Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34322e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e34322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          KPpwPqfJZMun2OxbcHlui048f1aUc/k35ioR9VpZnvo=
Subject key identifier:   03:E8:AD:54:A6:35:51:D9:53:DE:BD:6D:50:BE:42:C9:EB:BF:03:58
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       2F178FC2A3A4F17E34F6FE55116A2239ED3BB583
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34322e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:17 +0000
ROA not before:           Mon 27 May 2024 19:45:17 +0000
ROA not after:            Mon 26 May 2025 19:50:17 +0000
asID:                     22313
IP address blocks:        190.103.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:17:8f:c2:a3:a4:f1:7e:34:f6:fe:55:11:6a:22:39:ed:3b:b5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:17 2024 GMT
            Not After : May 26 19:50:17 2025 GMT
        Subject: CN=03E8AD54A63551D953DEBD6D50BE42C9EBBF0358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:1e:ca:aa:77:b0:53:35:80:ec:bf:95:dc:
                    24:0b:6f:80:12:b6:09:c2:9b:3f:16:8f:d8:bc:70:
                    88:ee:07:ac:46:d6:e2:c0:de:eb:52:d1:62:14:5f:
                    aa:2e:73:b0:ec:72:a3:b9:0f:92:39:10:b7:91:d6:
                    a0:44:68:67:c2:2c:ae:ab:24:6f:68:f0:7d:04:d2:
                    95:dc:94:7e:c8:0a:22:0d:f9:b8:04:a3:71:f4:48:
                    5b:0c:1f:4f:01:67:80:0e:18:91:05:b2:c3:7e:45:
                    17:c9:8d:4c:9f:ff:5c:62:ca:58:bd:cd:ad:a0:3a:
                    a3:31:5b:bf:24:01:b7:9f:dc:49:0b:eb:9d:8e:79:
                    dd:23:e2:5d:8a:85:9d:c5:09:07:db:a1:24:b0:5c:
                    f9:a8:1b:62:47:b5:51:4d:f0:69:5d:3e:7c:95:01:
                    23:2d:41:30:04:62:a0:ed:22:7b:55:06:59:f9:73:
                    f3:9b:ab:7d:6e:b2:b7:ea:69:6c:c7:f9:1d:7f:ec:
                    ae:09:50:13:bb:fb:8d:24:e7:bc:17:b4:f4:29:86:
                    7c:d6:4a:35:de:31:4a:48:bd:61:86:1a:1c:1f:46:
                    51:8d:1b:a5:f8:21:a3:3e:77:7c:ab:5a:a1:78:5c:
                    d2:76:77:f8:c6:b4:21:f5:81:45:ba:16:53:7c:bc:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:AD:54:A6:35:51:D9:53:DE:BD:6D:50:BE:42:C9:EB:BF:03:58
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:14:9a:fd:b4:2c:d1:7f:ff:c7:4c:de:20:cb:67:cf:67:69:
         1e:79:39:74:1b:6c:88:00:9e:db:a7:28:94:ad:be:7c:b4:19:
         64:45:29:40:b8:9b:e4:8e:9e:cf:d0:9f:53:06:89:94:1f:1d:
         27:d0:ba:43:16:7a:3a:ee:78:ce:d7:15:51:97:06:56:2c:36:
         ce:73:1f:fa:54:af:29:36:e0:b6:d7:ad:90:6a:40:54:22:c1:
         8f:82:6d:57:7e:25:63:5d:78:27:cc:e6:ca:34:19:a8:95:ed:
         83:9a:b0:8b:23:c5:d3:1a:52:cb:a6:35:56:ae:ee:8b:2b:6f:
         ea:a6:c6:55:b1:eb:a7:43:a6:a2:af:35:79:ca:a8:50:1b:56:
         f0:0b:95:09:70:71:62:b3:9d:a6:df:9d:9e:71:9b:24:a3:e4:
         51:86:fb:ba:5a:48:ee:2a:8b:08:b6:e7:36:4f:1d:bb:98:ab:
         db:15:a3:41:ce:a7:10:1c:a7:38:f1:a7:d8:30:22:15:50:b8:
         8a:98:00:d4:ee:fc:b0:fb:69:d9:75:b9:83:e3:29:4c:63:c5:
         c1:68:66:77:4e:24:74:cc:30:34:20:28:91:6c:99:99:6d:cb:
         45:fb:46:18:cc:ce:0e:e8:1d:de:06:9e:a9:a4:14:53:1d:16:
         e5:16:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org