Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          6LZPgi3xewQR/0vD56I10upDt1TBs8dJXJD0Z9lCOc8=
Subject key identifier:   BF:27:FD:A1:5C:8A:0B:02:31:86:45:D4:BB:58:53:F5:6D:99:F8:68
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       3FF8B2B41B022AE2E246D5313B28A22AE6B5E407
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:25 +0000
ROA not before:           Mon 27 May 2024 19:45:25 +0000
ROA not after:            Mon 26 May 2025 19:50:25 +0000
asID:                     22313
IP address blocks:        190.123.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f8:b2:b4:1b:02:2a:e2:e2:46:d5:31:3b:28:a2:2a:e6:b5:e4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:25 2024 GMT
            Not After : May 26 19:50:25 2025 GMT
        Subject: CN=BF27FDA15C8A0B02318645D4BB5853F56D99F868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:80:d3:8a:a9:9c:20:3e:b5:80:13:dc:7f:
                    db:a8:f4:04:a0:4b:b3:c8:63:8b:69:69:4b:da:ff:
                    44:d8:cb:a4:ab:38:21:21:9e:48:52:8f:08:83:da:
                    2b:18:f4:ce:ea:fc:b3:9b:4a:1c:5b:be:56:c1:30:
                    58:49:04:9f:31:9d:f4:e3:95:cd:e8:a6:60:e1:16:
                    b8:49:90:f8:41:6b:13:11:db:c4:ee:2d:e7:ad:02:
                    45:2c:e0:a7:e3:4b:25:aa:a1:86:8c:a3:7e:c5:19:
                    f8:7e:41:ac:34:76:68:a4:99:b9:19:42:2f:ac:fe:
                    01:fe:e6:13:c7:8b:d1:65:96:b0:11:3e:e4:87:3e:
                    95:31:4e:a9:09:55:8f:6e:ab:71:77:63:55:a7:6f:
                    e4:6d:dd:a1:ec:91:27:ef:b9:3f:a7:9f:09:81:bf:
                    f4:89:3b:da:21:3b:1f:e1:18:ab:ec:6c:3e:dd:a4:
                    3d:38:e3:77:06:08:a8:27:98:b9:d1:d4:a2:eb:b0:
                    0d:63:14:9b:af:a1:1b:5f:e6:6f:57:46:d7:20:c6:
                    a7:e4:f3:af:30:d3:82:8d:15:89:6f:b3:49:13:81:
                    ab:e4:2a:ef:2c:0e:f3:43:ce:c6:d0:d0:75:7a:b0:
                    38:de:0d:88:02:bd:aa:4e:38:b0:3d:3d:a3:ae:2b:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:FD:A1:5C:8A:0B:02:31:86:45:D4:BB:58:53:F5:6D:99:F8:68
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136342e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:52:50:fd:ac:55:6a:50:5c:0d:62:ea:ec:ed:38:2b:25:
         e5:64:c3:fc:99:c3:99:4c:b0:8a:0e:ad:98:9b:05:1b:8b:2e:
         b1:a3:95:df:b3:01:1a:43:95:91:7b:39:2f:43:7b:09:ff:cb:
         b9:16:dc:8f:94:1a:a4:87:94:19:6d:24:22:7b:9c:d9:ae:38:
         a1:5d:39:1a:57:c1:3f:54:47:4f:ab:6e:22:b5:7d:50:e8:c1:
         01:75:e8:fe:a9:ea:0b:fe:fa:b3:a4:15:b5:12:13:a5:83:2e:
         aa:38:76:89:38:35:63:af:9f:99:64:15:ce:df:07:da:20:17:
         aa:db:bf:79:da:20:9b:93:95:2f:a1:70:54:be:97:98:07:a7:
         bf:5d:67:37:31:d7:49:fe:15:02:8c:ce:07:05:9e:ba:91:2f:
         88:65:05:95:94:be:0f:4d:eb:fe:0d:54:15:4a:8c:45:4e:bf:
         7d:92:37:af:1c:8e:23:24:66:11:d4:99:f4:b5:02:f0:32:ce:
         de:42:d6:e6:27:2f:bf:18:b7:45:51:53:e9:d0:07:59:9d:48:
         70:99:ca:a7:4f:7e:ec:11:f1:d0:75:39:6c:92:37:4c:2e:2a:
         ad:62:02:1a:db:be:7a:9a:99:42:43:79:27:a7:23:fc:1f:42:
         bd:1a:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org