Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa
File:                     3139322e3139302e33302e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          CbG0FaToLT417J1tFZXa+MI8Ck1iEbCTUzyz0T80vjI=
Subject key identifier:   29:0C:1F:D3:0C:98:EE:B2:34:A4:16:3E:A6:A8:10:4E:84:A1:BA:70
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3FF4F089DCAD796D109D2B5894695FD3650E17D7
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:38 +0000
ROA not before:           Tue 05 Mar 2024 17:49:38 +0000
ROA not after:            Tue 04 Mar 2025 17:54:38 +0000
asID:                     11172
IP address blocks:        192.190.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f4:f0:89:dc:ad:79:6d:10:9d:2b:58:94:69:5f:d3:65:0e:17:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:38 2024 GMT
            Not After : Mar  4 17:54:38 2025 GMT
        Subject: CN=290C1FD30C98EEB234A4163EA6A8104E84A1BA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:72:ca:45:67:03:2f:a0:41:8d:06:76:38:
                    4e:4a:ae:33:ed:84:49:2d:9d:43:ca:cb:5d:aa:5b:
                    f7:d6:e0:c7:f7:d7:8f:00:48:6e:04:1c:c5:09:56:
                    ca:74:70:4f:78:74:b0:53:ba:ec:a4:d6:c6:d7:90:
                    b3:7a:e3:29:8d:22:e8:c7:73:e6:66:29:29:1b:4f:
                    96:54:67:f4:e1:74:0f:b5:71:f6:e7:dd:5b:c3:c4:
                    6b:69:e5:b9:cb:4d:57:ca:5a:06:36:50:d5:f7:57:
                    24:2d:af:4a:63:b9:d4:42:ab:e3:93:ee:e7:08:80:
                    aa:8f:50:23:c1:b7:f5:14:51:9f:a2:ea:ae:cc:33:
                    c4:f1:45:87:4c:a8:6d:ce:1e:d2:d6:76:8e:a6:1b:
                    c9:51:45:ab:b3:07:22:e6:06:26:87:ef:d0:4a:22:
                    f3:8b:3e:f9:9a:71:55:96:9d:f4:a9:d0:6f:0f:6a:
                    3d:2c:69:4e:97:55:e2:95:79:76:98:3f:02:ed:2d:
                    75:c0:9d:8c:c2:ab:9c:7e:37:68:c5:e9:d1:eb:42:
                    50:bd:61:aa:40:55:a9:14:d0:c2:29:bd:1c:5c:0c:
                    b3:d8:8d:a9:d9:b5:cb:d9:91:5d:4b:21:5d:01:d3:
                    fb:be:a0:b3:a8:28:91:b7:bf:c9:8f:9b:64:b4:ea:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0C:1F:D3:0C:98:EE:B2:34:A4:16:3E:A6:A8:10:4E:84:A1:BA:70
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:aa:82:ea:6d:b3:28:69:3b:a4:bc:c3:0e:b7:48:13:cb:c3:
         1e:b3:dc:2c:9b:b7:90:17:05:47:18:7f:82:43:80:f7:de:ad:
         47:d8:1b:e8:8a:59:bc:20:2e:3f:f6:a7:9d:83:a4:a1:0f:8d:
         3b:5c:c9:ab:f0:a9:4a:b8:51:b3:b1:66:07:70:11:50:9e:e6:
         ec:c2:a4:6f:d9:2b:57:20:a4:83:69:98:1b:e3:1a:de:35:0c:
         05:e2:43:e0:0f:48:05:d9:9b:60:fa:d1:6e:7a:a6:14:51:0c:
         d8:b9:e3:28:6b:2e:64:bf:ed:15:45:10:d2:a6:1b:37:f9:b2:
         86:e2:d2:52:0e:0f:71:45:60:c2:ea:82:2c:6e:d1:ff:06:30:
         90:f6:5d:91:e2:c4:f8:6f:2f:a0:26:50:04:86:68:1c:12:37:
         68:9b:68:8e:de:1e:85:81:4e:3c:70:bb:2e:dd:4c:ea:9e:11:
         03:b8:cc:29:36:2f:b4:20:e6:6c:c1:7e:c0:79:e2:ac:cc:33:
         98:63:a7:8d:36:b9:24:ec:19:33:ba:12:cc:1c:3d:71:9f:4c:
         ac:81:99:be:d3:85:d0:93:c2:24:e0:07:b1:ed:7f:c2:85:24:
         53:95:d1:f9:a4:80:31:c8:cb:02:80:29:d4:82:d5:ed:98:f2:
         80:38:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org