Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          QcZ4F1YlyLwAQwlYVM+2m/Oc81WC67hVh/E63dcYLzk=
Subject key identifier:   87:23:78:2D:05:7E:8D:40:41:31:41:A5:99:FE:93:9C:19:2A:2C:3A
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       5F65BE61CA66FD465424D800392C28E1FED9AC43
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:08 +0000
ROA not before:           Mon 27 May 2024 19:45:08 +0000
ROA not after:            Mon 26 May 2025 19:50:08 +0000
asID:                     22313
IP address blocks:        190.123.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:65:be:61:ca:66:fd:46:54:24:d8:00:39:2c:28:e1:fe:d9:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:08 2024 GMT
            Not After : May 26 19:50:08 2025 GMT
        Subject: CN=8723782D057E8D40413141A599FE939C192A2C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:c9:c5:b4:cf:9d:b3:7f:c9:23:a3:f5:75:
                    68:eb:6a:88:92:15:97:48:8e:ba:48:5b:89:67:24:
                    67:ab:e0:54:c9:f3:13:bc:e2:49:18:e4:0f:94:e8:
                    d9:25:e1:38:b1:75:18:17:b0:55:a1:26:a0:e2:26:
                    d8:76:1b:bc:08:c2:8d:da:02:d6:ba:de:5a:80:92:
                    ed:bf:40:8e:ab:31:e8:5c:ee:77:18:2a:9b:8d:1a:
                    fe:68:d8:da:59:f1:f5:9c:a0:5b:41:12:ed:5f:f4:
                    be:5f:d0:bc:b7:3d:29:2a:c1:f3:59:24:5f:84:21:
                    fc:38:93:44:7f:da:a8:c0:a4:62:e1:ad:22:67:ac:
                    26:45:8e:4a:34:cf:75:6f:19:a8:f1:4a:18:e1:b2:
                    61:0c:8b:ba:18:6b:c4:68:74:c0:92:7e:69:a0:58:
                    8c:a8:01:97:72:c5:e9:69:9a:91:87:3e:c2:34:93:
                    89:48:93:a1:b9:23:c7:81:cc:f3:0b:a2:2c:9b:1e:
                    2d:a6:16:2b:61:a3:47:7a:bd:60:4b:bf:2d:52:cb:
                    be:fe:37:01:35:27:4f:9d:41:be:c8:a3:67:2d:74:
                    33:15:45:b7:9c:2f:c4:20:c8:cf:cf:84:ee:e9:8a:
                    4c:89:2b:2a:8c:c5:45:59:8a:c6:0f:4c:e5:96:f8:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:23:78:2D:05:7E:8D:40:41:31:41:A5:99:FE:93:9C:19:2A:2C:3A
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137372e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:82:4c:3c:70:c9:6d:a7:f7:a8:21:b2:70:40:f7:be:9a:e3:
         5f:f6:08:78:2e:52:47:cd:0d:4b:60:fd:41:8d:3e:76:04:f0:
         00:af:87:c5:d9:c4:07:e2:c2:20:af:0b:9e:7e:3a:9b:5d:42:
         b8:f7:bc:58:4e:42:9d:8f:ef:15:95:f3:96:5a:5c:a3:63:7f:
         e4:68:b1:3e:ad:e3:60:68:14:a3:d4:e0:71:ba:1c:a0:77:05:
         2a:d3:72:e3:26:23:6e:0b:ad:8a:58:b6:13:0b:b1:d6:b1:55:
         f6:05:b7:4e:03:f3:fe:9f:7d:aa:1e:31:d0:99:52:37:c6:3a:
         70:14:1f:bf:4b:e5:87:5b:bb:42:39:c4:b0:af:2f:9d:35:72:
         a3:55:9c:f2:a2:79:9e:b2:d9:c5:79:f0:15:d3:aa:da:1d:c5:
         12:50:3d:db:10:dc:83:c0:4d:ba:02:fb:bc:cd:03:c4:f0:fe:
         21:64:5e:06:c5:37:db:ae:95:05:d9:18:67:87:11:87:43:89:
         04:f9:09:5d:1d:3a:70:e1:3e:da:01:08:9f:47:16:c4:1a:24:
         7a:c5:b0:d1:21:91:ec:da:58:52:8d:1c:6f:85:eb:a0:74:a1:
         3e:e1:49:6a:79:bd:38:39:05:63:86:d0:1b:de:43:42:09:56:
         6f:52:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org