Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34342e302f32322d3232203d3e20323639383332.roa
File:                     3139302e39332e34342e302f32322d3232203d3e20323639383332.roa (raw, json)
Hash identifier:          WZISg1D2yWAaFuxOminhM7iJDbfl4yJh9oxhWuCqgLY=
Subject key identifier:   A5:F9:42:50:3C:6E:C9:86:76:E7:77:9F:90:27:7D:DD:42:79:89:B3
Certificate issuer:       /CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
Certificate serial:       2FE008473972A3A23C49E66FCF0B09038692B8DB
Authority key identifier: F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34342e302f32322d3232203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:47:15 +0000
ROA not before:           Tue 05 Mar 2024 17:42:15 +0000
ROA not after:            Tue 04 Mar 2025 17:47:15 +0000
asID:                     269832
IP address blocks:        190.93.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e0:08:47:39:72:a3:a2:3c:49:e6:6f:cf:0b:09:03:86:92:b8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
        Validity
            Not Before: Mar  5 17:42:15 2024 GMT
            Not After : Mar  4 17:47:15 2025 GMT
        Subject: CN=A5F942503C6EC98676E7779F90277DDD427989B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:ea:14:a6:20:ad:f0:17:1b:1b:f6:96:ae:
                    c2:01:54:7e:0a:ca:ef:6c:4c:1f:b8:2a:98:88:c7:
                    42:f6:88:b0:df:5e:a6:8b:b7:18:2a:12:4e:a6:40:
                    fb:02:1a:1e:fa:e1:dd:64:43:bf:e6:05:0a:70:a0:
                    78:8d:55:cd:94:ed:1a:e1:a3:75:7f:a2:fe:a1:0b:
                    0e:47:25:d6:f4:fd:cb:ff:12:a8:23:1b:d9:ae:30:
                    c8:a7:de:85:b8:ba:a8:5c:e4:9c:8e:77:6d:ff:9c:
                    e4:45:be:20:13:eb:91:61:8c:75:1b:c1:1b:7f:16:
                    5e:3b:59:19:02:bc:95:55:ec:1d:9a:50:fb:82:de:
                    4f:f3:67:85:90:1f:0f:ff:41:97:83:b6:cc:66:bd:
                    dd:7e:1e:98:5b:6e:1c:80:60:2c:27:73:cb:41:d4:
                    55:de:83:20:11:86:d4:94:ba:82:d8:aa:87:92:98:
                    b7:b8:11:e8:64:6f:74:f5:f4:ec:e4:69:ab:97:e1:
                    fd:2e:19:b1:0f:d4:de:b5:53:b6:d8:89:ae:5f:93:
                    62:04:ac:bf:30:65:31:86:61:1e:54:2f:16:83:08:
                    d3:54:33:f1:30:4b:1d:5f:b6:15:a5:4d:d7:38:28:
                    5a:50:a4:03:6a:25:d0:2d:2b:2f:81:b3:d8:93:ab:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:42:50:3C:6E:C9:86:76:E7:77:9F:90:27:7D:DD:42:79:89:B3
            X509v3 Authority Key Identifier:
                keyid:F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34342e302f32322d3232203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:93:9f:f0:30:08:27:53:18:ad:b6:75:cd:38:a4:99:66:
         45:38:fd:b7:e4:74:bc:c6:4f:a1:d2:6a:70:48:ff:6f:58:7d:
         28:80:30:76:f6:cf:12:38:d3:e4:34:bf:f8:46:ec:0b:69:0a:
         07:69:06:3f:da:41:74:b5:aa:10:79:2a:cb:5f:2b:d5:40:2e:
         92:d0:1f:bb:39:04:ed:55:b3:7c:9f:87:17:21:74:34:0d:f7:
         1f:2e:90:e6:f5:c0:7c:dd:4f:0d:42:7a:ad:b2:67:b4:47:6c:
         76:ac:cf:e2:ca:c0:49:78:9c:32:67:4e:31:f4:d3:c8:40:9b:
         72:6f:80:20:43:e4:fd:cc:a4:1f:67:dc:32:74:0f:98:ee:2c:
         08:2a:0b:84:4a:89:d7:97:a0:9e:32:cf:1c:28:9d:b0:a3:d0:
         45:28:51:cc:b2:53:b9:33:04:82:8b:ce:52:8d:64:02:5b:20:
         97:62:a0:3b:e4:ba:da:12:27:76:36:d5:0b:c2:d8:be:e1:cf:
         c8:fe:0b:b3:51:af:7b:fa:f3:74:e1:c8:6a:c4:85:f7:45:af:
         1c:ff:69:1b:cb:85:42:f8:4a:06:49:24:ea:aa:09:00:fa:17:
         61:74:01:8c:0f:3b:78:25:9f:a3:d2:f8:d4:18:1e:b3:29:eb:
         8e:09:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:03 2024 by rpki-client on console-fra.rpki-client.org