Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232352e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232352e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          9EPvhgxRc1/peM2zcJUEErX8k7qZ0PZxL567VhonllQ=
Subject key identifier:   07:78:99:BE:1D:D6:27:4A:9A:C1:C9:C4:B1:E2:E6:0C:E7:92:70:00
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       1B87E02BF5CB00F808F5138D91FE520D5E4FE472
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232352e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:00 +0000
ROA not before:           Fri 08 Nov 2024 14:05:00 +0000
ROA not after:            Fri 07 Nov 2025 14:10:00 +0000
asID:                     262216
IP address blocks:        190.113.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:87:e0:2b:f5:cb:00:f8:08:f5:13:8d:91:fe:52:0d:5e:4f:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:00 2024 GMT
            Not After : Nov  7 14:10:00 2025 GMT
        Subject: CN=077899BE1DD6274A9AC1C9C4B1E2E60CE7927000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:f5:c0:9e:e8:e5:0d:73:aa:7e:2a:b9:68:
                    28:64:0f:ac:c3:27:54:20:72:df:29:c2:78:b2:8e:
                    7d:3d:9b:19:79:9b:bf:e0:c9:ea:10:ee:49:62:3e:
                    78:37:6c:3c:79:8c:43:d6:b7:21:fc:3e:68:7e:e5:
                    6d:30:1e:b0:e7:e6:2a:aa:1f:b8:38:9f:59:70:ce:
                    0b:56:d1:f6:e1:05:45:ff:f6:bb:cc:62:01:9b:d2:
                    96:19:09:6b:7e:77:1e:03:f8:82:b9:fa:27:2b:1e:
                    d4:e0:f9:bd:41:7f:81:f3:b1:e3:34:d4:1b:c0:e4:
                    21:d5:67:9a:bf:2d:96:c2:13:35:8c:c4:32:a3:30:
                    fc:00:dc:84:2c:0b:53:5c:48:e3:76:e8:80:8d:f8:
                    97:85:c6:30:56:b9:bd:ac:fb:99:72:40:56:1e:40:
                    26:99:e9:fb:aa:dc:53:4c:cf:ac:47:b1:6f:b2:e3:
                    29:38:b5:a1:a4:52:73:74:7f:32:9b:80:58:d5:bf:
                    ee:13:6c:fb:17:77:45:0d:d4:92:fe:1d:84:d7:04:
                    d2:4d:08:3c:f1:cb:89:da:a8:2f:a5:73:03:27:4f:
                    eb:94:c8:4d:a1:e5:b8:3f:d4:c4:91:60:af:e8:7d:
                    48:e2:5d:71:fa:5a:12:29:a7:06:5a:39:38:96:01:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:99:BE:1D:D6:27:4A:9A:C1:C9:C4:B1:E2:E6:0C:E7:92:70:00
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232352e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e8:69:f0:12:f1:b2:15:35:2b:6a:c7:0c:7f:97:27:c1:39:
         c9:52:45:77:56:64:fa:31:e5:c3:5e:78:67:c4:df:66:7a:16:
         5c:ba:c5:bd:fd:df:a4:fa:d5:dc:13:65:22:6d:ae:32:2c:ae:
         73:93:10:2e:14:1f:b1:ef:02:ab:46:af:36:fa:5c:d8:07:2e:
         fd:0e:6f:7a:e9:04:4a:ad:2b:fa:63:89:18:f2:f2:96:3a:64:
         62:de:fc:0c:81:49:11:d9:19:83:e4:b7:bd:d6:87:9e:fc:b8:
         09:84:1e:05:33:2a:9d:ce:11:fa:d5:6f:76:45:59:08:96:88:
         bb:2c:ad:f0:48:ea:61:9d:65:69:20:0f:af:b8:c3:72:b8:56:
         13:e9:58:24:0c:bb:42:37:3d:57:9e:69:88:b0:dd:5a:fc:35:
         38:7c:7b:dc:a9:93:f0:13:b5:84:0b:4f:30:b6:fa:f8:05:24:
         36:ce:ee:af:71:d0:82:ac:db:ee:48:49:d0:c7:0d:38:a5:f5:
         d3:5f:d2:1d:a6:f4:a3:8b:06:72:c4:7a:6d:15:b7:ad:09:19:
         ed:90:3a:8b:42:5e:b1:2f:0d:7d:35:10:43:b0:82:a7:11:71:
         d6:a1:8b:f5:91:ad:0c:04:cf:37:93:c6:c0:4a:a5:d0:1c:1d:
         2c:45:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org