Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137392e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137392e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          a0oBINHARj6r5ku8G81nuMqPXTrmbtR3sCInoomgAHo=
Subject key identifier:   C3:77:3D:80:B1:EC:59:A7:4D:EF:4E:DC:DB:90:2A:5B:CD:0A:5B:15
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       40434F81335F9D276CD9A571BCECC8DC28C1B9B4
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137392e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:16 +0000
ROA not before:           Mon 27 May 2024 19:45:16 +0000
ROA not after:            Mon 26 May 2025 19:50:16 +0000
asID:                     22313
IP address blocks:        190.123.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:43:4f:81:33:5f:9d:27:6c:d9:a5:71:bc:ec:c8:dc:28:c1:b9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:16 2024 GMT
            Not After : May 26 19:50:16 2025 GMT
        Subject: CN=C3773D80B1EC59A74DEF4EDCDB902A5BCD0A5B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:2a:a4:43:ab:12:3f:4e:7c:37:a7:9b:cb:
                    12:50:70:92:14:0d:6a:f9:f1:cc:f4:70:ce:e8:96:
                    f0:9d:bf:a8:55:4e:b6:f0:a2:ef:71:65:ae:28:3e:
                    ab:58:cf:f9:f5:70:d4:c1:de:02:81:bc:90:49:13:
                    31:bb:21:9b:a6:96:2c:5a:79:ae:4d:d4:fe:3d:36:
                    66:73:9a:c7:9c:88:52:81:cd:76:ee:77:b5:39:d2:
                    8a:80:8d:90:ef:e2:ad:bc:55:28:ea:23:97:a2:3d:
                    f0:8a:6e:1c:ad:57:14:d0:2d:9d:2f:54:7a:22:95:
                    29:87:2c:98:6d:a1:df:9e:a6:a3:9b:45:b8:3e:32:
                    7b:9f:5b:5e:de:c1:d9:13:ef:80:6b:3c:6d:7c:13:
                    a5:85:48:d9:96:c5:61:b8:3c:c1:cd:b2:6a:e8:14:
                    94:7d:99:48:75:c8:37:45:59:d6:b0:5c:b0:66:d2:
                    17:cf:a6:f2:ff:cf:6d:98:2f:03:e1:fc:c0:1f:69:
                    8d:fc:15:44:d5:da:b5:05:ce:b2:e8:d7:5f:32:77:
                    36:29:74:02:d6:b4:e3:cb:44:88:88:74:27:8b:4a:
                    38:4d:91:17:cd:da:38:86:49:db:1f:fc:e5:e2:1b:
                    26:39:e4:4a:bc:ce:ce:6a:87:7f:e7:bb:6a:c9:ac:
                    10:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:77:3D:80:B1:EC:59:A7:4D:EF:4E:DC:DB:90:2A:5B:CD:0A:5B:15
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137392e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:90:3e:ab:77:ce:65:1d:50:5c:8b:94:06:98:15:b4:dd:
         e1:84:8c:02:5c:97:51:ab:91:3a:43:38:8d:6f:67:2a:6d:bd:
         3b:cf:6b:1a:b4:ef:39:01:0f:24:8e:6a:8e:bb:57:56:66:7b:
         78:61:b8:81:aa:db:81:a1:56:23:dd:b4:7b:71:13:24:2e:b3:
         c0:a6:47:32:78:d4:16:c8:7b:fe:24:b4:1f:11:df:ba:ad:bc:
         7b:9e:68:4f:c7:18:4a:80:db:00:8d:19:84:08:e4:94:62:54:
         e9:89:26:cb:3b:28:76:bb:85:62:c0:ce:0a:5d:b2:ef:1e:af:
         1d:1f:1a:c5:5e:3f:01:d9:80:86:2e:52:3d:c9:05:71:73:92:
         2a:31:10:9b:f6:a9:8d:e9:0c:66:b0:32:e6:19:8e:d6:4a:d6:
         43:e5:4d:92:03:87:e4:d6:99:22:1d:0e:94:fb:a9:01:95:eb:
         60:77:fd:4e:ab:a3:fa:8e:db:af:10:7f:54:42:c1:e8:66:c2:
         37:44:7f:9c:32:e9:cf:03:53:85:67:4e:d1:11:56:eb:b9:42:
         7e:c7:8d:10:8b:10:7a:05:8d:1f:af:65:b0:cb:d9:89:ef:02:
         22:94:75:ec:9a:34:4b:5e:fa:1c:ce:83:e9:26:28:74:0c:00:
         58:c8:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:45 2024 by rpki-client on console-fra.rpki-client.org