Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230362e302f32342d3234203d3e20323731373733.roa
File:                     3139302e31332e3230362e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          deSQMkpHGxhZry6BdIJnG50p6xYXryItiJXl1Rc2V9Q=
Subject key identifier:   55:94:2D:6D:C5:DE:D4:8D:AE:BF:09:1E:30:1C:5A:4F:BC:B1:33:41
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       18E00A19525F90ECFDD232B5664B21F1110731DB
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230362e302f32342d3234203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:16 +0000
ROA not before:           Tue 05 Mar 2024 17:36:16 +0000
ROA not after:            Tue 04 Mar 2025 17:41:16 +0000
asID:                     271773
IP address blocks:        190.13.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e0:0a:19:52:5f:90:ec:fd:d2:32:b5:66:4b:21:f1:11:07:31:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:16 2024 GMT
            Not After : Mar  4 17:41:16 2025 GMT
        Subject: CN=55942D6DC5DED48DAEBF091E301C5A4FBCB13341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:76:ec:91:9d:e5:8d:6f:13:80:2b:c2:68:
                    47:48:5b:fb:f6:35:3d:b5:c3:61:94:29:b7:b6:29:
                    d3:8d:03:79:54:52:d8:ff:11:42:2a:96:a6:5c:63:
                    0c:5d:0a:88:bf:bc:d3:2c:46:46:5f:a2:55:13:bd:
                    53:04:b8:38:c8:af:a3:e7:0d:3a:8c:c0:a4:8d:db:
                    c3:f7:35:e7:2e:cb:26:d7:86:35:f6:0d:fd:64:4e:
                    51:d1:2f:7a:50:7b:5b:1f:19:d6:27:f2:15:31:f6:
                    83:6a:2d:74:11:ca:db:c0:f0:57:6b:8f:c1:b0:5d:
                    18:86:04:f1:7b:8f:6d:3f:82:c7:8b:85:14:f3:57:
                    5a:e6:c2:f6:f8:b0:81:4a:f6:79:98:4d:8a:b5:84:
                    19:10:91:a3:66:a5:c9:db:c5:3c:c9:18:3f:28:21:
                    b6:e8:78:8f:34:5c:05:32:7c:39:1d:7e:73:11:2b:
                    b6:ab:00:4a:bd:9d:50:57:5e:21:36:31:ff:de:28:
                    59:98:ee:2d:bd:7a:40:30:5c:2c:8b:b4:d2:2d:5b:
                    23:9d:08:c8:b1:3d:26:97:de:ba:d2:07:6b:d6:7b:
                    4d:c7:07:a7:3b:22:95:a6:16:c8:eb:68:b9:01:b9:
                    df:18:35:ca:eb:77:75:9f:5a:b0:78:25:28:02:48:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:94:2D:6D:C5:DE:D4:8D:AE:BF:09:1E:30:1C:5A:4F:BC:B1:33:41
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230362e302f32342d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:59:16:09:24:48:23:21:5a:4f:ce:9e:07:fd:d2:bd:e9:d1:
         92:0f:cd:f0:2b:4c:46:77:83:bb:c3:05:cc:6b:1d:c8:43:0a:
         93:cc:11:29:42:d1:02:e0:a6:15:e5:68:18:e5:f7:e8:de:d6:
         b8:fd:d1:20:6f:06:00:78:4a:76:74:77:ff:04:c2:ad:38:a8:
         d4:03:fa:49:be:a9:5b:dc:de:d9:97:6a:38:f0:5c:03:ff:9a:
         a3:d3:99:77:91:24:08:20:3e:b4:86:6a:0b:c4:2f:70:51:25:
         e2:95:6f:b1:8d:46:a0:05:0b:d9:09:88:65:47:c6:ea:7a:fd:
         13:a5:a3:d4:b7:ca:c0:76:ca:41:93:bb:51:e7:ea:33:a1:1a:
         66:ee:55:25:f1:3a:b9:8d:6f:b0:b7:f9:26:d6:2b:88:f1:6c:
         42:c1:2e:e6:ff:35:5c:fe:51:9c:6a:70:bb:4f:7a:34:d6:b4:
         5b:b1:11:1d:8a:0b:a1:af:cd:95:95:d2:75:2d:b2:c3:db:19:
         09:59:3d:91:56:a1:0e:96:8c:e4:fe:eb:e4:c6:72:67:7f:0d:
         4a:aa:c2:64:48:e0:bc:1a:30:3d:fd:46:48:f3:64:9f:f0:41:
         cf:0c:42:c3:06:e5:66:64:1b:96:7a:4a:18:29:f5:93:79:4b:
         f1:28:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:07 2024 by rpki-client on console-ams.rpki-client.org