Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3233312e302f32342d3234203d3e20323632323136.roa
File:                     3139302e3131332e3233312e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          25sX4I2kiwntgvJ8giEuACCzw23HyswX1eARAq5uQVA=
Subject key identifier:   EF:EA:8D:18:24:18:20:A8:D2:88:F5:EF:EB:8A:9F:C5:85:11:FF:D6
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       0E39CE6FEEA64C2D6AF29E419B31488B06EB38E4
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3233312e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:00 +0000
ROA not before:           Fri 08 Nov 2024 14:05:00 +0000
ROA not after:            Fri 07 Nov 2025 14:10:00 +0000
asID:                     262216
IP address blocks:        190.113.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:39:ce:6f:ee:a6:4c:2d:6a:f2:9e:41:9b:31:48:8b:06:eb:38:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:00 2024 GMT
            Not After : Nov  7 14:10:00 2025 GMT
        Subject: CN=EFEA8D18241820A8D288F5EFEB8A9FC58511FFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:e8:08:38:a3:73:20:4a:25:9b:3c:f1:e3:
                    00:98:72:1f:f9:00:69:85:96:96:f3:54:fb:a9:96:
                    96:48:f9:d0:35:74:20:68:54:28:0f:83:b0:6a:a9:
                    f4:27:e9:15:d9:93:06:47:24:8a:0c:e9:d4:ae:bf:
                    b7:16:f6:8a:67:71:f7:8b:1a:48:22:e4:4a:ab:6d:
                    79:a4:eb:49:c1:fc:bf:2e:12:d5:39:23:f2:0b:3d:
                    9f:61:f7:7b:87:f7:0d:30:61:29:d0:0b:16:62:c6:
                    97:25:6d:be:99:5d:82:98:15:40:00:ba:e7:6a:4a:
                    99:04:d0:2e:f6:df:76:ea:75:11:d5:41:29:d1:95:
                    f4:b5:92:58:e9:2b:d2:11:ed:09:c0:e9:2a:a5:a2:
                    bc:04:a6:b7:f3:22:1f:09:b5:ef:42:39:7b:c9:2a:
                    23:31:30:f1:9b:5c:85:0a:d7:7e:0c:6c:cc:52:c2:
                    fd:d9:79:f2:69:f6:d5:56:72:19:c0:46:cb:b4:db:
                    7d:89:c7:c0:e2:6c:4b:ec:9b:f7:ba:99:83:b1:a7:
                    84:67:c8:7d:4d:4e:12:6a:b4:5b:26:ac:7c:a7:2e:
                    e5:8f:85:3e:0f:af:e4:96:ed:0d:40:1c:0b:4b:63:
                    7b:56:24:de:07:58:11:0d:df:16:36:77:63:1b:5c:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:8D:18:24:18:20:A8:D2:88:F5:EF:EB:8A:9F:C5:85:11:FF:D6
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3139302e3131332e3233312e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:ad:2b:b7:1b:ca:23:db:5f:b2:9a:57:d3:a5:61:de:b6:
         3d:8d:7a:d9:3e:08:76:28:a0:a4:ed:9b:20:31:c4:d5:cc:40:
         55:1b:b5:38:6f:50:83:c7:a3:89:39:6b:20:bf:f9:7a:d7:97:
         68:0a:84:0b:d3:7a:7f:a8:7a:22:ec:2b:3b:69:8f:1f:2d:5a:
         5b:e2:dd:7e:98:48:67:9c:91:f1:10:8b:0f:e8:07:69:95:90:
         a2:73:7b:61:35:2d:92:a6:58:11:a3:b1:d5:6e:e2:f4:5d:8b:
         23:56:ea:ea:47:e6:64:6d:27:43:f0:3c:c8:b7:5f:37:7e:55:
         eb:72:da:72:fe:fa:19:cf:c4:2c:a0:0a:8f:2e:d9:00:f3:a2:
         6f:48:86:bc:ef:80:eb:ee:56:03:90:28:e0:80:d2:8c:9d:aa:
         f8:ba:08:c1:75:a7:63:cd:cb:52:ef:68:90:91:49:47:83:40:
         16:cf:ec:e2:49:db:fe:fe:1f:16:59:cc:96:42:cf:97:b5:c9:
         14:71:40:34:91:8d:3a:e2:7b:b9:59:8f:9a:e2:1e:68:68:a2:
         a3:09:b5:7d:94:e3:92:a2:cd:d9:14:ac:85:b7:49:77:02:0e:
         69:1f:90:09:93:9d:86:7e:91:bd:90:ad:5b:ee:52:77:c7:21:
         3c:1d:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org