Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32342d3234203d3e203238303439.roa
File:                     3139302e3132312e3139322e302f32342d3234203d3e203238303439.roa (raw, json)
Hash identifier:          smzP5vp01an189CbsYcmHPurlyA6aVCcdhDAfsljKqs=
Subject key identifier:   6D:C7:17:69:11:DF:C6:4F:14:E7:8C:63:46:E6:DC:75:03:2D:8A:E1
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       211276F0EE8781D852195EBB0FB9240E62D5D5BC
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32342d3234203d3e203238303439.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     28049
IP address blocks:        190.121.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:76:f0:ee:87:81:d8:52:19:5e:bb:0f:b9:24:0e:62:d5:d5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=6DC7176911DFC64F14E78C6346E6DC75032D8AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:42:13:65:67:01:97:cf:4e:41:ed:b2:b0:
                    6e:ae:d1:00:8e:49:7e:e4:68:14:68:ee:50:0c:7c:
                    d2:35:f6:6b:24:77:f1:35:31:dc:33:dd:9d:4b:2f:
                    4e:b0:98:c2:8c:6d:be:b8:9b:8c:1e:6c:64:22:8c:
                    b2:8e:d4:90:d8:84:1f:7a:79:a8:55:bf:6a:09:83:
                    95:d5:12:40:18:1a:8c:e2:2f:bc:0f:20:e3:8c:3d:
                    29:0e:71:2b:54:9b:a7:9c:d6:41:47:5c:06:4c:6b:
                    2b:8f:b7:b4:09:cc:f1:d4:b1:14:6d:67:45:e1:09:
                    0f:72:93:bb:70:b0:9b:c9:77:ad:15:92:03:c8:35:
                    04:06:0e:a3:91:d9:cd:63:be:42:93:e7:b6:70:0d:
                    1c:2d:10:a7:e0:a4:df:dd:fb:86:a5:5c:fc:aa:24:
                    d0:7e:06:96:73:06:c2:cb:8b:af:93:27:b1:c9:93:
                    99:2c:2d:29:eb:4d:96:df:c9:4a:ee:74:c1:a4:94:
                    bd:f4:3a:77:aa:65:c0:fa:31:9a:a1:18:f2:28:a1:
                    93:da:3c:3a:7a:d2:35:98:e8:0b:a9:84:32:b6:4f:
                    3f:91:c6:85:a5:61:8b:b4:ae:f8:5e:6e:50:6d:bf:
                    75:aa:db:e1:f8:99:75:78:18:3b:5e:88:4b:79:b3:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C7:17:69:11:DF:C6:4F:14:E7:8C:63:46:E6:DC:75:03:2D:8A:E1
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3139322e302f32342d3234203d3e203238303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:0b:30:a3:ed:ca:48:35:66:27:61:75:82:80:85:c7:9e:
         35:cb:fd:ea:30:2f:f2:34:55:fa:15:11:0c:a1:54:7d:9c:61:
         ce:51:68:18:1f:42:a3:f5:ba:49:d4:06:79:30:c9:ea:80:b8:
         b6:0c:e3:0f:df:a1:d1:9b:5a:2a:cd:35:5e:6a:ac:98:4b:09:
         a3:b4:da:07:93:38:2f:9e:23:39:f1:d3:d7:e4:de:7d:b8:cf:
         f1:ae:6a:ff:5f:56:37:73:1a:eb:93:bb:44:d1:62:c5:4d:e3:
         b9:38:3e:0a:65:eb:ba:1c:e9:24:cc:3a:cd:8a:95:44:04:fd:
         a4:ad:73:f1:42:54:7d:92:3e:71:0e:53:be:be:a9:e1:dc:ea:
         8c:cf:1b:53:64:a6:31:ac:2f:77:66:a1:bc:56:b7:64:56:ef:
         35:30:f1:be:ac:6e:26:cb:f5:ba:bf:97:d9:69:91:7a:b6:92:
         e9:f1:44:20:f7:92:1e:03:19:43:4d:d6:14:1e:88:5f:31:14:
         29:03:98:d8:5f:ab:69:63:e1:96:84:05:b6:82:3e:6f:01:2d:
         c5:7d:2a:22:fa:ca:a7:c3:f1:7d:1d:fc:a6:17:88:8a:15:4e:
         be:c3:ac:f1:ea:36:a8:e2:d0:c6:b7:fd:3c:0c:b5:5c:0f:4e:
         97:12:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org