Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/3139302e3132322e3231362e302f32312d3234203d3e20323633323233.roa
File:                     3139302e3132322e3231362e302f32312d3234203d3e20323633323233.roa (raw, json)
Hash identifier:          7ik0jl6BN/FOBPPHsRkb02imSxerMGdInFnyfE1bLVs=
Subject key identifier:   B8:13:B8:A3:7C:16:D1:51:68:A0:2F:67:1D:4A:D9:95:69:5B:CF:E3
Certificate issuer:       /CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
Certificate serial:       2B630E4962E167D3FB6E2F79F5A7F7032189E5C2
Authority key identifier: 38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/3139302e3132322e3231362e302f32312d3234203d3e20323633323233.roa
Signing time:             Tue 05 Mar 2024 17:53:47 +0000
ROA not before:           Tue 05 Mar 2024 17:48:47 +0000
ROA not after:            Tue 04 Mar 2025 17:53:47 +0000
asID:                     263223
IP address blocks:        190.122.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:63:0e:49:62:e1:67:d3:fb:6e:2f:79:f5:a7:f7:03:21:89:e5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
        Validity
            Not Before: Mar  5 17:48:47 2024 GMT
            Not After : Mar  4 17:53:47 2025 GMT
        Subject: CN=B813B8A37C16D15168A02F671D4AD995695BCFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:6f:07:90:83:20:fe:6c:37:15:6c:2a:74:
                    18:14:76:6f:26:19:23:c0:80:a1:5a:f1:35:fd:ca:
                    be:ee:8a:c5:d9:88:22:31:97:e5:d8:30:dd:75:5b:
                    84:04:07:e1:36:a1:aa:da:b9:55:27:2b:39:76:c9:
                    a9:8f:75:cd:4f:d1:47:2d:a6:e0:b9:74:55:fa:a1:
                    21:5d:ea:a7:f1:d0:27:c6:32:02:7f:53:14:39:cc:
                    11:be:13:cd:5f:89:82:9d:ed:e1:aa:07:d8:6b:86:
                    4d:f7:fd:16:f1:39:fd:8d:22:c1:e6:88:45:32:73:
                    5e:8b:7e:e8:30:e6:f8:fc:39:bd:dd:3a:76:03:8e:
                    c0:82:e7:66:03:49:b1:7c:21:79:f5:57:89:1e:c7:
                    25:cd:f3:f3:c8:64:d4:35:f7:17:d6:b2:03:e6:e9:
                    b9:af:83:23:60:5d:1d:32:ce:b5:37:6f:ac:27:24:
                    47:18:39:fd:4e:6b:37:e9:ed:6a:bf:1f:18:1d:07:
                    ac:f9:9e:51:7b:aa:2d:55:38:28:d9:0c:57:db:3c:
                    c3:7d:c8:58:4f:c7:40:9e:d1:96:39:45:b6:43:93:
                    92:a7:20:bf:39:20:33:5b:b1:f0:aa:b8:44:07:9e:
                    c2:a8:81:cf:9f:2d:24:aa:b3:b9:6c:ff:41:16:6c:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:13:B8:A3:7C:16:D1:51:68:A0:2F:67:1D:4A:D9:95:69:5B:CF:E3
            X509v3 Authority Key Identifier:
                keyid:38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/3139302e3132322e3231362e302f32312d3234203d3e20323633323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:df:66:47:9f:5a:8d:97:5a:8d:03:8e:02:7c:62:dc:0a:a2:
         7f:e8:b0:fb:e3:e5:5d:80:9c:70:0e:c2:31:f1:5f:f2:48:25:
         d5:b4:09:2e:e7:2e:07:14:46:a7:3c:a3:8c:de:9c:10:5a:97:
         89:95:c2:2b:c2:a7:41:e3:d3:1c:21:d1:12:6b:94:2f:5e:76:
         f8:ff:e0:08:95:70:ee:94:c5:21:47:eb:5b:1f:df:44:d3:a0:
         a5:41:09:04:32:2f:c3:2b:ef:36:d9:ab:c6:10:f8:e1:53:8e:
         de:2b:b2:a2:02:91:cd:4d:8c:76:1d:dc:b4:9e:1f:fc:a7:7f:
         cf:fd:63:ec:62:52:0a:95:58:5d:02:6c:19:bd:21:bc:b3:63:
         11:59:11:fb:d3:c4:65:8e:4a:c1:99:6a:e1:9a:7c:cf:61:d7:
         b1:2a:1d:19:08:7b:f9:62:28:2f:d3:ae:bc:f3:c1:23:51:5b:
         ab:7a:b5:94:65:f8:e5:2e:0c:58:0f:0c:3e:ab:e7:01:f5:58:
         22:20:50:2a:88:0a:ad:37:2d:b7:97:bb:5d:09:21:a0:23:72:
         38:94:e1:48:69:eb:9f:49:5e:d2:63:47:21:ca:e9:53:c1:4c:
         75:34:84:04:70:5a:47:38:2a:55:28:6b:6f:a8:ee:74:84:67:
         81:11:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:49 2024 by rpki-client on console-ams.rpki-client.org