Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33382e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e33382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          Qt2v9xy1kzH5qmmMSj7Kv4Na+LEY5cGFOECtlxo68Io=
Subject key identifier:   E9:83:0C:5F:1D:6B:63:C2:3C:D3:2D:66:B6:09:ED:BE:1D:33:C2:68
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       2720366D3653EB0D094D1F887177EC44B2BD28D4
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33382e302f32342d3234203d3e20313734.roa
Signing time:             Tue 05 Mar 2024 18:10:27 +0000
ROA not before:           Tue 05 Mar 2024 18:05:27 +0000
ROA not after:            Tue 04 Mar 2025 18:10:27 +0000
asID:                     174
IP address blocks:        190.93.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:20:36:6d:36:53:eb:0d:09:4d:1f:88:71:77:ec:44:b2:bd:28:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Mar  5 18:05:27 2024 GMT
            Not After : Mar  4 18:10:27 2025 GMT
        Subject: CN=E9830C5F1D6B63C23CD32D66B609EDBE1D33C268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:84:a1:e2:68:51:3e:fc:79:a9:75:94:20:
                    76:3e:04:2a:d0:91:22:08:57:b4:9f:33:72:97:a7:
                    c2:61:fd:83:1f:ab:11:d4:8f:9a:1a:3f:69:b0:34:
                    ff:43:c2:7f:da:53:db:51:49:1f:ca:2e:a0:c0:31:
                    10:6e:73:bb:e9:80:ec:c2:5b:d6:22:cd:2c:99:16:
                    05:f6:73:6c:82:c2:13:3b:0c:80:d0:c6:4b:e7:77:
                    78:ad:cb:e0:87:88:51:e9:db:ac:0d:cf:88:56:5f:
                    be:ac:e8:6e:a3:e4:41:07:24:25:c3:a1:ad:e4:c4:
                    02:cb:a3:c7:a6:d7:cb:dd:b2:4d:c1:4c:e3:ea:1c:
                    44:2e:be:dc:83:b2:7c:57:65:6f:11:74:4b:23:01:
                    3f:21:26:b6:f0:9f:31:0a:b3:8a:9e:7d:3a:82:28:
                    cf:41:cb:b6:08:dc:c0:d1:95:45:f5:b6:14:2f:6c:
                    0f:6e:81:ea:0e:d8:e2:b2:0c:91:3b:ff:27:34:1a:
                    09:b0:1a:b6:94:e1:9e:b2:30:99:9f:2f:81:f9:45:
                    86:55:a9:90:cb:74:f2:aa:b4:22:56:d0:0d:53:d4:
                    d6:75:77:78:58:00:69:7b:1e:26:f7:13:cb:3e:f2:
                    d8:64:9d:1e:24:ef:8d:e1:0c:be:12:11:0b:db:c0:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:0C:5F:1D:6B:63:C2:3C:D3:2D:66:B6:09:ED:BE:1D:33:C2:68
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33382e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:0b:c5:cf:34:57:6f:11:85:88:54:14:80:74:74:15:cf:
         2e:70:bc:d9:a4:10:db:b4:66:c0:26:ee:cf:3f:8d:80:4c:9b:
         64:0f:a8:b0:bd:29:cf:76:1b:7b:e2:ce:63:33:bb:ec:d6:df:
         2c:55:ba:78:e2:50:9b:fc:93:cf:d0:a1:8f:97:97:2b:2f:2a:
         a8:66:26:b8:d7:1a:1e:16:5f:59:55:7a:e3:7a:e0:c4:bf:cf:
         b6:84:72:1e:d6:e3:a2:9e:59:14:6e:71:db:f3:3d:6a:b9:6f:
         00:f3:d9:8b:2f:6b:c5:60:ec:3b:16:3e:c6:8d:0a:e8:38:fe:
         24:f1:7d:11:29:0f:2c:20:90:b8:d2:53:14:51:e5:ca:4a:67:
         a3:c5:a1:b9:0b:e9:9d:d1:18:d2:14:85:94:cc:60:23:04:c7:
         23:88:5c:c7:09:1a:97:cb:2c:e2:29:1b:1d:f7:d8:6a:39:93:
         c9:d9:af:53:c0:c7:42:5f:0b:18:bd:42:22:83:3a:e8:27:c7:
         06:bb:d4:e6:d7:0b:9b:0b:01:4c:a3:18:4f:e4:92:0f:9c:fe:
         b3:56:f5:e0:73:79:18:2e:df:8b:64:6f:e7:9a:ef:02:d7:56:
         ee:ec:01:d4:fe:65:ab:09:fa:7c:8d:12:6b:3f:b1:e7:51:51:
         c2:1f:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:45 2024 by rpki-client on console-fra.rpki-client.org