Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31332e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e31332e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          HIDYrD0EcTtOA6C1KH2p8Bc7eAjE2oeYR7QnAFrLKps=
Subject key identifier:   7B:AD:71:A3:09:1E:37:24:64:C4:5B:E1:91:58:F5:47:BE:DB:87:47
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       1507DAA47F47B0D2EB77E8ECF68865BD1F10470E
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31332e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:49 +0000
ROA not before:           Tue 05 Mar 2024 18:03:49 +0000
ROA not after:            Tue 04 Mar 2025 18:08:49 +0000
asID:                     262191
IP address blocks:        190.109.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:07:da:a4:7f:47:b0:d2:eb:77:e8:ec:f6:88:65:bd:1f:10:47:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:49 2024 GMT
            Not After : Mar  4 18:08:49 2025 GMT
        Subject: CN=7BAD71A3091E372464C45BE19158F547BEDB8747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:69:8e:f5:39:60:9f:dc:70:8a:41:19:28:
                    a3:94:b1:31:ca:0e:36:f6:d0:f5:68:50:c6:50:ff:
                    a7:0a:e2:45:91:0e:61:71:ff:d6:72:c0:b2:b8:30:
                    3b:10:b8:f1:ed:15:1d:7a:9b:a9:b8:b6:18:c7:4c:
                    3a:7d:73:08:da:ab:43:6a:fc:bd:57:66:cc:da:37:
                    f4:e3:c2:b1:1d:ab:bd:ed:16:05:f9:40:71:09:91:
                    7a:35:83:03:11:08:9b:73:40:c4:7d:1e:8c:aa:45:
                    ec:e9:5c:83:72:1d:e8:a0:27:a9:d0:0e:f5:8c:9a:
                    9d:2d:64:85:ad:ce:57:3c:c4:ef:28:d9:0e:1d:8d:
                    8c:94:dc:d7:7d:dd:40:ba:f2:c6:8b:fa:87:d0:d2:
                    05:40:7e:6b:5c:7b:05:cd:3c:d3:89:da:1b:ba:f4:
                    6c:a0:e3:f5:ec:7b:d0:f1:c4:b9:5d:28:7e:af:9c:
                    b0:0b:65:fe:03:a4:5f:3e:3d:bf:e1:61:ec:54:88:
                    ff:97:14:56:aa:07:fc:da:2e:28:4e:eb:8e:46:e3:
                    5b:79:4c:ae:7e:33:cb:cc:84:c9:f2:ce:ad:2d:bc:
                    5c:12:80:35:7f:0f:e4:9f:ad:08:44:e3:cc:12:24:
                    17:f9:dd:93:98:47:69:b1:a3:17:99:92:e8:4b:e4:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AD:71:A3:09:1E:37:24:64:C4:5B:E1:91:58:F5:47:BE:DB:87:47
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31332e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:cc:0f:8a:ec:0e:e3:1a:ce:55:5a:c7:65:f0:58:2e:dc:
         b9:f4:1f:0c:79:1e:a5:a2:76:a1:30:cb:93:62:22:29:5d:22:
         7c:7c:39:f8:5a:ab:24:9d:89:58:83:da:b3:87:56:96:db:24:
         7f:be:ae:cb:14:59:6c:ee:cb:07:50:d3:2e:ef:77:5a:b2:ec:
         5c:09:28:24:23:8a:6b:79:b0:19:b3:1a:11:76:70:fe:05:ba:
         13:3a:8a:29:01:51:c7:f1:90:ec:36:5b:1d:cb:85:70:65:6d:
         11:ae:6a:c6:f7:10:45:aa:07:8c:7c:1e:8b:0c:8e:bb:97:e5:
         84:3d:4f:45:b9:c2:ca:4c:9e:6c:5f:56:25:97:a3:47:bd:a2:
         c2:d6:78:67:8a:62:e9:d5:eb:39:72:3e:d5:77:b0:97:0a:87:
         73:f0:c0:e1:e6:48:d7:82:ce:af:bd:c5:40:56:f4:e9:89:23:
         4a:f5:a3:8e:1e:10:72:5d:df:eb:5a:49:cd:e6:ef:16:3e:f2:
         32:d7:8c:12:e5:34:9a:e7:eb:56:52:58:3d:4b:d7:e9:d9:91:
         cb:89:5d:70:d1:c5:05:4c:bb:29:fd:63:7b:01:cb:68:bd:3c:
         84:60:97:b1:d3:59:83:58:15:c6:29:0c:a9:5d:8c:5d:10:28:
         c0:11:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:00:58 2024 by rpki-client on console-fra.rpki-client.org