Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          NdNwFBTbQ07eXqBYJnqTCvYWs07QJqxZb3PZ4alEil8=
Subject key identifier:   D4:4E:34:76:83:31:B6:41:5E:2D:4A:FD:96:35:49:56:65:2B:CB:E5
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       64CB73D2D674A4F14C3060F191788E9EA5AC9F6E
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:04 +0000
ROA not before:           Fri 08 Nov 2024 14:05:04 +0000
ROA not after:            Fri 07 Nov 2025 14:10:04 +0000
asID:                     262216
IP address blocks:        190.113.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cb:73:d2:d6:74:a4:f1:4c:30:60:f1:91:78:8e:9e:a5:ac:9f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:04 2024 GMT
            Not After : Nov  7 14:10:04 2025 GMT
        Subject: CN=D44E34768331B6415E2D4AFD96354956652BCBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:e4:e9:52:6e:f2:d4:cb:9c:10:59:71:93:
                    71:3e:ac:a2:f3:c6:f4:4f:b0:2c:a1:e6:61:1e:e4:
                    61:e8:bd:ed:65:80:96:87:8d:79:18:b3:68:0f:9e:
                    80:11:1d:bd:fe:cd:63:e9:08:0c:1b:46:90:cc:f0:
                    ca:1b:55:99:41:a0:85:95:dd:99:b5:61:68:f2:cc:
                    e1:03:4d:bd:bc:2b:9a:63:59:ba:85:0c:b3:7e:90:
                    e9:3b:2f:89:d8:f1:32:fd:ce:05:6d:a8:0b:dd:6e:
                    71:46:a2:5d:60:1a:b6:e7:8f:06:d3:b0:cb:14:de:
                    6b:f5:c8:f9:58:0e:0e:94:dc:4b:b3:d5:36:f0:84:
                    72:7c:cc:2e:03:a0:70:12:3e:44:d5:e8:fa:dd:c8:
                    69:be:92:d9:cf:7b:5f:31:d0:37:86:57:17:87:22:
                    f6:52:66:74:2e:8c:5f:3e:ab:e6:88:d2:71:1e:28:
                    16:02:a8:e9:89:48:1e:c1:13:72:9c:ac:6c:8c:60:
                    80:a6:9e:16:02:1a:33:37:5f:8c:84:87:02:22:4d:
                    e1:19:5b:42:a6:04:3a:bf:15:18:ed:e1:0b:f9:da:
                    fe:0f:51:f0:f7:29:3b:52:9e:6d:04:14:2b:ae:32:
                    60:26:62:26:52:8c:57:1e:5c:58:d0:cc:4f:db:71:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4E:34:76:83:31:B6:41:5E:2D:4A:FD:96:35:49:56:65:2B:CB:E5
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3232382e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:82:f0:c5:28:4d:18:a9:24:24:ac:82:8b:b4:fc:be:93:
         88:1e:f8:c8:e9:d0:c4:8f:5b:45:b7:d6:42:6e:50:50:d8:ac:
         6f:cb:7c:83:79:7d:ec:54:fb:fb:21:e5:56:da:17:57:65:f5:
         7e:b6:e3:27:41:fe:25:de:5c:e8:86:b3:58:c9:e7:e5:58:2c:
         c5:4d:82:c1:47:b8:5e:cd:b2:cd:e2:d3:26:71:03:f4:ce:83:
         f1:53:1e:29:cb:dd:4a:a2:54:d1:5d:97:36:50:7f:9e:bc:e6:
         00:c7:49:0b:79:43:6a:fa:08:33:cd:9b:f0:0b:68:ad:0c:17:
         a4:47:30:b7:36:97:d2:2e:b2:e1:97:1d:14:94:2f:91:d4:60:
         28:1c:55:fc:fd:72:9d:18:7a:89:e3:7a:b9:3b:69:9a:c2:30:
         ad:67:33:80:3b:2e:94:5c:73:d0:e0:64:57:82:56:3d:99:9b:
         f5:75:b3:77:c9:be:16:23:31:c4:e6:33:87:fe:3d:59:c8:b9:
         ef:67:69:32:ce:71:4b:c4:92:4d:74:c5:d6:53:ba:e5:3d:25:
         14:65:8d:b8:96:06:84:e1:bc:9e:ae:71:95:13:86:41:a3:e0:
         6d:84:99:32:9d:cf:ed:d7:f1:12:45:c8:0d:9b:3c:4e:0e:89:
         85:72:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org