Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa
File:                     3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa (raw, json)
Hash identifier:          Od19Jge/OsoHi12PHekyCPkFxEQEpsy2DXxTaxd/Er8=
Subject key identifier:   0A:53:AF:9F:43:F1:9A:EA:CD:8E:2A:7D:C8:84:79:F9:F3:C0:88:E3
Certificate issuer:       /CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
Certificate serial:       26037C2281E65A7717B6FC507052E261E9A188D3
Authority key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     272818
IP address blocks:        190.121.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:7c:22:81:e6:5a:77:17:b6:fc:50:70:52:e2:61:e9:a1:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=0A53AF9F43F19AEACD8E2A7DC88479F9F3C088E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:85:49:76:4e:fa:eb:c6:6c:ec:0d:05:ed:
                    d2:f1:90:ce:6b:1b:35:2e:3e:a3:4d:30:e8:a9:f7:
                    75:8f:b5:fa:4b:0e:84:72:3d:14:d7:ea:7d:43:52:
                    37:c7:82:0b:76:f2:59:16:ce:9d:74:0c:87:c1:76:
                    41:ac:6a:16:ac:0e:72:50:ea:67:ec:6d:40:1b:34:
                    a8:10:81:a9:81:21:64:b8:cd:1e:2f:8e:c7:1e:43:
                    5c:a1:33:c1:7f:5f:bb:cf:3a:35:f4:4b:6c:e0:cc:
                    4c:11:94:4f:92:98:b7:9c:e6:7f:e2:5a:01:ff:fb:
                    f5:95:e6:78:79:92:dd:7a:ed:9a:d2:03:18:76:b0:
                    ca:05:ed:e8:11:2b:70:9b:df:c6:23:a0:0c:7f:95:
                    43:ee:e8:0d:14:b8:7a:b6:a3:86:04:e6:6e:af:bc:
                    38:07:61:70:e8:ab:9e:c5:4c:e1:f0:21:0d:a9:ba:
                    79:fb:f7:5e:73:37:25:29:49:0d:83:e0:34:51:c4:
                    9a:66:81:d7:39:ed:f9:2f:ec:22:77:76:ac:65:55:
                    e1:28:d3:64:a1:76:2f:f5:ec:1b:56:6f:36:19:60:
                    47:92:d3:53:9d:70:4d:f0:31:02:40:e1:75:75:66:
                    35:4d:d5:f0:02:6e:48:cc:75:cb:8e:b0:05:81:c4:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:53:AF:9F:43:F1:9A:EA:CD:8E:2A:7D:C8:84:79:F9:F3:C0:88:E3
            X509v3 Authority Key Identifier:
                keyid:B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/3139302e3132312e3230372e302f32342d3234203d3e20323732383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:ff:de:70:27:79:04:55:9e:bc:e8:19:e6:72:9a:76:94:
         c1:f4:2f:55:c7:54:d8:67:e9:ed:13:33:c2:ac:d3:38:38:f1:
         b9:cd:1b:8b:2f:d2:04:67:8f:ed:a8:70:8e:2f:7f:52:52:4d:
         d9:ba:d4:c6:83:6d:cc:cc:90:61:56:bb:94:37:91:fa:53:c2:
         27:8a:2b:0a:af:02:df:ce:d2:fc:38:ce:8b:36:e2:b5:bb:b7:
         95:5d:92:fe:86:60:ef:0c:32:cc:b7:53:8a:46:4d:99:86:15:
         97:1d:65:f8:f5:30:1c:b7:b2:99:a7:86:4e:34:fb:05:a2:57:
         7a:c5:f4:61:1c:de:e0:f2:87:f5:65:24:e2:2e:9f:4f:a2:db:
         42:b2:ef:20:e6:ac:58:58:40:17:c2:f6:2f:6c:a5:ce:d9:a0:
         74:77:39:4c:74:7a:a5:78:e6:6a:61:ae:81:c2:d4:b0:63:58:
         ee:c9:29:94:66:70:6a:f2:84:c1:47:59:4d:89:75:ee:ab:54:
         30:cd:ae:80:43:0e:8b:0f:4c:a0:58:f5:d8:5a:f5:b7:51:54:
         eb:25:6a:07:a0:9a:ac:6c:d9:a4:df:e1:fb:cf:dc:a0:73:73:
         36:3d:51:60:11:35:7f:bc:fa:30:30:64:94:27:c2:f6:f2:71:
         66:95:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:46:23 2024 by rpki-client on console-fra.rpki-client.org