Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35322e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e35322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          I6yXMlknKucIIMu2ef1xRrQDLxbOCz4RlPeHJR+2gGU=
Subject key identifier:   64:A7:DE:5B:70:63:92:77:80:99:02:F8:ED:8E:CB:D6:D1:2D:B1:E3
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       5E67BF7F8117E9172991642021DFB9FD6BFD97D5
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35322e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:29 +0000
ROA not before:           Mon 27 May 2024 19:45:29 +0000
ROA not after:            Mon 26 May 2025 19:50:29 +0000
asID:                     22313
IP address blocks:        190.103.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:67:bf:7f:81:17:e9:17:29:91:64:20:21:df:b9:fd:6b:fd:97:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:29 2024 GMT
            Not After : May 26 19:50:29 2025 GMT
        Subject: CN=64A7DE5B70639277809902F8ED8ECBD6D12DB1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:1f:8a:b1:d5:c4:73:a7:73:52:78:08:47:
                    82:98:47:ef:ab:f0:04:34:d1:ba:20:ed:70:9b:e8:
                    ae:d3:96:0e:6d:eb:c5:7d:4b:c9:87:72:80:1e:a7:
                    77:2e:81:6a:f2:9b:df:43:74:a6:59:1a:ab:7a:57:
                    05:02:f6:02:c3:4f:3b:28:7a:e3:c5:5c:0a:01:ed:
                    c1:69:4b:36:ad:09:f8:d8:11:c4:f7:a8:9a:f2:c2:
                    f9:9e:f9:35:1d:73:b5:15:80:d0:90:2b:df:09:18:
                    b6:7a:57:03:7d:2b:52:d0:1a:bc:2d:1b:e4:cc:44:
                    8b:1e:28:57:f9:06:7e:cd:0b:01:60:e5:d6:d7:74:
                    85:3a:bf:7a:7a:28:56:88:f1:69:ae:78:1d:f4:e9:
                    32:be:32:17:9c:44:be:86:03:58:67:4d:0a:45:4c:
                    bc:77:e0:6a:55:c0:cc:5e:9d:10:79:f5:e3:a7:78:
                    58:a7:56:60:de:73:c8:0d:01:02:e9:47:c3:fb:88:
                    4b:99:7c:4f:14:7d:94:f3:0a:82:30:c6:19:d0:8d:
                    8a:a8:ed:bc:cd:4b:f3:a6:2a:51:f8:1f:2e:00:ef:
                    fa:bf:34:04:eb:ce:1a:01:29:1c:57:9c:9e:4f:0f:
                    26:9f:9c:fe:6c:2f:2d:1c:45:73:a9:5c:35:f3:d7:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A7:DE:5B:70:63:92:77:80:99:02:F8:ED:8E:CB:D6:D1:2D:B1:E3
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:14:7b:58:d6:ff:74:16:fb:b5:ca:3b:22:00:b0:83:65:
         2a:8d:79:cb:be:50:ce:f1:5a:a8:5b:24:67:ab:2b:03:3c:95:
         dd:a8:2c:39:e8:19:20:43:3a:39:4f:7b:86:57:26:f0:22:b6:
         3a:00:f8:24:e6:4d:c0:68:cb:a2:b5:6a:b5:c6:13:44:70:94:
         0e:27:71:a2:40:64:f8:37:18:81:c0:7d:dc:64:9d:de:73:ad:
         47:c2:16:18:79:e4:f9:63:57:60:f8:c0:25:23:5a:04:99:04:
         7b:05:bb:25:6f:22:9b:cc:1d:0c:02:2c:b5:1e:4f:d4:09:1d:
         3c:ad:98:61:7f:07:99:94:67:b3:e8:da:1f:27:33:3e:7c:64:
         26:86:ce:45:d5:99:17:66:5b:87:45:db:ee:88:09:36:f3:01:
         de:e3:26:a8:61:02:08:59:42:62:3c:ed:23:e8:91:8c:73:0e:
         02:a1:54:4b:73:07:b0:e8:c8:a7:ff:29:b4:c8:61:a1:33:0a:
         ff:88:64:4b:e4:92:74:b1:4e:6c:74:5d:44:39:78:f8:dc:ea:
         06:fd:6e:87:f6:03:9e:d1:a4:2a:ac:cc:a9:01:cf:c3:76:ba:
         7e:ca:b8:ea:75:c0:a9:41:87:a0:fb:ca:68:16:ab:84:4b:1b:
         81:97:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org