Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20323632333631.roa
File:                     3139302e39332e37392e302f32342d3234203d3e20323632333631.roa (raw, json)
Hash identifier:          WpVor58y5mhUXr9iCWORUgxrchp9C23nl0MC2H0w5b8=
Subject key identifier:   9F:8C:2A:BF:3B:3A:0F:6B:03:59:B5:7F:28:09:38:30:7D:41:96:FC
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       0EC37E9D122072E951A3B849944BC0B14BE47E01
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20323632333631.roa
Signing time:             Mon 10 Jun 2024 16:55:00 +0000
ROA not before:           Mon 10 Jun 2024 16:50:00 +0000
ROA not after:            Mon 09 Jun 2025 16:55:00 +0000
asID:                     262361
IP address blocks:        190.93.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Jun 2024 13:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c3:7e:9d:12:20:72:e9:51:a3:b8:49:94:4b:c0:b1:4b:e4:7e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 10 16:50:00 2024 GMT
            Not After : Jun  9 16:55:00 2025 GMT
        Subject: CN=9F8C2ABF3B3A0F6B0359B57F280938307D4196FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:d9:1f:ce:f0:a9:f9:24:4b:b6:05:10:83:
                    82:15:3c:63:8a:ac:51:39:94:a7:ca:05:28:87:cf:
                    32:71:36:81:f7:1a:98:64:80:11:79:0d:32:52:85:
                    01:ec:78:9c:c8:4c:5d:d5:44:7d:61:6e:52:63:d4:
                    16:7f:3b:12:1a:1a:4d:c3:48:c9:37:90:55:e6:f7:
                    dc:32:7f:f2:5f:e2:c9:6a:77:37:5a:91:9d:e3:49:
                    16:8e:69:7c:06:b2:a8:3b:40:57:c4:ae:5d:47:99:
                    b4:fd:44:81:4d:12:9b:72:6c:35:1d:63:d9:95:01:
                    64:d9:c8:1a:62:14:c0:42:01:5d:d2:55:9d:54:0f:
                    ae:6e:f4:ae:b7:a4:d4:bb:ec:f7:54:82:73:18:e8:
                    94:8e:b0:c0:da:96:7b:8f:aa:3a:6f:54:6a:1e:4a:
                    80:b2:6e:36:2c:94:7a:e5:b4:b4:ee:3c:8b:70:54:
                    a8:43:82:f8:6d:4b:30:81:e6:d2:15:4d:12:df:cb:
                    3c:f1:14:a2:6b:05:a7:fa:a6:3c:fa:95:c2:df:db:
                    e7:d8:bc:5a:c2:25:28:2a:69:ab:da:8b:be:7d:17:
                    79:50:cf:56:45:74:dc:ef:58:6d:d1:90:62:a0:d3:
                    6d:0f:b6:fd:26:c2:a3:78:dc:8d:1b:07:e0:77:0d:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:2A:BF:3B:3A:0F:6B:03:59:B5:7F:28:09:38:30:7D:41:96:FC
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20323632333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:64:71:4c:18:7f:32:b5:fa:cd:00:77:da:94:13:87:93:
         fc:64:ef:e5:c2:69:82:3a:ac:cb:5b:38:76:a0:e5:ea:4a:dd:
         d6:7c:53:98:f6:b9:c4:7b:02:f0:92:4a:bb:3c:8f:39:0c:d7:
         2d:2b:d7:ae:32:a6:2c:6a:b8:4c:91:dd:56:c0:03:0c:a7:b6:
         a3:dc:e6:de:9d:14:61:ef:a1:f5:eb:2a:22:fd:e9:75:41:ae:
         66:1b:fd:c4:b6:a6:ee:7c:f7:91:87:f8:b9:f7:e0:77:62:1a:
         71:1e:ec:ef:3b:b1:5c:b4:44:0a:4f:ef:1b:52:89:16:8a:ad:
         75:46:78:b9:40:54:46:e5:e9:71:a4:97:0e:56:ce:d7:69:c1:
         5e:28:d1:b6:5a:fb:d8:99:19:90:81:92:6e:09:59:d3:fa:13:
         a7:71:6f:97:75:1a:59:d4:b4:a3:b7:0d:42:97:ec:69:82:88:
         ca:df:99:94:d0:9d:6a:02:5a:6a:52:40:26:15:37:14:71:93:
         f1:73:97:dc:8c:0a:55:e5:e1:28:bd:f2:3a:49:75:b6:da:44:
         12:1d:1b:e8:9f:80:23:37:da:2d:2e:25:e4:7c:26:f1:ae:12:
         12:85:14:b7:ad:7b:85:d8:25:bd:bd:9f:0a:ca:9c:12:39:a0:
         ec:ac:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:55:58 2024 by rpki-client on console-fra.rpki-client.org