Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230372e302f32342d3234203d3e20323731373733.roa
File:                     3139302e31332e3230372e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          IeDZ52iU5pd7Iisfs6Pz+p98tmUL2a+NjqWqzsbh2jk=
Subject key identifier:   93:D8:08:A6:E1:5A:C7:3E:52:73:4E:63:57:7D:69:86:BD:87:50:EA
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       184A39837497BC6FCB22D531190BD9DC5543CEA0
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230372e302f32342d3234203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:20 +0000
ROA not before:           Tue 05 Mar 2024 17:36:20 +0000
ROA not after:            Tue 04 Mar 2025 17:41:20 +0000
asID:                     271773
IP address blocks:        190.13.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4a:39:83:74:97:bc:6f:cb:22:d5:31:19:0b:d9:dc:55:43:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:20 2024 GMT
            Not After : Mar  4 17:41:20 2025 GMT
        Subject: CN=93D808A6E15AC73E52734E63577D6986BD8750EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:7a:9f:a8:32:81:08:ce:50:05:3a:08:ba:
                    ae:2e:f8:36:71:1b:55:4d:30:73:94:7b:63:50:08:
                    c8:b6:fa:21:cd:a5:bd:e3:4b:f2:e5:45:8c:25:30:
                    0c:fb:be:76:ee:25:0d:d6:8f:f4:aa:97:36:57:5a:
                    68:4b:96:45:bb:d9:e4:a1:a6:e5:2a:0f:85:f3:57:
                    a0:3d:51:3c:35:06:55:f0:96:df:bf:c1:99:7f:0a:
                    5b:7f:ec:16:bf:4b:6c:51:57:52:0e:17:2d:5a:dc:
                    e2:ce:1c:ae:b3:db:5b:99:21:e6:f0:55:5e:cf:a2:
                    1c:f5:d7:b3:ff:eb:a2:e3:60:be:e3:52:cd:53:50:
                    af:43:91:6b:ea:1c:60:c3:83:36:2e:da:a0:c0:9a:
                    d2:d4:51:85:ea:2b:32:cd:32:ee:42:2a:ad:d2:b2:
                    97:a6:d2:27:4a:5c:e8:5d:cb:13:d0:37:80:36:10:
                    52:d6:dd:94:b0:5e:87:ba:13:6c:2d:d0:f0:4f:d0:
                    b7:17:bd:4c:bc:ee:19:3d:2e:31:ff:62:56:80:69:
                    13:8e:04:ef:d4:14:ff:96:dc:41:e2:da:91:aa:55:
                    39:17:92:85:bd:58:2c:ee:11:c2:73:b4:00:14:2f:
                    0f:c2:0b:b6:5e:98:d9:dc:9d:1a:67:f6:f6:a6:bd:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D8:08:A6:E1:5A:C7:3E:52:73:4E:63:57:7D:69:86:BD:87:50:EA
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230372e302f32342d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:bd:bf:5e:01:c2:a7:d1:53:fd:3c:f4:9f:3f:d7:45:e1:
         07:4e:e1:e1:a6:4b:ab:7e:3b:85:1f:c2:d5:61:b3:64:2f:18:
         cf:49:fa:7c:25:bf:26:71:d1:ac:4a:bd:15:d4:33:ed:71:21:
         75:09:85:de:0b:26:ff:9d:b4:f2:21:80:1e:0d:7a:51:2f:84:
         07:49:2e:d6:79:ed:29:7a:44:49:95:a9:15:cb:5b:19:da:a9:
         79:b4:be:0f:22:aa:bf:ec:48:0a:9d:f2:ce:6d:12:51:f0:f9:
         20:5b:5f:05:67:73:32:87:8d:f9:8d:16:24:2b:cd:75:27:05:
         b6:5e:73:e3:1d:e6:a2:f1:7b:f0:ce:1a:dc:9e:a9:2a:93:7e:
         6b:88:15:bd:98:4d:75:e6:b8:4e:8d:ae:52:fa:f8:09:73:c1:
         74:01:e8:fb:65:02:f8:16:e7:83:e9:5e:07:43:fd:b1:49:25:
         bd:95:6b:a5:80:e1:01:16:fb:96:bf:e0:74:c1:01:04:77:04:
         25:d5:1f:03:1f:40:cf:92:76:86:50:82:ee:ad:24:e9:40:32:
         4c:b9:14:9e:7b:45:98:b4:b9:b2:56:d0:0c:47:42:63:fd:55:
         93:62:bd:dc:a1:94:32:f4:b9:44:47:1b:a6:63:7e:13:c8:02:
         4d:5f:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:38:46 2024 by rpki-client on console-fra.rpki-client.org