Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34362e302f32342d3234203d3e20323639383332.roa
File:                     3139302e39332e34362e302f32342d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          /OuzWGOyw6J60PNF0LIkvGqZeAnk7HibYTrn/Kesoj4=
Subject key identifier:   65:CD:35:49:33:C9:C2:24:88:3F:67:EC:7F:4B:DE:17:D5:F4:73:C1
Certificate issuer:       /CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
Certificate serial:       59A572BF5DD5DD9B0E384F5D44D9B68D00E55B10
Authority key identifier: F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34362e302f32342d3234203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:47:15 +0000
ROA not before:           Tue 05 Mar 2024 17:42:15 +0000
ROA not after:            Tue 04 Mar 2025 17:47:15 +0000
asID:                     269832
IP address blocks:        190.93.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:72:bf:5d:d5:dd:9b:0e:38:4f:5d:44:d9:b6:8d:00:e5:5b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
        Validity
            Not Before: Mar  5 17:42:15 2024 GMT
            Not After : Mar  4 17:47:15 2025 GMT
        Subject: CN=65CD354933C9C224883F67EC7F4BDE17D5F473C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:00:00:20:2a:68:60:04:b8:96:fb:f4:f5:
                    ec:5e:9f:32:72:88:71:75:f7:a8:8a:3a:c0:00:46:
                    e9:21:95:08:23:59:b4:53:35:bc:a6:08:77:ff:c4:
                    58:92:72:24:90:ae:66:e9:c8:f4:45:c9:1b:34:cf:
                    ce:59:19:e1:bd:65:35:1f:f1:f4:fb:b1:33:5d:75:
                    48:25:69:35:5d:56:4c:83:df:7f:b5:dc:36:b8:95:
                    16:42:04:c5:3e:f4:5c:4b:cd:f4:43:d1:2a:78:10:
                    56:7f:48:91:cb:d4:36:2a:23:36:46:40:77:e0:be:
                    0d:61:08:db:2f:80:d2:d8:dd:67:1b:f6:a7:29:5e:
                    77:cb:e8:c1:95:0f:42:d9:08:40:06:f2:08:b3:77:
                    03:0c:85:d3:b3:37:e5:22:16:f8:ce:ae:94:7b:1a:
                    ce:8f:f9:68:23:9c:df:18:83:8e:92:22:66:c5:17:
                    7f:41:67:27:ef:19:22:49:57:e2:43:a4:80:18:80:
                    e4:68:3c:7c:2a:11:52:c2:cc:93:82:eb:6c:09:47:
                    68:a9:80:7a:2d:15:15:4e:1e:93:68:77:d3:c5:3e:
                    34:4a:21:bd:49:11:f4:b3:02:2a:56:28:b4:62:3d:
                    76:25:71:28:92:f4:0a:e4:16:cc:61:24:f2:71:87:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CD:35:49:33:C9:C2:24:88:3F:67:EC:7F:4B:DE:17:D5:F4:73:C1
            X509v3 Authority Key Identifier:
                keyid:F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34362e302f32342d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:ce:c7:0a:3c:66:ad:ec:de:aa:be:10:03:d5:4f:4a:9b:
         8f:93:6a:6a:c3:0c:da:fb:df:9d:89:96:10:7e:8b:ec:a4:4b:
         8b:80:4c:3f:fc:a9:30:16:da:72:22:12:0c:d5:b7:c5:5b:2b:
         48:ed:da:d6:47:9b:e0:89:ca:e8:d3:3b:5d:d8:61:67:84:53:
         26:2a:0c:af:22:71:18:fd:be:02:2c:a0:89:fc:a9:28:fa:b0:
         c5:5f:a6:78:33:b4:a7:c7:e0:4a:50:7d:63:d6:07:7a:08:57:
         da:71:6f:b1:9d:c3:46:7e:82:40:0a:e3:54:ef:e6:59:ba:d6:
         c8:ef:a1:d5:63:bf:1d:d1:98:af:d1:ad:9a:cf:f4:83:62:72:
         be:fa:26:c0:36:3b:fe:0a:0d:f5:cf:fc:08:31:07:74:8d:34:
         51:2b:fd:ad:9b:f2:a4:85:7c:01:fc:da:2a:bb:b3:93:07:b6:
         3a:3d:85:13:26:fa:d0:17:71:78:ae:07:6b:41:1d:7c:50:71:
         e4:b9:de:15:aa:86:03:02:ba:c9:57:59:84:d2:cb:d5:d2:c6:
         79:8d:ab:ed:d8:cb:a8:81:1a:0a:4d:21:56:73:1c:b0:26:8e:
         24:93:00:ad:2f:33:0e:46:8c:d7:a4:14:dd:5f:29:60:4e:a3:
         65:d5:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org