Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3139302e3130332e3137362e302f32322d3234203d3e20323633383132.roa
File:                     3139302e3130332e3137362e302f32322d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          gaXB9N+qJPcLX4PIy+bRHwv3mgM1upK4SYO4bse70SM=
Subject key identifier:   16:D8:D6:68:B4:FE:2B:45:F0:0B:C3:2E:E1:8E:E1:DF:3D:3C:92:C7
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       7A87E27D3AA0B5EC2B0F9262518E1A73751AB888
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3139302e3130332e3137362e302f32322d3234203d3e20323633383132.roa
Signing time:             Tue 05 Mar 2024 18:02:25 +0000
ROA not before:           Tue 05 Mar 2024 17:57:25 +0000
ROA not after:            Tue 04 Mar 2025 18:02:25 +0000
asID:                     263812
IP address blocks:        190.103.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:87:e2:7d:3a:a0:b5:ec:2b:0f:92:62:51:8e:1a:73:75:1a:b8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:25 2024 GMT
            Not After : Mar  4 18:02:25 2025 GMT
        Subject: CN=16D8D668B4FE2B45F00BC32EE18EE1DF3D3C92C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:e1:a9:a6:cc:73:dd:2a:50:ac:99:dd:c6:
                    46:b9:6c:cf:70:a4:8d:73:52:43:22:d2:e9:8a:36:
                    b9:87:5d:36:52:5a:bd:dd:bf:86:ae:86:a9:85:d9:
                    6d:ad:38:94:4d:dc:ab:1b:75:94:d3:6f:f4:70:36:
                    3d:76:11:85:d7:98:4e:12:fe:83:e5:96:6e:1e:19:
                    15:ce:2b:54:c6:9a:c9:f6:02:44:6c:86:af:c8:71:
                    81:dc:e4:45:26:ea:69:86:e7:2d:b9:21:d5:85:32:
                    7e:da:f8:f5:bc:f2:a6:a4:22:97:67:7e:2f:83:42:
                    ba:d0:8a:b3:72:c4:b2:63:80:73:19:be:06:d3:2a:
                    c2:aa:67:1a:66:52:43:79:36:92:9d:1d:48:8c:2a:
                    fc:bf:3d:1a:3f:0f:40:f7:60:51:eb:ab:a6:88:a9:
                    32:e5:ac:79:df:bb:dd:31:40:a8:b1:82:2c:e7:84:
                    67:e4:5c:56:1c:24:28:38:93:e2:38:8d:41:a9:32:
                    52:76:81:41:ad:1b:7c:91:5a:bd:79:38:11:ee:14:
                    2c:c7:76:20:cc:11:90:9b:c9:e3:16:77:51:d2:1b:
                    0e:3a:d0:73:9a:cc:96:a4:0e:c4:02:e5:09:61:e1:
                    36:69:a1:c2:21:b4:71:3b:d5:c0:80:67:f9:58:82:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:D6:68:B4:FE:2B:45:F0:0B:C3:2E:E1:8E:E1:DF:3D:3C:92:C7
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3139302e3130332e3137362e302f32322d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:27:51:13:e6:f9:39:ec:fa:1d:ff:b4:dd:1c:3d:44:81:
         71:83:a5:ad:d3:f2:99:3f:77:9c:ba:8a:f0:19:ba:5b:0c:98:
         b8:62:62:7e:92:0c:19:14:51:b7:48:c9:12:bd:e8:cc:c7:b9:
         82:f8:44:06:4d:a0:94:0f:16:28:b8:05:2f:39:28:cb:9a:fa:
         d1:20:15:8d:93:ce:68:95:55:57:eb:77:5d:56:3f:6b:d0:a6:
         b5:56:ae:29:bc:5b:f9:74:3b:2f:ee:1d:f7:b1:b6:7a:d0:12:
         17:8e:6e:f5:7b:dd:5e:43:ce:40:14:b4:af:d6:ec:c3:bd:0b:
         1a:82:73:bf:62:84:bb:6d:46:1d:19:4e:7d:3f:be:b7:87:52:
         1e:ad:96:d1:17:cd:b4:76:28:2e:67:ec:30:0a:10:72:9c:18:
         2e:26:fc:bb:54:7c:87:41:22:7d:69:7c:4c:98:a7:f4:19:9d:
         f5:10:57:ce:26:6a:96:44:ab:61:6b:96:39:37:65:47:43:80:
         bd:e6:05:8c:26:6d:9f:9d:23:a8:8a:a9:1f:b8:72:2a:fe:5b:
         51:f3:62:df:af:ed:d5:20:c4:17:57:ce:00:dd:ba:ab:8d:7d:
         be:5f:12:51:73:c0:1d:60:99:25:12:25:ba:1b:92:92:6b:d5:
         fe:f0:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:18 2024 by rpki-client on console-ams.rpki-client.org