Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33392e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e33392e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          nb3+PI86uS8Uce2ri+Q6i7JXMfpe9Jpjpq40NHZ0XYc=
Subject key identifier:   22:6A:E4:F4:98:7D:DC:27:FE:AE:8E:BD:8F:6E:8E:05:C2:B1:D1:E3
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4BA737B977F210A40CEBF78B9A455819788B301A
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33392e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:09 +0000
ROA not before:           Mon 27 May 2024 19:45:09 +0000
ROA not after:            Mon 26 May 2025 19:50:09 +0000
asID:                     22313
IP address blocks:        190.103.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a7:37:b9:77:f2:10:a4:0c:eb:f7:8b:9a:45:58:19:78:8b:30:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:09 2024 GMT
            Not After : May 26 19:50:09 2025 GMT
        Subject: CN=226AE4F4987DDC27FEAE8EBD8F6E8E05C2B1D1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:a0:87:8a:30:0a:aa:1c:30:a8:0e:ae:99:
                    c1:d8:d5:f1:cc:7b:99:47:98:16:a1:cb:5e:f1:24:
                    60:39:ed:c5:85:7c:66:7a:7f:e4:f0:5f:67:a6:28:
                    fd:1b:5e:38:97:cb:3e:6a:e3:4d:d5:77:5a:57:c4:
                    c9:f7:d6:0d:21:01:3b:71:d7:8a:4f:9e:83:8b:72:
                    fd:08:b8:67:0a:af:df:6c:06:d4:98:27:69:0e:76:
                    32:c1:1a:50:0a:7c:06:3c:04:d6:4d:08:42:cd:90:
                    b6:cf:a1:3f:b4:06:52:d6:60:bb:7b:4e:66:0f:f3:
                    b9:35:52:d2:52:a2:de:28:26:b8:5b:ca:9d:11:3d:
                    c6:d3:e7:97:ed:15:cc:7e:f5:d1:93:1e:2c:08:75:
                    f8:05:dc:8c:0f:51:93:6c:1f:24:89:38:6d:4e:8a:
                    6d:d1:b3:82:d0:10:88:98:2b:cd:f4:ee:de:1d:26:
                    1e:78:f2:e9:03:07:35:7a:6e:4a:81:aa:8a:77:ff:
                    7f:e4:df:5d:3b:65:eb:ce:62:74:10:87:df:65:00:
                    f9:a8:98:df:88:e1:a2:b1:3a:3b:0a:f5:66:86:7b:
                    16:e0:09:bb:66:34:6b:19:18:ee:84:e3:8c:2a:d0:
                    48:34:4c:3d:87:e5:95:be:09:ef:1e:87:d8:f8:9c:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6A:E4:F4:98:7D:DC:27:FE:AE:8E:BD:8F:6E:8E:05:C2:B1:D1:E3
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e33392e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:b2:24:06:db:8a:d0:05:19:bd:3a:0d:61:c0:ca:8d:f1:
         7e:f9:a5:85:71:ba:bd:14:01:8f:73:5c:3c:74:0e:57:03:9a:
         6a:32:34:1c:82:4c:23:b5:ee:fe:78:cc:3e:13:eb:39:c1:ac:
         98:d8:39:30:03:23:df:72:c4:3f:a3:fa:3c:94:ae:fa:e3:1a:
         6b:d1:77:d7:58:66:96:e5:b4:ba:ba:2d:a1:71:f4:9f:cc:de:
         76:0e:f4:c3:e0:9c:d6:18:aa:6c:7a:70:7a:e2:14:f8:dd:40:
         2f:d1:bc:e2:01:7e:ab:3d:ee:87:9a:8a:8b:a3:ee:11:51:3d:
         1f:4c:94:a5:25:33:2f:c7:cf:98:8f:c2:69:b0:76:1f:a7:28:
         f0:2f:7f:8a:7d:13:c6:21:30:57:91:77:b0:bb:c8:7d:32:90:
         04:70:39:80:f8:ac:cd:b4:b7:7a:0d:32:2b:af:4c:2d:b5:21:
         43:97:14:23:bc:93:ab:97:8b:59:07:52:0a:fb:e5:cf:77:b9:
         35:62:cb:9d:5f:76:62:8c:8f:84:ad:ea:f1:9a:66:62:d2:67:
         65:71:6b:06:a1:00:1a:5d:4f:d1:ef:d1:a5:15:3b:f3:73:d0:
         07:bc:6f:00:d0:1c:9f:67:f8:a6:54:8b:9f:af:8b:7e:5f:12:
         04:a8:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:45 2024 by rpki-client on console-fra.rpki-client.org