Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137352e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137352e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          oOXIaqfNWnU+z+xWPgQPvaLmrdC5qJGQNg59H5S1Ibw=
Subject key identifier:   94:99:7D:73:10:26:06:6C:2B:F4:B2:09:14:5B:9C:FC:3D:07:32:4E
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       0C2E2CC006D0AD2341B2EEF02531A148EF9D5623
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137352e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:11 +0000
ROA not before:           Mon 27 May 2024 19:45:11 +0000
ROA not after:            Mon 26 May 2025 19:50:11 +0000
asID:                     22313
IP address blocks:        190.123.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2e:2c:c0:06:d0:ad:23:41:b2:ee:f0:25:31:a1:48:ef:9d:56:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:11 2024 GMT
            Not After : May 26 19:50:11 2025 GMT
        Subject: CN=94997D731026066C2BF4B209145B9CFC3D07324E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:1d:bf:21:64:58:51:26:16:15:d9:06:8f:
                    bf:d9:df:f8:ab:91:e8:b3:9d:85:ee:8e:b5:3a:15:
                    88:2d:c1:bb:db:e2:6e:a3:ea:36:99:b9:44:d6:41:
                    68:37:bc:fa:c7:59:fb:6f:c6:76:6e:e7:d6:1d:98:
                    f9:a0:7d:5d:b6:91:84:5e:5a:ed:48:5c:4e:2b:c1:
                    f5:1a:e3:25:00:e3:27:29:13:44:c3:6e:6a:c8:e0:
                    76:71:c9:4a:7a:73:f8:bc:b8:09:ca:ff:5f:30:b5:
                    47:b0:16:ca:88:41:5b:6c:96:e3:2d:e6:b4:5a:76:
                    f7:ac:78:01:c2:4e:f2:a3:30:f9:d0:95:4e:45:da:
                    dd:53:01:d2:74:29:19:da:44:95:42:93:1a:54:c0:
                    d9:41:ed:84:56:4f:22:e8:a7:2f:cc:42:4d:ab:e3:
                    2d:ac:f5:19:47:33:3c:d2:b3:98:3b:80:f8:6c:1a:
                    43:e3:1e:62:5f:6d:fb:47:bd:c8:8f:f9:5c:53:d6:
                    44:39:7c:a7:20:32:d4:98:c7:cf:72:fe:1e:26:de:
                    f4:90:a5:87:28:8a:14:4a:2e:72:96:2d:66:e0:56:
                    c1:45:bd:6d:9c:18:60:63:5a:1c:ad:70:44:61:62:
                    4c:60:80:55:27:fd:ac:db:52:ca:f4:a4:a3:e9:44:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:99:7D:73:10:26:06:6C:2B:F4:B2:09:14:5B:9C:FC:3D:07:32:4E
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137352e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:44:51:9c:19:ac:d9:67:23:25:25:e0:72:f6:af:b4:f4:
         29:d9:60:31:98:2c:8e:b7:ce:db:05:d1:3e:9b:41:ee:ba:bb:
         58:94:ef:bc:7d:12:f0:cc:0e:6e:86:40:4b:31:2b:d2:7e:80:
         d2:00:12:5d:13:e3:44:b9:34:c1:71:f2:f1:f8:8d:69:16:6c:
         4b:c1:73:cd:06:f2:85:58:93:65:a7:d8:95:65:3f:d8:fb:1e:
         f6:b2:d0:7b:da:8a:b3:72:f3:19:5f:0a:83:c0:6a:04:78:45:
         a4:97:de:8b:14:bb:fe:cc:6b:19:45:b5:fb:57:b9:bd:07:ad:
         c9:ee:8e:b5:d5:f3:c0:fc:d3:32:73:cd:0f:52:fe:81:01:5e:
         db:23:c4:f0:4b:5f:6d:fc:da:b5:07:10:10:26:04:e3:76:13:
         36:69:91:30:bf:d3:ed:2b:d7:d6:d3:7e:af:37:95:68:61:ac:
         d5:05:89:40:61:73:64:ab:ca:9f:c3:7a:f8:3d:f0:5f:cb:89:
         22:5a:a0:b4:e0:82:32:79:73:69:5b:15:53:72:31:f4:29:0b:
         46:5e:b3:2b:5f:e5:ea:3e:15:d5:48:33:d5:9f:3b:74:49:6b:
         48:9d:a4:ff:97:8b:6c:b4:8b:cf:ac:35:08:e7:fe:7f:80:b2:
         ca:56:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org