Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138332e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3138332e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          ND7DId55qkG+nITlsYuhzxhtnLMS2JCJaj8ZuvTjhtg=
Subject key identifier:   22:26:25:D0:7F:E1:43:B9:0E:EE:F1:0A:70:D9:3C:F9:58:A3:72:F9
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       69A92860F6797B8A2D3CEBD0F35C6955D7A90D7E
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138332e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:26 +0000
ROA not before:           Mon 27 May 2024 19:45:26 +0000
ROA not after:            Mon 26 May 2025 19:50:26 +0000
asID:                     22313
IP address blocks:        190.123.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a9:28:60:f6:79:7b:8a:2d:3c:eb:d0:f3:5c:69:55:d7:a9:0d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:26 2024 GMT
            Not After : May 26 19:50:26 2025 GMT
        Subject: CN=222625D07FE143B90EEEF10A70D93CF958A372F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:6d:1e:78:e0:31:e1:c2:7d:f0:ad:f0:13:
                    f9:73:a5:99:63:d8:f6:18:23:24:58:0f:82:bd:d8:
                    ea:c7:00:6d:57:e3:ef:b4:79:0e:78:46:46:c1:a1:
                    5c:8e:91:66:53:f3:7b:f9:9c:f0:06:48:c8:51:b0:
                    be:34:2a:be:4c:c6:ae:78:4a:d0:37:82:88:d0:ee:
                    6d:de:c7:9a:fd:5d:f3:74:00:4f:1e:27:ef:a7:57:
                    7a:ee:c5:68:d3:cc:6e:e9:7b:89:49:aa:f1:13:05:
                    9b:c7:23:f0:59:b4:4c:47:9d:b6:72:af:87:1d:8b:
                    32:6b:06:8b:b9:7e:f0:cb:aa:f4:ae:88:05:91:be:
                    95:2c:6d:77:ac:09:65:47:09:cf:a3:1e:de:87:ba:
                    3a:79:2c:3a:de:f7:59:b0:72:e5:1f:87:11:87:b2:
                    b8:a6:65:6f:0a:d9:71:53:82:9b:27:b6:12:da:9f:
                    9c:69:67:75:15:57:ed:71:e3:32:3a:0e:e6:16:ad:
                    f6:8d:e2:e3:f5:97:20:f9:19:1e:40:e6:86:79:09:
                    a2:db:1f:99:a3:f6:e6:bc:15:5c:71:9b:a3:40:07:
                    aa:34:a9:d1:36:66:09:f1:69:94:82:24:5f:95:71:
                    d9:08:0d:c6:e0:87:d9:a3:00:e2:f3:09:f0:90:05:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:25:D0:7F:E1:43:B9:0E:EE:F1:0A:70:D9:3C:F9:58:A3:72:F9
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138332e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:74:57:6b:a7:82:9e:fb:98:60:f3:b3:88:a0:6d:4d:16:
         60:fd:3c:f2:b7:da:54:bc:38:7d:de:2d:f9:a4:ef:cc:97:dd:
         d9:cd:b8:02:a0:f2:04:b9:a0:37:43:05:b5:cb:18:bb:b6:3c:
         79:5b:35:ec:5e:9a:c6:17:b1:13:79:a4:c0:8e:69:b2:6e:ad:
         fd:3b:d7:49:41:c8:96:d7:33:78:f3:a1:9a:d2:e7:f9:f6:10:
         ae:93:81:e1:4a:d2:e0:84:48:a0:00:1b:9d:5f:a2:8c:3c:ff:
         b8:0d:46:f8:8a:69:36:20:a8:99:3d:ff:ea:83:07:c9:47:14:
         09:8c:2b:7e:fa:95:29:3d:49:ea:20:65:3c:dd:e0:4b:96:44:
         ea:ba:0a:42:6b:63:fd:de:68:8e:46:7c:9e:9e:fb:bb:c9:eb:
         be:26:0f:c0:50:24:09:f3:26:f7:be:4e:28:e6:5c:59:b0:0e:
         fb:c4:d5:08:f9:09:bc:a0:ae:51:12:0d:ef:e2:3a:86:29:0c:
         0f:83:fb:3a:21:0e:3c:c9:d9:e3:ea:61:75:6f:89:95:f6:06:
         58:29:59:98:e7:04:df:d4:b2:78:14:ca:f2:83:4d:28:8a:c5:
         b5:cb:01:08:9f:11:70:87:49:ce:44:d7:78:0e:29:c8:ef:71:
         ec:dd:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:21:20 2024 by rpki-client on console-ams.rpki-client.org