Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa
File:                     3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          /CJ9ZDWXnwWCHvxyx+f06WxRTLsyF5cip2NfSVZUCNk=
Subject key identifier:   D0:66:BF:A1:B1:29:2C:EB:0B:57:F9:64:0E:96:63:48:66:9C:F8:BE
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       0A837468796BE854A471F0C1E28131C5805E059C
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:54:35 +0000
ROA not before:           Tue 05 Mar 2024 17:49:35 +0000
ROA not after:            Tue 04 Mar 2025 17:54:35 +0000
asID:                     265615
IP address blocks:        189.206.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:83:74:68:79:6b:e8:54:a4:71:f0:c1:e2:81:31:c5:80:5e:05:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:35 2024 GMT
            Not After : Mar  4 17:54:35 2025 GMT
        Subject: CN=D066BFA1B1292CEB0B57F9640E966348669CF8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:11:4d:cb:7f:28:cf:26:58:2f:68:ee:d4:
                    2f:b8:13:04:9f:e8:72:c1:1b:3a:fa:36:95:19:98:
                    9b:92:17:97:1c:bd:d6:be:b9:1b:71:c7:91:08:18:
                    d0:bb:67:12:48:47:a9:66:84:6e:fc:0c:bd:19:d5:
                    f1:89:2e:51:d3:01:be:99:c7:71:86:ae:c6:c7:7b:
                    e7:b6:b0:eb:0b:2c:8e:03:d1:9d:2c:77:21:6f:e3:
                    97:24:cf:b4:49:e1:9c:66:f2:f8:54:b9:9e:fc:ea:
                    4b:64:65:f7:ac:3e:be:d2:82:e6:51:d8:e3:ba:c6:
                    d5:ba:1f:3f:e2:bf:ee:bf:e0:b1:cb:b8:2f:4a:c0:
                    ff:3c:e9:c5:d1:e8:34:a7:3b:1a:3b:b0:c7:56:05:
                    bc:4e:99:ea:e3:3d:3a:50:4a:e1:e4:57:8d:fc:8c:
                    30:16:8a:e0:b6:27:a2:eb:ac:e0:b4:9c:00:cf:85:
                    ad:09:c7:bf:01:07:b0:9b:22:7a:6f:03:1a:00:25:
                    ff:91:07:81:a9:67:28:ca:6b:94:b7:46:e0:0c:ad:
                    80:5e:0b:20:76:21:a0:3b:bc:65:17:1f:75:fe:98:
                    61:ef:21:43:2c:42:a9:5f:8d:40:85:b4:90:07:52:
                    f4:b0:f3:01:84:f2:4a:69:4d:70:43:af:e4:71:23:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:66:BF:A1:B1:29:2C:EB:0B:57:F9:64:0E:96:63:48:66:9C:F8:BE
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.206.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:b1:58:29:db:43:df:6d:1f:4e:d5:43:bb:ef:88:d9:32:
         f0:35:80:6d:56:a4:e1:6c:09:ab:e8:b0:9c:bd:5d:58:4f:45:
         2c:75:a8:58:78:d6:63:66:54:f8:66:46:f1:c1:f6:0a:d8:e6:
         45:da:b9:53:de:9b:70:ef:0e:9f:22:4f:3a:e5:68:29:ee:38:
         d3:41:0f:a1:a2:52:c7:3c:05:52:14:01:01:4f:38:83:bd:24:
         0e:6a:49:85:d6:f5:00:0a:01:5d:e0:0a:6e:dc:d7:44:30:fd:
         6b:51:ae:3e:b5:7d:6a:59:0b:f0:d0:0d:21:73:05:04:3f:c7:
         13:16:55:f4:90:0c:05:9a:da:18:ec:c5:9f:13:46:34:ee:e1:
         2e:47:cd:3f:a6:92:75:b9:c1:b1:fe:25:22:3a:5d:55:e7:c9:
         a4:1d:29:3a:ac:00:29:11:bd:a1:9a:74:6e:43:3b:75:ca:9d:
         92:94:92:68:04:9a:4a:cc:65:28:67:f6:16:25:28:53:d8:76:
         c1:d1:34:87:6b:72:7c:5d:78:9b:5c:34:2e:9c:c9:e4:a3:0f:
         57:16:66:ba:0a:9a:96:da:22:75:a8:aa:99:99:bb:e4:70:99:
         65:28:f7:1a:9e:7c:53:45:e7:f2:38:7a:d3:88:ed:91:de:68:
         c0:fd:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org