY1LNrZoQUOI17IN0gUA2n9lsIFDSH4HBK4QK9s7Q6g=
Subject key identifier:   09:86:95:45:BE:63:2A:02:52:89:86:A1:52:F9:56:E9:C2:2F:28:85
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       25494B8C3FBCC48E6ED1E7823E96EF153F55DC44
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3137372e302f32342d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:50 +0000
ROA not before:           Tue 05 Mar 2024 18:06:50 +0000
ROA not after:            Tue 04 Mar 2025 18:11:50 +0000
asID:                     28015
IP address blocks:        190.5.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:49:4b:8c:3f:bc:c4:8e:6e:d1:e7:82:3e:96:ef:15:3f:55:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:50 2024 GMT
            Not After : Mar  4 18:11:50 2025 GMT
        Subject: CN=09869545BE632A02528986A152F956E9C22F2885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3f:eb:33:d1:84:9e:73:1e:b7:56:49:9c:52:
                    fd:2a:85:65:2f:55:92:9a:8c:1d:88:da:0d:bb:c2:
                    c8:ba:17:97:ef:ec:ba:14:7f:16:38:c9:e3:dc:51:
                    b4:af:f4:60:09:2d:c2:23:43:c3:47:b6:9e:c4:86:
                    86:11:d1:dd:4c:7d:0f:4b:f6:05:86:83:fa:a7:20:
                    c3:8a:ed:fc:22:e4:6d:3d:fe:c9:56:f4:44:58:01:
                    b8:ba:5a:05:b7:26:96:8e:7b:13:4a:67:bb:2c:5d:
                    e0:59:43:f0:f7:62:29:f6:89:57:16:cc:25:35:3c:
                    51:cc:6b:80:89:42:64:3b:61:3c:8a:79:99:76:96:
                    a4:31:c9:62:43:a5:f8:88:a4:79:f7:f5:f7:14:12:
                    8d:08:e0:4d:ba:44:2c:93:e8:d4:09:a1:9a:67:ac:
                    d3:66:3f:8b:0f:7e:33:99:cf:74:a4:2b:20:e5:81:
                    a0:aa:cd:b4:68:a0:36:4a:9e:26:ea:77:74:7c:60:
                    8b:b8:dd:c9:f5:15:7e:94:85:23:1d:2f:72:2c:cc:
                    84:29:e4:da:aa:d9:37:7d:20:b0:fb:a5:2b:45:40:
                    42:ba:52:8c:e2:c8:3d:9d:41:1b:de:ca:55:e7:d3:
                    89:9c:32:ab:f3:eb:ba:53:a2:6d:4d:7c:58:54:41:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:95:45:BE:63:2A:02:52:89:86:A1:52:F9:56:E9:C2:2F:28:85
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3137372e302f32342d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:d1:c4:b0:ac:d2:23:4c:c2:db:84:d8:41:87:75:71:65:
         49:c6:35:33:f1:ca:77:b4:d3:48:6c:6f:8d:a5:1a:70:12:7f:
         32:66:26:b6:e7:9c:a7:dd:da:aa:01:cb:9b:84:10:08:0b:0f:
         3e:90:0b:d2:e7:65:14:d0:b0:75:0f:40:4f:2e:21:89:a1:4e:
         3f:00:59:36:76:04:7c:7c:0e:6f:11:5e:13:95:6a:61:f4:a2:
         77:cb:46:76:b8:4b:5c:fb:47:e0:b2:ac:51:67:e3:1d:c3:57:
         ea:a6:9b:9d:e0:3a:57:8d:f5:57:a6:f1:98:40:f0:87:b1:2e:
         ff:51:bc:bd:0d:72:d0:da:05:55:d2:b3:ba:5e:ff:c2:74:4f:
         a8:53:6e:11:d9:c3:20:98:32:72:fd:15:2f:90:b0:b6:de:de:
         de:db:c6:32:a8:25:8c:0f:55:23:f8:f8:98:e8:30:16:23:15:
         ca:54:3d:40:c2:18:22:5d:63:63:08:c0:02:bd:71:6e:25:fa:
         1a:f0:29:fa:3d:81:7a:cd:87:ce:96:bf:7e:c9:67:70:20:66:
         a2:ef:b7:3b:a2:e9:21:c0:29:cd:62:f6:03:bc:82:88:b9:ad:
         17:ef:38:bb:37:86:f8:02:65:a4:9c:47:27:c8:91:e6:dd:01:
         17:af:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org