Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          0QXG/V501Ks0Ky3TEMqI8yPo59+wQGt1H73NS9t9jwk=
Subject key identifier:   D5:16:35:48:2F:F2:6C:28:0A:C0:B0:35:7C:4F:5F:66:E7:3A:15:73
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       592BE957D060957A4D092CF597875C9C3CA1FF43
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:09 +0000
ROA not before:           Mon 27 May 2024 19:45:09 +0000
ROA not after:            Mon 26 May 2025 19:50:09 +0000
asID:                     22313
IP address blocks:        190.123.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Sep 2024 10:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2b:e9:57:d0:60:95:7a:4d:09:2c:f5:97:87:5c:9c:3c:a1:ff:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:09 2024 GMT
            Not After : May 26 19:50:09 2025 GMT
        Subject: CN=D51635482FF26C280AC0B0357C4F5F66E73A1573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:cf:8a:94:60:43:14:34:50:af:75:38:ea:
                    b2:f4:40:49:ad:7e:a3:35:63:c2:47:fa:8e:b0:0c:
                    81:50:fc:6e:9e:a6:1d:a0:71:d8:e2:dd:c8:94:5a:
                    8d:24:76:d3:d8:44:0f:d1:b4:40:c5:30:ba:e2:fd:
                    2a:8b:dc:10:82:fd:ea:0e:9f:1e:cf:d8:1d:ef:9e:
                    59:ca:be:38:31:ba:b1:76:68:69:e6:b8:ea:d0:ea:
                    53:7f:1d:fe:cf:65:e9:ac:b0:c4:00:10:e6:79:da:
                    78:c8:85:34:5b:1d:e7:75:00:b7:15:8c:f2:5e:5c:
                    34:60:aa:ab:e9:1f:d4:58:2a:af:db:52:0d:fe:7a:
                    25:60:35:40:b0:d5:7e:2e:95:2b:0d:fb:34:d8:54:
                    20:8e:72:f6:d1:ea:26:8f:b7:0a:6c:ab:06:7c:3f:
                    43:49:82:0f:f3:73:01:b3:61:d8:b3:e9:2a:08:49:
                    13:64:f8:99:fa:e6:ff:e0:22:71:b6:25:82:03:5a:
                    18:ce:e9:34:8a:4d:5a:40:ba:7d:8c:a5:f1:7c:04:
                    30:53:81:c1:ee:f5:a6:2a:57:ff:72:d9:04:32:5c:
                    88:1f:e5:e4:ca:3e:0e:18:ad:3d:c8:ed:78:02:13:
                    6f:b2:7d:07:59:b7:f9:70:15:12:64:a8:88:cf:30:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:16:35:48:2F:F2:6C:28:0A:C0:B0:35:7C:4F:5F:66:E7:3A:15:73
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:0f:d5:98:ee:ef:c0:e3:17:98:f8:4b:7b:c1:6b:46:f2:
         75:9c:f2:06:81:98:8b:bc:2b:65:4d:09:7b:3b:6c:d3:91:b3:
         86:6b:dc:85:25:58:a3:91:b8:bd:0f:33:20:2a:55:95:de:fd:
         b7:93:e9:93:e3:f7:0a:b9:83:9e:b4:c6:8e:ea:32:49:44:43:
         9c:20:78:28:01:2f:98:fc:ca:0b:f6:c4:be:ac:d5:74:91:67:
         a3:e1:f5:4a:bb:96:bb:0f:9d:1a:31:bd:00:3e:ee:0f:08:81:
         a1:f7:1a:16:0c:89:08:7d:65:95:9c:59:70:ed:e2:08:91:f8:
         58:a4:63:90:e1:18:92:0d:3f:f4:51:52:99:18:f7:de:35:a9:
         51:12:2c:b3:f5:8b:12:cd:9b:bf:93:22:28:db:19:fd:39:34:
         d5:cf:95:af:9f:b3:75:9a:a9:a3:87:f3:fb:ad:d4:d2:46:97:
         e9:81:a4:af:af:a7:b7:00:7d:2b:93:9a:8b:7b:db:23:09:be:
         38:28:b3:a2:c9:50:a6:36:f4:e2:32:d2:29:5b:df:7c:03:bb:
         08:de:01:dd:84:21:0a:cf:68:72:b3:6a:ed:e9:2e:59:98:d5:
         56:0c:96:07:c7:10:09:15:01:3e:bb:48:eb:fb:96:e3:3c:6b:
         8f:1d:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:16:25 2024 by rpki-client on console-fra.rpki-client.org