Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34392e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e34392e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          hBrB2vFrr31KrpHOy3Q28nW9qvWPhejqnxlcjyLwXiE=
Subject key identifier:   EA:57:D5:25:B1:BD:01:48:F9:C3:7A:B5:97:5B:F2:44:01:44:9D:AB
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       0136557253FC1A09BE30CDB5E4573BC328C0E599
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34392e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:09 +0000
ROA not before:           Mon 27 May 2024 19:45:09 +0000
ROA not after:            Mon 26 May 2025 19:50:09 +0000
asID:                     22313
IP address blocks:        190.103.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:36:55:72:53:fc:1a:09:be:30:cd:b5:e4:57:3b:c3:28:c0:e5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:09 2024 GMT
            Not After : May 26 19:50:09 2025 GMT
        Subject: CN=EA57D525B1BD0148F9C37AB5975BF24401449DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:82:59:14:b3:47:af:d0:81:28:68:48:4c:
                    e1:ee:73:92:a3:11:d0:43:1f:f1:b5:b1:71:a7:68:
                    57:24:0f:c6:6d:77:eb:ab:0c:17:df:69:03:0e:2b:
                    76:31:24:9c:b2:bf:d6:f8:8a:21:a1:1b:21:3a:9a:
                    83:b2:32:30:95:23:cd:20:22:ad:77:b0:f5:aa:a2:
                    e7:05:e8:4e:0b:68:54:51:0b:53:31:78:81:91:f0:
                    10:60:97:b5:f9:33:4a:65:29:46:f6:2b:55:a8:16:
                    44:47:0e:4f:71:d4:6c:e8:32:17:6e:61:d4:d4:fe:
                    a2:47:97:8c:13:71:94:34:b3:b7:29:71:45:60:2b:
                    77:76:fa:80:93:35:a9:78:2d:6f:48:b9:71:19:ba:
                    77:3a:0a:77:52:61:57:e8:54:3a:07:d6:b8:0e:34:
                    a4:53:0d:34:54:c0:f4:9f:01:6c:e3:1e:81:f8:78:
                    34:c5:4c:3b:4a:c2:99:43:89:c0:14:11:7e:9c:f2:
                    58:8b:ea:98:38:ed:cf:72:87:39:cc:20:05:d5:d2:
                    fa:ea:53:e6:01:58:bb:31:0b:7d:c0:eb:39:46:b4:
                    a7:fe:88:75:90:e0:fa:71:7f:4a:78:d0:24:60:d6:
                    57:9e:43:1c:b9:50:5c:31:40:e9:f8:c7:15:7d:d8:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:D5:25:B1:BD:01:48:F9:C3:7A:B5:97:5B:F2:44:01:44:9D:AB
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e34392e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:be:3e:93:69:f1:99:07:49:29:44:90:6a:bd:98:d8:33:e8:
         4d:f6:91:11:5c:d3:0b:41:11:fa:9e:c0:49:b6:c3:fe:81:8c:
         e3:6e:d1:96:ac:f1:e5:9d:ae:f9:1c:4e:42:0b:32:a5:d9:22:
         54:e4:e2:bb:78:90:a6:61:b8:c8:50:3f:13:23:dd:7d:21:a1:
         13:c0:fd:23:b3:ac:1b:2f:c7:b5:62:cc:c8:1f:0c:70:3d:e4:
         b2:6b:07:6f:3f:36:be:6c:c7:06:ff:ef:94:a1:ba:8b:f8:25:
         6f:0d:25:60:0f:d2:52:d0:f8:67:b5:a2:1e:54:2d:2d:a5:91:
         57:79:07:3f:7b:6c:00:fe:89:08:79:2d:83:e2:ce:44:45:3d:
         70:62:d4:bf:71:34:1e:30:19:8e:a0:79:86:b6:e6:08:de:fb:
         7c:83:42:75:61:b2:2d:00:32:db:56:7d:e1:af:a7:e4:3e:52:
         19:cb:27:99:71:76:85:77:74:ab:be:9d:e0:49:9a:43:23:79:
         ab:6e:fb:5a:6f:e0:e2:5f:c0:d8:6b:0e:4c:dd:64:4c:18:14:
         3c:e1:c9:ab:8c:39:9a:79:7b:e0:f7:15:c6:d4:f0:10:a4:5e:
         0c:82:d2:eb:1c:08:15:df:92:42:a9:e2:96:2a:58:6f:cc:f0:
         bc:52:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:21:20 2024 by rpki-client on console-ams.rpki-client.org