Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232362e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232362e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          g29fmHKUjK3O8H5yeAsQvhn/w0DmW1R71mrCB5AVkHM=
Subject key identifier:   89:E1:D3:D7:A8:62:9B:31:65:41:65:96:E2:32:F1:0F:52:21:C0:FC
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       444D7A71439522BE9FA2E811DFDF7414B39DFAD8
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232362e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:00 +0000
ROA not before:           Fri 08 Nov 2024 14:05:00 +0000
ROA not after:            Fri 07 Nov 2025 14:10:00 +0000
asID:                     262216
IP address blocks:        190.113.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4d:7a:71:43:95:22:be:9f:a2:e8:11:df:df:74:14:b3:9d:fa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:00 2024 GMT
            Not After : Nov  7 14:10:00 2025 GMT
        Subject: CN=89E1D3D7A8629B3165416596E232F10F5221C0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:ab:03:6d:3b:2d:e0:d3:04:dd:22:e2:ec:
                    85:29:52:cf:9f:6b:a8:c1:7c:27:b8:c4:a0:ef:e1:
                    48:40:88:c0:6a:5d:77:27:56:89:60:35:35:d7:f9:
                    36:2e:fd:6c:65:61:bf:f3:27:bd:ba:18:59:5f:47:
                    5e:7f:e2:fe:4f:f7:df:2e:ad:a7:44:24:71:99:07:
                    51:46:e5:a3:01:5f:91:c7:62:ab:f7:a5:b4:60:fe:
                    ca:57:8f:2a:32:a9:6f:31:22:28:28:08:9e:51:80:
                    bf:02:d3:1c:c5:76:c5:8d:13:46:cd:21:69:d3:cc:
                    d0:81:8f:77:3b:27:8e:7a:90:1b:36:5a:67:51:90:
                    54:65:5d:af:b9:28:f0:01:57:5a:76:e0:d2:e6:c7:
                    56:46:fa:bd:db:6e:1c:a8:bc:eb:6c:8e:91:4a:f4:
                    18:c5:c4:23:6b:02:c5:8a:b1:d3:33:a0:c7:e3:fe:
                    c7:cf:36:d9:03:db:f2:1a:99:2e:75:38:07:a2:cc:
                    e2:d7:7d:13:cc:25:44:7e:0d:3c:a0:84:47:c7:c9:
                    8c:43:45:37:10:a4:9f:01:84:16:82:46:af:5f:fb:
                    c3:05:14:d6:29:36:43:e8:49:62:b1:ad:dd:c6:9c:
                    2d:ef:19:2d:c0:3b:96:7d:a0:fe:e0:bf:87:41:51:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:D3:D7:A8:62:9B:31:65:41:65:96:E2:32:F1:0F:52:21:C0:FC
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232362e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:97:0a:26:b7:3d:68:c3:9c:a6:8c:45:ad:35:5d:5f:4c:c9:
         0b:1f:d7:ea:e3:de:5f:db:50:1d:9a:fe:2d:1d:77:a9:4f:9e:
         77:90:50:61:f9:e0:cb:cd:4c:1d:e2:19:a0:63:06:e4:93:86:
         68:35:a7:1c:08:43:f9:3d:0c:07:13:fd:41:0a:8f:24:e3:1f:
         3c:3b:94:87:8c:57:9a:c7:96:ff:45:0f:d0:c3:66:1a:5a:30:
         c5:f8:30:d3:20:32:74:b5:99:cf:f8:7f:dc:33:44:7c:3d:27:
         61:20:71:a4:81:4b:2f:0a:ba:af:0c:5b:1e:e4:3d:16:2e:a3:
         c8:e3:62:e5:f8:a3:89:59:11:91:95:8a:73:51:0a:7a:75:ec:
         04:bc:32:2e:f6:1d:39:73:47:21:b7:84:f6:3e:22:19:f0:d0:
         01:86:28:52:1f:bc:d3:52:27:48:5e:ea:b4:f3:9e:5c:01:2c:
         76:1f:ce:4b:85:cf:9b:a0:20:08:40:73:a1:bf:3e:a9:7d:7f:
         65:2e:7e:de:a8:75:3f:ce:6c:0c:d1:a1:75:89:cb:61:ab:10:
         42:67:d2:fc:b7:eb:0f:40:e8:cf:b9:1f:e2:9e:db:d4:25:24:
         e8:33:f8:23:54:0f:4a:5c:55:da:79:3e:0b:11:a4:3b:81:e5:
         1c:bc:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org