Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa
File:                     3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          S7qz/WjbkH/Q2bKgxB8ABvwh+bEEzx4+eLbAy+1XOGk=
Subject key identifier:   DD:E5:6A:1C:A8:CA:A3:CE:45:DE:B9:88:67:DA:AB:10:27:B4:F3:7B
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       3FC1611370CCE3412C519FC08CF35404A0F27C50
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:08:26 +0000
ROA not before:           Tue 05 Mar 2024 18:03:26 +0000
ROA not after:            Tue 04 Mar 2025 18:08:26 +0000
asID:                     14754
IP address blocks:        190.149.134.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c1:61:13:70:cc:e3:41:2c:51:9f:c0:8c:f3:54:04:a0:f2:7c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Mar  5 18:03:26 2024 GMT
            Not After : Mar  4 18:08:26 2025 GMT
        Subject: CN=DDE56A1CA8CAA3CE45DEB98867DAAB1027B4F37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:38:ca:d8:a3:32:85:f1:51:bd:cc:e8:85:
                    15:94:b8:5e:47:ae:08:a9:56:b9:fc:fb:ff:7a:58:
                    ae:22:e0:57:fa:76:29:35:d7:63:69:52:b4:27:6e:
                    f4:91:6c:70:2a:2a:ef:77:1f:b4:a7:47:8f:92:d2:
                    47:f4:f6:b1:5e:81:b5:08:8d:43:1c:4f:cd:f6:20:
                    d2:af:f9:79:a7:41:fa:85:f2:c6:63:54:27:51:69:
                    8a:27:70:8f:8e:af:06:98:7c:f2:78:9e:df:70:57:
                    ce:d2:4e:54:1a:31:65:a2:98:36:76:02:15:02:2e:
                    b9:de:c2:6c:7d:c2:53:92:3f:37:0c:b9:e0:cd:45:
                    06:0c:be:9a:1e:42:16:dc:b8:c2:3b:06:ea:ee:ef:
                    42:0c:cb:4b:84:e7:66:85:bd:42:fc:77:05:ac:de:
                    dc:4b:ae:6c:d3:f6:4f:1d:54:15:15:d4:99:4f:6c:
                    c0:3b:71:4c:b7:b5:48:73:6c:51:af:fe:4d:15:ac:
                    d3:c5:83:9b:9b:0f:62:69:37:cb:51:88:81:82:7c:
                    a4:bf:16:9e:4c:49:86:86:0b:5f:2d:99:55:f2:96:
                    85:52:45:a6:0d:20:80:e1:20:1b:ed:f6:78:c0:d8:
                    83:b7:ed:f9:97:d8:83:7d:b0:56:74:9d:45:a2:9e:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:6A:1C:A8:CA:A3:CE:45:DE:B9:88:67:DA:AB:10:27:B4:F3:7B
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:6c:89:93:5f:f2:ee:30:86:7d:b8:d3:c5:c1:8a:4b:eb:
         c1:e9:e6:12:78:87:c5:a3:96:8a:f8:03:61:c0:28:e4:de:5f:
         5f:94:ad:9f:1e:ef:f9:5b:bf:40:61:c1:0b:88:cb:1a:43:3c:
         c1:df:b7:e6:ab:b5:a7:95:0a:4c:9c:24:0f:eb:de:c8:dc:0b:
         8c:87:5d:c5:e4:cd:10:d2:49:bd:6f:10:f9:28:88:98:55:5e:
         1d:4e:8b:05:00:09:f0:0f:d7:0c:06:7d:eb:76:ea:f2:0f:c8:
         db:97:2c:38:2b:50:38:c0:be:25:67:7a:65:82:cf:2b:48:d0:
         9c:bf:b4:3e:30:00:5b:70:3a:79:00:c5:01:5a:64:e5:38:33:
         1f:6f:e6:c6:2c:18:89:eb:b6:67:7b:93:51:8a:0b:f3:c3:d8:
         85:56:af:28:eb:f0:ff:d4:1a:c9:d8:65:ca:11:35:33:36:6d:
         63:bc:ff:c1:01:4a:d4:61:ab:1b:b3:93:2f:b1:70:8d:14:61:
         83:90:bb:7d:85:f9:62:92:e5:60:bf:94:f6:95:9a:17:b5:1f:
         09:9d:fb:7c:d7:83:ce:a3:0b:ea:3c:dd:53:77:c5:94:80:9a:
         cf:27:b4:4d:0e:d1:75:0f:99:f9:1d:b1:8d:13:ee:28:cb:7c:
         9d:21:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org