Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e34302e302f32322d3234203d3e20323635353430.roa
File:                     3139302e3132332e34302e302f32322d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          ZNgEkKfpxQE4UoW3UJBywGoela5Wo/1CHiLUMLKAlXg=
Subject key identifier:   A0:3B:52:24:30:EB:0C:84:AE:48:1A:D8:B6:17:78:10:BC:70:9E:EF
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       41A680A476962F8F8926C6A549E02DD6CB0AEBE9
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e34302e302f32322d3234203d3e20323635353430.roa
Signing time:             Tue 05 Mar 2024 18:01:28 +0000
ROA not before:           Tue 05 Mar 2024 17:56:28 +0000
ROA not after:            Tue 04 Mar 2025 18:01:28 +0000
asID:                     265540
IP address blocks:        190.123.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a6:80:a4:76:96:2f:8f:89:26:c6:a5:49:e0:2d:d6:cb:0a:eb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Mar  5 17:56:28 2024 GMT
            Not After : Mar  4 18:01:28 2025 GMT
        Subject: CN=A03B522430EB0C84AE481AD8B6177810BC709EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:b1:c3:12:70:78:1c:4b:51:71:37:25:53:
                    d3:9c:f1:fa:c5:84:ea:0f:f3:74:65:d8:2b:c7:ad:
                    c0:af:50:c4:8e:a9:94:63:fe:45:44:14:1d:f0:f9:
                    9d:33:89:a6:31:3d:87:18:57:f3:b4:e2:1f:d4:67:
                    f5:e4:b9:4c:fb:c5:16:9e:0e:50:29:6b:3a:1c:4b:
                    8a:de:d1:27:9e:87:d7:2b:5e:db:8b:84:fd:1f:cd:
                    8d:45:05:df:ab:ac:38:2d:12:0c:8e:85:11:1d:37:
                    82:08:64:de:d0:2f:83:ea:39:26:7e:5d:42:34:77:
                    78:f2:d3:fd:33:e9:18:95:b9:8f:e6:40:3e:26:82:
                    d8:be:49:03:cd:5a:b6:c8:be:f0:f9:14:0c:ac:46:
                    6b:81:22:8f:d0:ea:9d:bb:21:06:dc:1c:6c:86:ce:
                    93:cd:af:78:96:a4:31:e3:b5:de:79:63:51:b8:87:
                    17:62:1a:96:33:99:94:99:5c:cd:d4:dc:a7:58:f2:
                    73:15:84:df:b1:2c:60:dc:aa:62:c7:ab:26:c0:d5:
                    c6:4e:d9:72:7e:bf:a9:83:c3:20:4a:30:25:bb:f9:
                    d0:fd:ee:8a:bc:65:ec:e0:06:a9:38:d3:87:61:55:
                    c7:92:0a:cc:f7:ce:12:d2:e6:4f:fe:4f:c6:4a:c7:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3B:52:24:30:EB:0C:84:AE:48:1A:D8:B6:17:78:10:BC:70:9E:EF
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e34302e302f32322d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:68:7c:74:93:da:d1:13:b7:bf:f1:68:1e:7b:e5:53:4b:
         15:52:4f:ae:59:9f:7e:50:77:91:3e:f0:5a:f3:5e:36:2f:fb:
         44:b7:0c:ce:4f:94:c1:4a:52:5f:11:f7:df:62:94:c4:bc:3c:
         24:33:7b:d3:5a:f0:d2:a2:93:6c:32:21:76:4d:9c:e9:e2:34:
         c5:8f:de:64:d6:07:51:cc:96:7b:14:17:5f:c6:09:00:5f:08:
         0a:12:82:84:de:cc:60:94:c8:0e:6a:9e:67:52:a1:ff:59:9a:
         17:25:c8:64:00:f7:36:69:12:af:e9:2f:dd:ea:51:71:81:c9:
         11:bb:27:c1:0d:22:75:ab:30:27:df:68:a3:94:87:1c:95:05:
         0f:d9:97:fb:15:39:49:74:78:cc:b9:9c:df:98:b4:0f:12:4e:
         dd:85:24:df:86:14:aa:e4:25:17:0e:46:41:1c:87:62:34:52:
         29:22:37:c0:38:a7:ce:0c:d1:2f:2f:ef:4f:3f:3b:75:28:b7:
         15:f3:99:73:17:4c:8b:16:18:c5:1e:23:52:ee:cf:a4:71:88:
         57:7a:e5:6d:78:ea:10:8c:1f:08:b0:29:e5:b6:d5:7b:0c:e9:
         f1:d5:af:f9:45:a7:63:95:21:d0:6a:0f:e5:ae:a6:96:2f:e1:
         08:80:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org