Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136392e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3136392e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          eShfXJdm/D2gjh979i5kEq7G4RvsBewc4KOo5637ycE=
Subject key identifier:   03:46:C7:29:6F:1F:15:00:B2:AC:67:F0:B5:DB:F9:7C:CA:D4:50:D9
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       1F4C68DA8AAD5E43D038ED52D57F8A8D076C9872
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136392e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:29 +0000
ROA not before:           Mon 27 May 2024 19:45:29 +0000
ROA not after:            Mon 26 May 2025 19:50:29 +0000
asID:                     22313
IP address blocks:        190.123.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:68:da:8a:ad:5e:43:d0:38:ed:52:d5:7f:8a:8d:07:6c:98:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:29 2024 GMT
            Not After : May 26 19:50:29 2025 GMT
        Subject: CN=0346C7296F1F1500B2AC67F0B5DBF97CCAD450D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:9f:e7:71:1c:8e:f6:e0:f0:00:cd:f2:56:
                    bf:1e:10:32:75:45:51:9d:a2:01:59:51:f9:51:7b:
                    4c:36:d1:c3:43:11:8b:a8:b8:69:4f:a8:d5:6f:2f:
                    06:2a:53:d7:ea:f3:71:3e:1d:be:73:d7:fa:b9:28:
                    71:0e:8f:8a:2e:17:67:96:b9:5a:67:05:7b:ba:79:
                    84:1a:bb:cd:00:3e:d8:a2:4d:45:1c:1d:56:8f:57:
                    e3:53:0e:2c:a8:8d:f0:1b:7d:47:29:87:00:88:9f:
                    5f:ef:76:71:64:9e:96:ed:0d:c0:4d:32:90:3d:af:
                    4b:cd:12:89:4f:7f:dd:d6:2b:ba:4c:79:a8:a7:e8:
                    c6:0e:32:7f:85:43:e2:5e:7d:c5:5d:ad:b5:5c:8f:
                    b6:1a:dd:c8:d3:9a:57:83:1f:a7:af:01:04:7c:b4:
                    24:9c:67:48:e7:6c:d6:c5:e2:3d:86:de:1f:8a:1f:
                    85:48:ee:b5:36:0e:0d:45:5d:b0:9b:6a:6a:22:07:
                    a5:82:cc:b0:d2:1a:31:a5:28:4e:85:ae:1b:27:83:
                    b7:e4:3c:a7:75:0f:98:30:b4:69:7e:fa:fc:0f:c7:
                    61:e6:38:90:31:69:a3:79:ea:1c:03:91:13:95:db:
                    3b:5e:3f:2f:e5:dd:75:96:a3:a7:91:44:04:f7:1a:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:C7:29:6F:1F:15:00:B2:AC:67:F0:B5:DB:F9:7C:CA:D4:50:D9
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3136392e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:13:87:54:cd:33:64:eb:8f:41:45:8b:08:1d:d6:03:f9:66:
         36:6e:07:6e:92:2e:90:9f:9d:ca:f1:b5:b0:5b:bc:9f:56:34:
         0e:b2:dc:c3:34:3c:5e:05:30:2c:06:0e:6c:23:0b:6d:90:1f:
         6d:3c:9b:74:22:0f:42:cb:8a:bb:61:77:2e:93:ee:3e:1b:3f:
         ee:2a:a8:bd:66:de:f6:64:86:4b:56:57:12:17:13:f8:35:98:
         29:ec:62:86:0d:51:f8:33:2a:e0:e8:5c:26:a2:42:c4:e7:58:
         7d:29:e0:d3:b0:d1:88:52:5e:d7:b1:f9:4a:13:65:2e:d4:50:
         4f:2a:28:6c:a3:85:bb:6a:e0:05:24:69:0d:00:3b:95:20:eb:
         86:8b:70:3a:43:9d:c6:0d:06:fd:d7:8a:96:37:22:08:ac:73:
         77:0a:b1:ad:96:a9:2e:cd:67:76:a5:46:2c:de:ec:36:a1:a4:
         8b:a2:53:df:69:7f:5b:45:33:af:15:cc:a1:ac:81:d4:dd:a3:
         21:80:31:14:f3:d3:57:8c:25:80:7d:b1:98:fd:07:e3:e1:c3:
         24:c3:93:9d:c2:c9:0a:f3:3e:cc:4a:88:07:2f:61:15:6b:f8:
         d2:07:44:66:67:38:7b:93:34:93:d9:ee:d1:19:0c:96:04:11:
         ee:2a:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:21:20 2024 by rpki-client on console-ams.rpki-client.org