Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230312e302f32342d3234203d3e20323731373733.roa
File:                     3139302e31332e3230312e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          CoVxCxXfWR1yjM9i1ZPgERDRgG+Mko7VLilZuTErb5Y=
Subject key identifier:   BE:CA:6A:4B:AF:1F:15:F0:5D:B5:6F:8B:AB:D0:4F:A5:61:D5:0D:58
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       4632BE5539A2A5289694EF344F5FFCE9E59D7E1D
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230312e302f32342d3234203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:15 +0000
ROA not before:           Tue 05 Mar 2024 17:36:15 +0000
ROA not after:            Tue 04 Mar 2025 17:41:15 +0000
asID:                     271773
IP address blocks:        190.13.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:32:be:55:39:a2:a5:28:96:94:ef:34:4f:5f:fc:e9:e5:9d:7e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:15 2024 GMT
            Not After : Mar  4 17:41:15 2025 GMT
        Subject: CN=BECA6A4BAF1F15F05DB56F8BABD04FA561D50D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:ad:9a:d9:6b:0b:54:33:db:bf:08:50:13:
                    1e:3e:12:97:31:01:a5:57:b5:80:c2:b1:15:dd:e8:
                    f6:62:51:c1:dd:62:bb:66:ba:ab:e5:4d:4d:df:22:
                    03:f8:f1:a4:da:5f:18:34:09:f7:b8:53:2b:e9:cb:
                    f0:56:da:17:b0:18:0b:3a:d7:fc:2c:2d:29:7f:45:
                    4a:31:12:35:9e:21:6d:15:b5:25:d8:4e:e8:d2:9f:
                    17:64:2d:b2:bd:f0:13:7f:70:27:f9:07:50:0c:1a:
                    ab:67:22:3e:a2:23:38:84:64:12:91:e8:e7:6b:26:
                    87:a5:1b:bb:1c:bb:3f:ec:31:fa:f9:e0:7e:65:eb:
                    1e:18:a3:bd:80:0c:d6:2f:14:09:26:00:62:ad:1c:
                    90:a3:cb:a8:2a:d6:7a:8d:b7:7d:aa:75:3c:37:fe:
                    ca:80:ed:b5:90:fa:94:55:a9:a1:57:43:58:a1:cc:
                    76:8f:93:a4:5f:82:50:8f:e4:39:0f:35:f4:c2:81:
                    13:f8:4d:e6:a3:d9:65:56:45:d9:17:ba:18:d3:91:
                    f2:78:a3:f3:e2:f5:a6:89:94:25:c9:77:21:dd:20:
                    ef:87:1a:5c:98:0d:48:9e:8c:fc:64:d0:76:7f:ec:
                    22:21:26:0c:3b:6d:48:be:95:1a:2c:d6:ce:8d:a1:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CA:6A:4B:AF:1F:15:F0:5D:B5:6F:8B:AB:D0:4F:A5:61:D5:0D:58
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230312e302f32342d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:6d:88:6f:d8:59:ff:5d:bc:04:8f:21:65:29:90:67:e7:
         16:9c:86:b5:6d:ee:72:ca:3a:b0:96:b4:89:ed:df:4f:18:85:
         35:5d:5d:41:a2:2e:5a:ea:eb:ba:5b:e9:42:87:33:cb:28:8e:
         fb:85:8b:4c:6f:4d:f5:5f:6d:6c:d1:8f:98:42:49:7d:71:8c:
         b7:68:ad:68:54:d3:02:3a:db:34:d5:ed:75:14:e9:96:48:50:
         a4:23:cc:9b:46:97:39:ba:95:77:66:3d:75:e7:c3:10:ac:08:
         fb:ee:68:05:b6:62:24:23:bb:67:bc:f3:b6:0c:5a:b4:52:da:
         d5:07:a2:cb:c5:b6:0e:b2:98:67:6b:11:0d:ca:19:83:7b:14:
         20:a0:9c:23:57:05:d7:4d:cf:f7:18:1d:18:a3:f3:19:eb:17:
         44:97:59:fd:97:50:7f:0a:b0:d6:34:4f:d0:f1:e5:05:89:01:
         b6:6c:2f:d7:d3:68:07:16:0a:ab:de:e0:f9:2f:70:6a:8f:96:
         aa:6a:68:3e:81:db:1a:a8:c3:e9:35:98:0a:90:e6:d9:06:01:
         2b:aa:95:31:17:27:da:93:41:75:a0:1c:40:18:c3:00:a1:1e:
         41:3e:51:2a:57:9e:b0:f1:d6:4b:0d:94:f6:6e:10:aa:65:66:
         3e:ab:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:07 2024 by rpki-client on console-ams.rpki-client.org