Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36322e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e36322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          P8D88399cgQPPje1v+AecERiK8PnHcarQhF4Ky2Dbrc=
Subject key identifier:   19:9D:6D:AE:71:1B:A4:D0:C9:F4:1B:25:99:9F:59:16:35:F4:50:EC
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       59C6CD68DB9766CB9FC6BF0CD1BBE5C19FB01460
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36322e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:31 +0000
ROA not before:           Mon 27 May 2024 19:45:31 +0000
ROA not after:            Mon 26 May 2025 19:50:31 +0000
asID:                     22313
IP address blocks:        190.103.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:cd:68:db:97:66:cb:9f:c6:bf:0c:d1:bb:e5:c1:9f:b0:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:31 2024 GMT
            Not After : May 26 19:50:31 2025 GMT
        Subject: CN=199D6DAE711BA4D0C9F41B25999F591635F450EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:b2:c1:b5:58:4a:5b:ff:18:03:46:ee:4d:
                    7b:65:f5:d0:a0:12:98:70:b4:77:b1:cc:26:a4:d9:
                    c1:5f:17:90:f8:c0:7e:75:a3:fa:19:0f:68:8b:16:
                    78:ba:96:06:ce:af:c5:3c:4f:a4:2a:c4:b8:62:43:
                    64:12:7a:82:81:11:12:b5:1b:47:aa:d1:53:79:d2:
                    5d:06:b6:7f:f0:23:79:43:65:98:88:cb:1b:87:22:
                    29:8c:6c:8e:9a:c7:c4:c5:c2:9c:a5:27:85:bb:e7:
                    be:96:7b:8f:4e:59:02:8b:2d:59:ce:58:25:6d:1a:
                    52:30:e6:2e:e6:cd:01:21:69:07:c3:16:7d:36:89:
                    b1:79:4f:8b:0d:05:8a:e7:0e:64:22:aa:67:3a:a9:
                    46:21:ba:dc:54:ae:2c:da:84:65:81:15:84:9c:04:
                    d3:ae:ff:ef:22:a0:62:5b:e6:2b:65:86:1d:85:aa:
                    b6:1c:44:72:d5:16:51:d7:d4:cd:5b:96:b9:00:45:
                    8b:ec:65:4c:da:e7:f2:f4:d4:54:f6:cd:bb:b7:03:
                    1a:bd:27:c3:09:ca:80:04:a7:d1:4c:4f:a9:6e:e5:
                    dd:b2:73:3e:30:ff:b2:f6:a6:6c:99:81:ec:4a:a3:
                    b9:8b:d8:c9:dd:19:bc:fd:dd:8b:c3:b1:95:65:ce:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9D:6D:AE:71:1B:A4:D0:C9:F4:1B:25:99:9F:59:16:35:F4:50:EC
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e36322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:fd:04:c8:a3:b5:ea:a2:48:67:29:68:01:11:41:e2:df:9d:
         a9:22:70:b5:5e:43:3c:13:a5:52:f7:01:18:3a:68:18:ab:54:
         b2:90:9a:6b:37:5b:eb:22:f4:b8:4b:64:7e:eb:55:e7:4a:46:
         fd:8f:f6:d5:ce:2b:1b:92:99:c9:d0:71:c3:d4:1e:e2:71:04:
         2b:63:75:3f:f7:36:16:2f:b5:30:34:4f:1a:7b:ff:2f:87:79:
         e1:91:46:5e:59:ac:45:58:73:43:fc:21:d8:db:b1:a2:87:45:
         e8:a9:8d:80:d0:80:62:ee:7e:2b:4e:3a:86:1e:eb:33:12:e1:
         46:07:ad:e8:c1:57:22:11:eb:86:c0:46:83:77:38:cf:ed:ad:
         c5:b7:f3:a8:da:6a:fb:bb:88:a4:c1:9f:0f:8b:66:02:fb:dc:
         71:a9:88:aa:7b:71:c6:92:99:ab:95:ee:56:1b:f7:fd:26:e4:
         55:f2:1d:55:e8:e2:f8:66:96:1f:a3:cb:51:29:32:43:af:81:
         75:51:ec:ca:b7:17:1e:89:cb:91:a5:61:71:8c:1a:87:f7:9c:
         33:07:e9:6b:f6:da:b9:fe:e0:9e:8b:89:c1:e7:fa:e8:97:18:
         d3:0d:31:a0:0d:97:7b:a0:bf:3a:1a:23:fa:c6:9f:34:79:76:
         96:19:23:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org