Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138382e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3138382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          d2R2fe3QtqbU317KdUYHjHU7L4PrG3GYX2nS4Zfoq2k=
Subject key identifier:   2C:A2:72:26:3A:30:10:17:73:7F:17:CE:6D:AF:E4:C6:17:8A:CD:AE
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       3CEDAEA13AE8B8C5C74EB630A3FAAB826A2891EB
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138382e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:19 +0000
ROA not before:           Mon 27 May 2024 19:45:19 +0000
ROA not after:            Mon 26 May 2025 19:50:19 +0000
asID:                     22313
IP address blocks:        190.123.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ed:ae:a1:3a:e8:b8:c5:c7:4e:b6:30:a3:fa:ab:82:6a:28:91:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:19 2024 GMT
            Not After : May 26 19:50:19 2025 GMT
        Subject: CN=2CA272263A301017737F17CE6DAFE4C6178ACDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:d7:7c:42:8b:9a:97:26:02:26:6e:b0:a5:
                    9c:71:2e:5e:6e:48:00:ae:82:c6:62:52:bc:ac:49:
                    f6:99:8f:da:27:fd:e4:49:47:fa:60:b5:7b:09:eb:
                    d2:a8:fb:87:36:e2:0e:2b:cf:07:d8:99:18:54:cf:
                    6f:0d:4a:1f:7f:be:74:83:f8:dd:1e:c6:5d:18:6e:
                    87:df:57:eb:1b:19:e0:d4:86:35:7f:07:8c:b8:a0:
                    76:17:8d:67:8b:ca:40:79:88:3d:af:fb:80:69:ef:
                    85:c6:5a:28:5e:a4:30:7e:c2:ba:a8:4f:d7:7e:82:
                    00:2d:06:84:1c:9f:2d:ec:26:4e:3f:c2:f3:c5:a9:
                    ef:40:d6:4c:76:06:91:7f:6d:b5:3e:b3:65:f4:78:
                    49:0c:6a:f3:e0:7b:ed:5e:cb:dd:bd:38:5c:d1:c9:
                    8c:62:d1:ce:7a:f9:56:b2:c5:4a:7f:16:67:4a:75:
                    88:00:19:60:48:3d:aa:63:f3:fe:17:c1:90:bf:8c:
                    b5:2a:67:69:31:7f:e3:22:4d:23:88:67:b6:9b:05:
                    c2:50:4a:7f:08:0e:69:b5:28:48:3e:0b:29:e5:41:
                    3b:84:b8:fa:6f:b3:f0:d2:97:95:e0:39:88:9a:50:
                    f7:05:ee:1c:52:fc:c9:ef:d4:86:0a:97:88:68:2a:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A2:72:26:3A:30:10:17:73:7F:17:CE:6D:AF:E4:C6:17:8A:CD:AE
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3138382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:75:7f:6f:49:fa:c8:39:4d:6e:65:6e:64:fc:93:6e:69:82:
         1b:f6:44:29:8d:4d:ac:c5:23:57:2c:ae:17:83:df:50:7a:21:
         59:85:33:a2:4f:6e:c9:e0:0d:eb:e8:02:ac:47:c2:fd:61:84:
         d6:24:e0:30:ae:96:e5:d1:c1:01:af:21:78:0f:29:de:c8:e3:
         33:96:0e:ee:f4:7c:63:14:9c:83:5f:c8:7b:35:f1:b8:17:90:
         bc:a7:fd:a6:9a:a5:0e:40:37:96:0e:df:58:7f:1e:f4:dd:19:
         85:b0:1c:eb:b3:ed:10:5f:fe:65:14:ee:5d:3a:24:55:ef:5a:
         17:81:db:bc:39:3b:c7:ae:a8:bd:2d:1d:7e:5e:46:ff:5d:3c:
         87:c2:1d:43:b1:fd:11:47:8e:98:00:bc:42:0d:2b:3b:26:8f:
         3f:8c:32:75:e9:e2:ce:29:68:66:c7:15:e2:20:73:e4:61:75:
         91:5b:75:50:0d:2c:d5:cd:d0:b0:3d:16:bf:61:fd:89:79:85:
         77:27:43:10:c6:8b:fa:39:e7:4f:0b:e3:17:45:d3:0b:56:4b:
         f8:15:05:aa:ae:3a:5f:f9:25:76:79:0c:9b:8a:dd:f9:b2:e7:
         17:ff:98:ad:93:ce:cc:ce:af:dd:75:bc:c8:2a:0a:7b:09:f6:
         f1:8e:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:21:20 2024 by rpki-client on console-ams.rpki-client.org