Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          /P5vrVPXfO6kAIEOXtie0Cf93/8WmMDutjORHOEu8fY=
Subject key identifier:   CB:EB:EB:7D:30:E9:9F:BD:A8:85:2F:80:6B:86:B1:03:B0:BC:A7:A9
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       312A138CEFFA17949D7681A600274997EE12D0C8
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:01 +0000
ROA not before:           Fri 08 Nov 2024 14:05:01 +0000
ROA not after:            Fri 07 Nov 2025 14:10:01 +0000
asID:                     262216
IP address blocks:        190.113.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:13:8c:ef:fa:17:94:9d:76:81:a6:00:27:49:97:ee:12:d0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:01 2024 GMT
            Not After : Nov  7 14:10:01 2025 GMT
        Subject: CN=CBEBEB7D30E99FBDA8852F806B86B103B0BCA7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:c6:ae:0d:89:a8:75:1c:08:85:13:c6:78:
                    8b:75:c8:ce:e1:09:e7:0b:f3:8b:9c:c3:ef:0a:80:
                    03:a4:8e:02:f8:b7:40:34:52:e9:75:7c:bc:ac:b3:
                    1c:bf:92:a3:5c:5b:18:0d:7f:b9:b2:f1:c3:25:4c:
                    42:ab:4f:d1:5f:8b:d6:bd:f8:28:bc:50:ab:53:a7:
                    da:62:ec:bd:d0:4e:4d:e9:c9:5f:6e:a5:b4:04:72:
                    77:ad:a7:f6:ad:27:d5:e1:54:13:3f:cd:3e:4c:50:
                    f5:ba:a7:23:91:a2:c7:b1:e0:a5:5c:ed:9c:4c:e3:
                    84:22:23:a2:51:1c:c8:00:4e:7e:8b:56:d2:03:8a:
                    a2:d6:ee:f0:73:ee:19:e8:c2:62:dd:4f:fa:d7:8a:
                    bf:d1:ce:57:6a:c3:2b:66:7e:fa:15:10:0e:eb:a0:
                    6f:1a:21:48:c8:a3:1d:9b:5a:48:56:53:c1:a8:66:
                    14:01:f9:35:d2:c1:73:42:11:a2:98:7a:54:77:42:
                    5d:f2:83:93:38:c2:d8:01:24:0f:4f:5b:6f:ad:ae:
                    5f:7b:7f:5a:8e:ec:2e:39:60:63:e5:f5:76:c5:47:
                    55:9f:a4:31:9a:05:ac:8e:fd:cc:37:28:8d:83:2b:
                    e4:ac:ea:a9:3f:6d:c3:8f:28:43:d2:e3:de:46:1f:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EB:EB:7D:30:E9:9F:BD:A8:85:2F:80:6B:86:B1:03:B0:BC:A7:A9
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232342e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:76:82:08:6b:91:1e:78:84:5c:d2:d6:a9:e2:ca:35:f2:3b:
         68:e9:b5:e3:2e:2a:01:75:ae:32:fc:ba:f8:7c:46:b6:9e:be:
         74:81:c0:48:b0:f6:07:2d:24:36:6d:4a:f6:4a:35:d0:35:89:
         3f:20:6c:74:0c:aa:54:ab:5d:57:27:3d:79:19:6c:79:7a:5c:
         74:1f:48:de:64:f3:1f:42:72:23:1a:53:e2:9f:df:70:36:36:
         f0:39:88:b2:36:2e:d1:9e:99:d2:ba:3e:b8:51:cd:3d:a1:12:
         dd:cb:a2:95:e3:7d:7d:40:be:23:f4:87:c5:c7:15:8c:fe:6a:
         25:81:7e:d9:94:bb:b2:f5:da:a3:f3:66:95:81:b1:1d:e6:36:
         79:12:6a:a6:60:8c:a7:39:71:85:4e:30:dc:09:2a:29:23:73:
         96:10:dc:18:49:d3:24:4a:9c:b4:ad:04:8d:5d:10:3d:ef:02:
         27:7d:62:96:c3:81:6a:08:c5:94:39:b5:39:7e:18:1c:c8:43:
         4c:ff:5c:58:e9:11:e4:2f:68:90:44:44:99:cd:55:48:6b:0e:
         18:80:25:ff:9c:b1:76:90:05:6a:5e:f4:75:8c:20:a3:0d:46:
         d9:90:3b:53:4f:a6:0c:db:fd:49:a4:5a:d4:33:4c:92:51:af:
         dc:e0:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org