Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa
File:                     3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa (raw, json)
Hash identifier:          mH6QYkFiWV8Dno3eUG2guBd/uCjIWGTWKcJkjDmLN4U=
Subject key identifier:   27:B9:9F:96:21:7D:48:07:2F:24:D6:BE:B7:06:DF:4A:B2:37:FD:39
Certificate issuer:       /CN=002873114D32B2AD9DB187390E4EE550B8778B00
Certificate serial:       38AB9AFC57814210BAB8F311B4C82ACEFDBFF034
Authority key identifier: 00:28:73:11:4D:32:B2:AD:9D:B1:87:39:0E:4E:E5:50:B8:77:8B:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/002873114D32B2AD9DB187390E4EE550B8778B00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa
Signing time:             Tue 05 Mar 2024 17:50:20 +0000
ROA not before:           Tue 05 Mar 2024 17:45:20 +0000
ROA not after:            Tue 04 Mar 2025 17:50:20 +0000
asID:                     262216
IP address blocks:        190.113.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/002873114D32B2AD9DB187390E4EE550B8778B00.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/002873114D32B2AD9DB187390E4EE550B8778B00.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/002873114D32B2AD9DB187390E4EE550B8778B00.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ab:9a:fc:57:81:42:10:ba:b8:f3:11:b4:c8:2a:ce:fd:bf:f0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002873114D32B2AD9DB187390E4EE550B8778B00
        Validity
            Not Before: Mar  5 17:45:20 2024 GMT
            Not After : Mar  4 17:50:20 2025 GMT
        Subject: CN=27B99F96217D48072F24D6BEB706DF4AB237FD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:40:f6:61:27:8c:0e:61:f5:28:2b:a4:d0:
                    e5:18:f8:e9:7c:c5:a5:38:0a:b1:e3:14:4c:d6:75:
                    85:d1:2b:6d:9c:76:73:b9:6e:06:07:60:68:56:04:
                    a3:16:62:a1:e7:bc:09:a7:dd:24:1b:38:f5:a4:36:
                    2e:e8:3b:cf:be:43:1c:a9:7f:0c:b6:71:4a:46:4e:
                    35:9e:79:34:cf:a2:bc:44:18:8c:6c:49:26:24:cb:
                    f8:8f:3c:43:14:4e:bc:58:39:e8:ab:dd:16:74:db:
                    d5:5b:78:73:cc:72:21:8d:55:8a:47:62:95:a4:4d:
                    16:31:b4:da:1e:f2:15:c5:da:d7:7a:de:1e:ed:64:
                    5a:0c:9a:2a:02:6a:07:2d:8e:f3:25:13:33:78:7e:
                    12:91:34:f6:b5:80:38:d2:25:cc:3a:21:e7:6b:e3:
                    8b:c5:5a:2f:61:e7:2c:9a:fc:be:06:9a:38:04:0c:
                    e9:54:ed:0e:63:b4:eb:5a:f4:56:ce:d1:71:bc:f3:
                    b5:40:8f:70:e0:bb:54:2f:26:e6:bf:25:7b:ec:d6:
                    cd:25:92:f5:45:01:69:ed:5a:cf:52:6c:6c:8b:51:
                    7c:e7:09:0f:ef:a2:e3:d0:5c:bc:86:9e:7a:f6:38:
                    ec:f6:7d:b8:cb:b0:42:fe:99:4e:79:60:a3:4d:6c:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:9F:96:21:7D:48:07:2F:24:D6:BE:B7:06:DF:4A:B2:37:FD:39
            X509v3 Authority Key Identifier:
                keyid:00:28:73:11:4D:32:B2:AD:9D:B1:87:39:0E:4E:E5:50:B8:77:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/002873114D32B2AD9DB187390E4EE550B8778B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/002873114D32B2AD9DB187390E4EE550B8778B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32312d3231203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:09:4f:3a:5b:9d:77:d1:f6:27:bc:b6:ba:c6:09:b6:e1:fe:
         3a:02:66:c2:da:d4:5b:34:a0:a2:13:eb:66:3b:20:5f:bb:7c:
         1a:7e:b8:20:07:72:62:22:21:a4:be:b4:28:8b:10:92:40:13:
         82:af:67:73:54:b9:30:cc:56:46:2b:cc:f8:9e:41:e4:e1:82:
         bd:c2:38:b1:6f:87:c0:45:29:ea:0d:ae:61:cf:c7:a5:bf:35:
         4e:be:44:87:a2:6f:3a:eb:dc:a7:c2:af:b9:da:f3:b1:7a:86:
         6d:a6:31:4e:48:84:5d:29:65:28:50:59:00:34:67:55:c6:5a:
         e2:ca:cf:25:d7:85:60:16:8f:c5:4a:43:68:40:d4:d8:14:4a:
         c3:73:07:68:d3:f6:e1:4c:ed:5f:4e:a4:cc:a0:22:80:35:11:
         20:f1:f1:d4:c8:5f:47:27:28:e6:a3:52:1a:74:d6:cc:2f:56:
         4c:4d:16:42:30:ef:d3:ca:94:d8:b3:d0:5c:c7:cd:c8:86:fe:
         3f:f0:ba:84:c2:e1:72:2c:2b:47:b3:86:2f:a3:ba:2f:60:23:
         a4:61:8c:4a:99:45:bb:1f:53:f7:6e:3d:bc:2b:7b:a9:76:f0:
         3f:29:75:03:5f:c7:ea:af:45:3b:b8:fa:29:00:f9:39:a9:bb:
         9c:7e:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:46:23 2024 by rpki-client on console-fra.rpki-client.org