Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          b/RZ4cHYJcfsLJdJF6GZ+0pjEk5ere62EFbB/lLMaGE=
Subject key identifier:   1C:C1:8B:89:2B:2E:03:DD:A0:7C:95:D3:A0:A0:8B:E4:81:DA:AA:26
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       07C93A1DBF1BCCC66EF46A7F06504871FBB694D2
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:16 +0000
ROA not before:           Mon 27 May 2024 19:45:16 +0000
ROA not after:            Mon 26 May 2025 19:50:16 +0000
asID:                     22313
IP address blocks:        190.123.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c9:3a:1d:bf:1b:cc:c6:6e:f4:6a:7f:06:50:48:71:fb:b6:94:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:16 2024 GMT
            Not After : May 26 19:50:16 2025 GMT
        Subject: CN=1CC18B892B2E03DDA07C95D3A0A08BE481DAAA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:d3:66:ae:7f:b1:d1:69:b5:2c:76:0b:d1:
                    e1:4d:7b:e9:5c:dd:4c:b4:fd:50:38:c1:03:36:49:
                    50:a5:9d:93:13:39:77:18:e7:5f:a9:6b:90:e4:20:
                    2a:74:83:92:b8:63:ae:3b:3f:5b:a5:e0:be:e6:a5:
                    e8:f1:88:af:c7:10:85:c6:cc:ca:29:be:59:da:28:
                    6b:38:b0:9d:ca:10:42:2c:d1:15:82:62:c4:20:20:
                    50:b3:40:83:ed:40:2a:05:2d:43:0b:0c:d9:44:80:
                    10:9f:bf:97:d3:d5:3c:dc:5f:8c:14:c2:bc:a2:ef:
                    28:1e:8e:ea:08:f6:65:a6:24:12:d1:9b:0f:ea:48:
                    3d:04:05:ac:95:a9:da:4f:0f:76:bd:0f:a5:37:d0:
                    9a:44:7f:f8:6f:ac:81:1c:8a:4d:a6:a0:94:ee:14:
                    fb:9e:2e:b8:cb:f2:92:2a:db:96:76:7e:04:eb:84:
                    d5:70:64:e2:44:90:51:fc:42:1f:f1:c0:69:bf:71:
                    ec:28:aa:4b:e7:e3:42:56:28:03:5e:5c:6f:b6:0d:
                    a4:1b:a2:ba:e2:ea:97:20:8b:fe:e4:b8:0b:c1:6b:
                    64:96:04:4f:90:79:dc:90:56:bd:85:ad:0b:5e:61:
                    3c:fb:eb:90:05:1d:61:3b:b8:d0:90:95:30:f7:29:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:8B:89:2B:2E:03:DD:A0:7C:95:D3:A0:A0:8B:E4:81:DA:AA:26
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137342e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:f3:3e:36:40:69:32:04:5d:70:8c:cb:57:46:72:87:31:
         bd:c6:04:ed:f7:16:e0:03:9f:bf:40:72:77:00:9b:69:45:98:
         c0:ab:3f:67:26:2e:57:a6:0f:bc:6d:fc:3f:98:11:a5:4c:bc:
         68:af:80:31:6f:ef:a6:29:00:53:ab:9c:ed:25:eb:1a:0c:91:
         b7:f4:95:fd:59:b7:8d:4d:f6:2a:d7:98:32:38:0e:33:58:c1:
         b6:da:24:22:ff:ba:60:b6:c0:8d:6a:94:6e:38:49:b5:8f:37:
         f4:b8:37:81:98:51:fb:7f:18:9c:d3:d7:9b:98:7e:25:d9:ab:
         a7:7f:14:72:ff:d5:1c:b6:84:ac:7a:03:32:5b:75:17:58:0c:
         fc:55:b8:1c:97:c3:db:12:c2:54:28:14:93:9b:92:4c:30:b2:
         51:8d:40:2e:51:6a:24:a9:1b:16:01:16:9c:70:15:11:64:ac:
         47:5b:d0:b2:e1:99:4c:c8:7e:fa:16:74:1f:52:7f:50:4c:a0:
         a5:9b:3f:d9:06:e2:0a:35:aa:e6:5a:1d:8f:18:d0:17:20:2f:
         9c:53:89:72:4e:58:51:db:bc:d5:0d:eb:2f:67:c6:3e:d3:7b:
         b0:56:86:9d:94:81:fa:98:c5:7f:cb:6c:59:9c:1f:31:d4:4e:
         c7:4f:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:45 2024 by rpki-client on console-fra.rpki-client.org