Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139372e302f32342d3234203d3e20323731373733.roa
File:                     3139302e31332e3139372e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          tp+7skiwV4YDwYWyETN+UqYZw6xTpF0RK3WkUvwnZg4=
Subject key identifier:   85:61:28:A9:20:92:7F:36:47:F9:E1:3B:CD:38:28:FA:FE:9F:C8:7B
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       93EFC50BC1F0D63E1D86F95A88BA8021C0752E
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139372e302f32342d3234203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:15 +0000
ROA not before:           Tue 05 Mar 2024 17:36:15 +0000
ROA not after:            Tue 04 Mar 2025 17:41:15 +0000
asID:                     271773
IP address blocks:        190.13.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            93:ef:c5:0b:c1:f0:d6:3e:1d:86:f9:5a:88:ba:80:21:c0:75:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:15 2024 GMT
            Not After : Mar  4 17:41:15 2025 GMT
        Subject: CN=856128A920927F3647F9E13BCD3828FAFE9FC87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:2a:0d:68:59:2e:5e:3a:e8:2b:7a:27:55:
                    ae:8b:d1:f0:63:56:79:a1:bd:93:e7:3a:83:91:7f:
                    2c:1e:ed:72:1f:50:e0:61:43:d0:2a:27:9d:f7:9f:
                    c9:63:5b:17:3b:85:f0:05:c1:4e:96:2d:fc:7d:49:
                    2f:e8:bf:ac:8a:1a:b1:e6:f5:c9:14:ed:a2:2b:0a:
                    6a:47:d6:4f:49:e8:93:ed:90:13:c9:ac:79:31:51:
                    a8:10:8b:47:30:fb:7f:1b:89:57:f3:87:f0:e2:30:
                    71:39:f4:ed:60:15:0d:c2:b7:54:c6:16:b4:de:09:
                    a3:fb:95:e8:fc:2e:1e:14:e8:d4:11:7a:ef:ae:f8:
                    41:ef:aa:8c:8d:18:1d:6e:7c:fb:70:0f:73:d5:27:
                    9f:43:8f:59:fc:50:a9:2b:5a:92:a9:5b:8d:9e:b4:
                    a1:7d:15:28:75:a6:f2:ae:72:45:b5:f2:90:21:5b:
                    e9:13:42:48:73:de:d2:e5:ff:3e:65:cb:90:ab:d9:
                    33:ff:98:6f:70:b2:4f:74:e6:f5:c4:11:ee:20:8d:
                    ee:dd:4e:da:e6:81:92:8d:5f:31:68:86:38:64:02:
                    e3:1a:4e:3a:2e:9f:8c:1e:38:9a:34:a2:d3:a7:12:
                    d3:3d:ba:63:af:1d:11:06:f4:c0:9b:c2:e5:54:d1:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:61:28:A9:20:92:7F:36:47:F9:E1:3B:CD:38:28:FA:FE:9F:C8:7B
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139372e302f32342d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:b9:62:9c:32:f9:79:6b:d9:ad:8f:39:94:f8:de:88:c6:
         3b:7a:8b:8b:98:b1:09:30:3e:33:05:7e:e8:81:40:d9:1a:c6:
         50:13:63:03:7d:7e:92:cc:14:e6:d2:7d:46:5e:9d:99:d2:82:
         88:5d:af:24:a1:6c:87:35:e3:f4:db:d1:18:dc:e9:32:ab:62:
         ec:e0:55:25:c5:2e:6c:44:7a:ee:78:53:63:1b:c1:5b:31:97:
         2e:28:c4:77:15:b5:41:47:42:26:15:a9:3e:63:4a:ec:f4:70:
         69:ab:0e:0d:17:48:4d:bf:d2:27:a6:df:3d:33:fd:67:9f:bc:
         22:f7:bb:7d:96:00:5f:f5:da:f4:f3:d9:96:b4:15:dd:6f:ae:
         ed:a8:91:d4:89:c1:64:ba:d0:eb:37:c0:a8:8d:b5:33:47:75:
         b4:45:37:e4:a0:69:ba:0c:59:3b:35:a6:c7:87:ee:85:d0:21:
         96:8c:b2:93:6f:6b:89:25:d3:2f:e1:13:39:de:29:8b:6e:b9:
         29:f2:c8:3d:95:d4:e6:b9:8a:d2:3f:1f:33:54:18:51:30:8f:
         06:88:65:37:89:c9:61:09:63:42:71:46:91:7b:75:bc:20:cb:
         65:64:46:67:f1:23:64:a1:a3:5e:d9:89:42:e9:50:1c:91:7f:
         8f:d1:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:07 2024 by rpki-client on console-ams.rpki-client.org