Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32332d3234203d3e203237393032.roa
File:                     3139302e3130372e37302e302f32332d3234203d3e203237393032.roa (raw, json)
Hash identifier:          WB2J24IncpkUq5j4kS9n9RdZIyD6co0MoZpXgvL2WUw=
Subject key identifier:   53:34:66:D0:A3:13:C4:9C:47:95:64:EA:1A:0E:3D:6D:58:6F:E3:64
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       6BE5B35321157D9370D2542EF4CEAAC013964E69
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32332d3234203d3e203237393032.roa
Signing time:             Tue 05 Mar 2024 17:57:01 +0000
ROA not before:           Tue 05 Mar 2024 17:52:01 +0000
ROA not after:            Tue 04 Mar 2025 17:57:01 +0000
asID:                     27902
IP address blocks:        190.107.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e5:b3:53:21:15:7d:93:70:d2:54:2e:f4:ce:aa:c0:13:96:4e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Mar  5 17:52:01 2024 GMT
            Not After : Mar  4 17:57:01 2025 GMT
        Subject: CN=533466D0A313C49C479564EA1A0E3D6D586FE364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:87:67:b0:54:27:e2:b8:cf:8b:0b:73:45:3f:
                    57:f3:11:08:81:dc:51:47:2d:96:76:33:89:d3:f4:
                    6e:81:35:ab:64:c0:1c:15:7b:d0:e0:54:2b:c4:0a:
                    fb:92:37:c7:82:7d:28:51:aa:a3:18:a4:1a:1e:ef:
                    0b:a7:77:ec:70:5f:b2:ae:13:cc:1f:55:97:4c:83:
                    11:a1:db:60:5d:17:65:99:aa:c1:da:8f:a8:dc:c7:
                    11:c4:67:e1:c1:10:6d:71:bf:d8:79:07:c0:a4:f6:
                    cc:db:4b:39:ca:1c:8c:40:73:27:c9:38:4a:a0:72:
                    03:40:83:e9:1d:dc:9a:48:a1:7a:53:02:8d:f1:e0:
                    49:05:91:b3:ac:4a:fb:e3:31:30:fa:3c:7b:47:3c:
                    be:fe:11:b3:fc:a4:0f:fd:f7:d8:df:2b:e1:a6:05:
                    6f:b2:f1:f5:c1:f1:fa:23:9d:3a:8d:cf:96:6e:11:
                    10:9e:df:b5:88:21:d4:bd:2e:a0:9b:b3:fa:ff:3b:
                    03:91:22:68:e7:04:6e:78:88:de:25:f5:39:c7:57:
                    b5:33:e6:5f:9f:3f:c8:22:6c:64:55:14:20:70:dc:
                    a8:15:33:dc:8f:f2:80:09:7d:74:d2:d0:9e:fc:d5:
                    86:73:07:cf:2c:43:af:80:54:9e:06:b5:a6:52:f0:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:66:D0:A3:13:C4:9C:47:95:64:EA:1A:0E:3D:6D:58:6F:E3:64
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32332d3234203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:84:5a:1c:33:6e:d3:d9:9e:97:b0:ae:cc:1b:26:b5:8f:
         8c:61:54:d5:d9:f1:c6:e6:65:96:48:6b:c3:75:91:ca:f9:e7:
         39:d9:67:a3:db:13:bb:fa:b8:a0:9c:0a:ab:1b:0b:6c:57:4a:
         00:7d:b1:7d:56:60:76:c6:e7:f2:25:d6:be:d1:9e:f7:de:1c:
         f8:ea:f6:6f:f7:04:b4:21:83:5f:19:14:30:e8:50:e9:63:00:
         c2:a5:7e:4f:1c:54:44:d4:cb:79:3b:44:ea:0b:2b:f7:ab:0c:
         e6:15:2a:41:93:33:69:0e:b0:37:56:68:2d:0a:22:9f:9b:4e:
         73:2e:eb:da:b0:ab:ff:17:ef:01:27:a9:f3:4e:50:2b:d7:38:
         75:98:f3:6b:4f:d8:41:2c:d0:d0:a8:ce:c7:00:a6:8f:1d:f7:
         5d:53:c9:df:ac:e2:92:69:f6:ba:ae:e5:37:4f:a7:ec:fa:55:
         08:ea:cb:bc:ab:c8:46:66:ba:08:4d:8b:31:85:33:5f:f6:b5:
         27:ec:a0:b9:c6:bd:15:98:ab:9a:f0:95:27:43:8c:70:73:23:
         50:a1:ac:69:b1:df:d4:45:62:0e:28:b4:ac:f5:e9:4d:55:30:
         72:7c:f7:52:6f:59:86:94:ed:9d:d8:ac:b4:01:bb:19:9d:b6:
         80:b2:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:04 2024 by rpki-client on console-ams.rpki-client.org