Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139352e302f32342d3234203d3e20323731373733.roa
File:                     3139302e31332e3139352e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          tGa29JfzXOXGk9OmfagEaWxW04roLem8hXd23vMRXWI=
Subject key identifier:   F0:88:BB:28:33:C3:B1:A8:5A:76:2C:56:62:AF:78:10:5D:24:12:CF
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       13FAC33091B79BD6AF1D528E38829A2E5E1281E8
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139352e302f32342d3234203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:18 +0000
ROA not before:           Tue 05 Mar 2024 17:36:18 +0000
ROA not after:            Tue 04 Mar 2025 17:41:18 +0000
asID:                     271773
IP address blocks:        190.13.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fa:c3:30:91:b7:9b:d6:af:1d:52:8e:38:82:9a:2e:5e:12:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:18 2024 GMT
            Not After : Mar  4 17:41:18 2025 GMT
        Subject: CN=F088BB2833C3B1A85A762C5662AF78105D2412CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:a8:b7:90:04:a1:5e:60:6b:47:1e:e6:79:
                    9a:4a:d9:36:86:4b:fc:09:d7:df:97:0f:98:1e:d7:
                    24:56:3a:68:16:20:20:b6:37:43:b6:ae:b7:68:13:
                    62:8c:4e:fb:62:f4:8a:3d:4c:79:b6:ae:f7:80:b4:
                    39:e9:38:cc:81:ac:51:61:51:4e:c9:5d:fd:a6:0f:
                    c1:55:f9:6d:84:b2:ca:f9:ba:00:53:c1:9a:17:05:
                    e2:08:51:74:29:4f:03:c6:4f:72:cc:0e:a0:9a:cd:
                    f1:79:d2:73:cb:6a:59:28:1f:bc:f0:2e:59:99:1c:
                    b8:ef:1f:61:0b:36:3d:5b:c1:91:4f:ff:0d:30:71:
                    4d:44:d5:c1:80:9f:da:1f:2e:eb:07:ee:63:d6:56:
                    df:65:96:86:e8:db:a8:23:08:9c:0b:a5:6d:e2:d8:
                    48:1b:7c:ae:11:a2:c4:ca:5b:9d:08:9f:4a:ef:1e:
                    fa:00:63:8d:89:9b:f1:e0:3d:d5:71:ad:94:b7:4a:
                    6b:23:66:2a:1d:f6:81:ca:a4:d0:db:20:ab:51:90:
                    66:ab:5b:ab:02:56:03:69:d1:a3:0f:00:ca:09:05:
                    f0:32:2a:7f:f9:3f:62:7f:cf:a9:bf:af:ed:4d:95:
                    f4:3f:dc:0e:9f:ea:7e:39:0d:9a:ef:70:97:8f:c6:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:BB:28:33:C3:B1:A8:5A:76:2C:56:62:AF:78:10:5D:24:12:CF
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139352e302f32342d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:57:8a:b5:c2:3f:6f:82:2a:5b:f4:b9:28:fe:5e:87:b4:
         e8:0e:46:bc:9b:01:5c:e7:38:06:2b:f5:48:1d:a8:5e:cf:88:
         7d:a0:b1:84:d0:22:8e:45:37:6a:81:9d:ae:a2:7e:53:40:48:
         28:1d:6c:1a:75:27:23:80:94:0d:0c:50:77:a7:93:41:61:f8:
         b7:83:be:58:88:2a:c7:08:ab:d4:1f:fc:c8:0e:51:3c:36:c0:
         09:94:21:40:b8:12:c2:57:2a:1c:2e:4e:4d:ee:44:c4:0f:da:
         5c:19:b1:e0:30:fe:29:8a:35:c8:fe:6f:11:f3:7a:05:ec:c9:
         1b:c7:2a:26:21:9d:6a:91:f2:97:f7:e2:28:6f:2e:91:d4:17:
         54:3d:f7:7a:a7:6e:e0:bd:80:18:aa:0f:7b:12:71:af:7a:f5:
         8d:5c:a8:aa:92:f5:ba:31:a4:c4:e5:93:c6:70:c4:cb:ac:93:
         b5:37:6e:96:58:5c:d3:d0:73:61:fa:65:07:fe:0b:99:8e:40:
         18:98:c4:43:c3:81:a9:a0:79:4e:5f:84:28:a0:68:a4:4b:0a:
         7d:3a:53:e8:c9:1a:53:ee:7c:fd:76:66:54:0f:3b:b9:5b:6e:
         df:59:a2:31:ac:c2:56:61:f2:9e:8a:21:d0:a3:0c:e4:67:07:
         7e:d0:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:07 2024 by rpki-client on console-ams.rpki-client.org