Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
File:                     3139302e3130372e36382e302f32332d3234203d3e203237393437.roa (raw, json)
Hash identifier:          im75sBID3lTQ3oQdOmDeR+qqv14EnAvupxR1ERTHjn0=
Subject key identifier:   AB:5A:B3:E0:86:01:05:47:33:C5:9E:5D:1C:60:21:C5:28:CC:55:40
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       68397C00FDA19C57258287DCAD16306B6AC2E9CE
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:57:01 +0000
ROA not before:           Tue 05 Mar 2024 17:52:01 +0000
ROA not after:            Tue 04 Mar 2025 17:57:01 +0000
asID:                     27947
IP address blocks:        190.107.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:39:7c:00:fd:a1:9c:57:25:82:87:dc:ad:16:30:6b:6a:c2:e9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Mar  5 17:52:01 2024 GMT
            Not After : Mar  4 17:57:01 2025 GMT
        Subject: CN=AB5AB3E08601054733C59E5D1C6021C528CC5540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:0a:5f:48:71:3e:6d:c4:1a:08:57:51:ca:
                    be:04:1e:22:1a:16:ae:59:16:f7:82:89:6e:08:06:
                    17:84:09:72:bd:ba:e3:23:f7:01:11:d3:b1:7c:d8:
                    f2:10:18:c7:7a:4f:37:4e:db:73:8c:91:03:8f:10:
                    d8:f9:0b:7b:37:6f:01:26:ae:46:ab:99:23:5e:22:
                    40:63:27:b7:5d:16:90:76:fa:9a:1a:23:10:c6:46:
                    e9:2e:8f:21:d5:53:3b:4e:aa:67:3a:5b:7a:c4:f2:
                    a3:36:71:8e:b6:82:9e:65:5f:a7:01:f3:05:ad:3e:
                    4b:b7:b3:14:e7:16:99:4e:0e:21:73:69:7d:83:38:
                    d3:5b:83:ae:8c:a8:64:89:5c:29:b4:8c:26:ce:24:
                    be:46:1e:24:a5:c4:5f:66:44:44:a1:43:f9:ae:0c:
                    b3:b2:70:bd:3a:59:95:e7:39:ef:10:27:0d:fb:84:
                    1e:0e:38:68:6c:d0:8f:77:2d:e4:38:2b:9f:8f:d9:
                    84:85:2f:01:49:67:c0:c8:32:36:74:f4:0c:ea:ce:
                    81:40:51:c9:74:10:07:2b:e8:af:23:a1:18:5d:9e:
                    bb:d8:32:42:5a:e0:e6:3a:1f:44:5d:2c:be:de:30:
                    44:cc:40:fe:46:ba:64:34:12:27:0e:0d:7c:f4:8c:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5A:B3:E0:86:01:05:47:33:C5:9E:5D:1C:60:21:C5:28:CC:55:40
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:32:1d:77:3b:69:9a:e1:28:4f:62:41:cf:0a:c1:f0:ba:b6:
         3a:68:3b:b0:65:3c:77:38:87:a8:2c:b9:2c:bd:0a:ca:ec:18:
         94:f8:89:99:34:3e:e9:04:ed:f9:25:17:a0:ce:7a:6b:19:19:
         6f:a7:44:14:7a:06:c3:6c:f6:29:7d:2a:19:c0:f8:e5:8f:9e:
         28:c6:00:ef:39:5b:7a:8d:06:c8:f0:14:84:e5:12:0f:34:70:
         92:31:63:7e:b2:13:21:dc:34:8b:45:f9:2c:68:94:2b:5a:33:
         2c:c8:20:37:14:b7:29:d4:23:6c:4c:ab:08:f1:21:d0:2a:db:
         76:99:8c:a8:75:41:09:d4:6a:42:9d:5b:3d:8e:df:b8:b8:be:
         79:87:10:07:83:26:10:c0:58:34:2a:be:dd:8b:a7:60:28:88:
         87:26:61:84:0c:68:b0:bd:47:2c:1d:7b:f2:77:65:9c:62:ee:
         f3:77:49:e8:d3:b9:63:37:b4:29:d4:0f:98:f4:ac:7e:c4:f3:
         a3:5f:56:d7:70:a5:72:b7:eb:bf:ee:55:46:cc:cf:68:fe:f8:
         af:08:23:49:16:ee:39:6b:6b:23:d8:c1:19:dd:42:4a:da:f3:
         56:78:de:61:68:99:f7:23:12:7b:c8:cd:62:fa:3e:d6:6f:ad:
         80:c7:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:17:42 2024 by rpki-client on console-fra.rpki-client.org