Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa
File:                     3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa (raw, json)
Hash identifier:          RqQkltriDoUWvFw5v9HT7tBCX11asIler7V3V55dX/E=
Subject key identifier:   A9:A0:E0:8C:C1:7B:89:96:84:51:3D:9A:06:FD:85:62:79:13:01:E8
Certificate issuer:       /CN=8490FC868F718F720126775187964F0F493B0CEB
Certificate serial:       64CC7DE157CFDA4CDBF1EA91FE96A49A71897E53
Authority key identifier: 84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa
Signing time:             Tue 05 Mar 2024 18:12:39 +0000
ROA not before:           Tue 05 Mar 2024 18:07:39 +0000
ROA not after:            Tue 04 Mar 2025 18:12:39 +0000
asID:                     52327
IP address blocks:        190.111.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cc:7d:e1:57:cf:da:4c:db:f1:ea:91:fe:96:a4:9a:71:89:7e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8490FC868F718F720126775187964F0F493B0CEB
        Validity
            Not Before: Mar  5 18:07:39 2024 GMT
            Not After : Mar  4 18:12:39 2025 GMT
        Subject: CN=A9A0E08CC17B899684513D9A06FD8562791301E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:2e:c8:fd:c4:ef:d8:ab:2d:02:94:74:e1:
                    5a:c8:e4:d9:a2:3c:bb:7c:1a:39:e8:34:4f:55:4d:
                    76:3f:c2:ab:89:e6:41:b0:08:f9:cb:9d:11:f7:db:
                    b3:23:7a:c7:f0:95:fa:b1:f2:14:10:3e:39:8a:dc:
                    52:b9:70:31:e4:83:b2:e8:37:a2:f3:eb:f6:e3:22:
                    14:97:49:9d:b6:89:21:2c:db:33:18:d9:32:57:19:
                    d8:5b:c9:52:47:c8:c4:a6:97:db:ca:05:5c:93:29:
                    60:a7:b9:7a:08:b7:e8:fd:44:62:26:a2:4c:aa:96:
                    eb:43:04:62:14:0c:45:5b:cf:00:16:df:9c:e0:d7:
                    b9:ae:80:3e:61:72:4d:b5:96:cf:23:f9:df:0d:63:
                    30:eb:aa:4c:af:46:ac:ae:f5:0e:00:af:3d:fd:24:
                    32:3d:2b:70:c3:a1:da:ae:9b:2a:a4:5e:5e:4a:0e:
                    3f:d0:ce:1c:3f:71:9e:92:ca:67:f3:b8:28:ff:8e:
                    2d:de:d9:6a:a3:2d:88:b2:7c:27:68:1a:61:c1:db:
                    88:22:5e:a0:7d:19:3c:dc:4d:34:a8:c7:bd:f6:8d:
                    0d:74:9a:00:1c:05:1a:eb:f1:af:37:f9:a2:5a:c4:
                    f0:3e:d3:92:41:ed:eb:cc:f8:e3:81:8f:d6:15:eb:
                    04:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:E0:8C:C1:7B:89:96:84:51:3D:9A:06:FD:85:62:79:13:01:E8
            X509v3 Authority Key Identifier:
                keyid:84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:5c:75:d0:fb:38:a6:dc:86:e2:44:c1:3f:18:ef:33:82:12:
         fc:8d:6c:01:ae:43:79:f9:0a:c3:fa:58:c5:0f:8a:fa:a5:f5:
         43:e8:37:3f:ca:9e:35:86:4a:a0:33:b7:71:4f:26:c3:52:71:
         e0:27:35:3d:bc:f9:d3:71:bb:88:83:ed:be:fb:41:cb:d7:15:
         f6:f5:f3:31:b3:46:ec:19:b7:a2:dd:b4:e5:ea:6a:63:66:bf:
         6b:7e:4b:73:d6:ff:c6:00:9c:9a:29:e9:3a:43:67:51:98:b8:
         1b:a8:af:b3:c4:84:93:45:15:fc:f4:eb:54:37:ab:3a:4c:1a:
         78:f6:fa:33:ff:2b:eb:b9:9d:3f:00:aa:96:03:aa:2b:28:49:
         4b:60:44:15:e2:4a:6f:7d:ec:41:0e:a8:7c:fa:ff:93:f3:5e:
         e5:af:75:47:45:79:63:bf:9a:4f:44:4c:65:74:f3:c9:6d:af:
         b9:e3:45:41:95:7d:82:e1:c5:82:14:71:9c:b6:29:79:06:7a:
         c1:72:53:12:4a:0d:81:ba:06:62:05:6f:e8:2c:70:7b:04:f5:
         ac:f6:cb:a0:b4:5b:cd:55:c8:79:76:7b:3d:db:4f:d5:5c:9e:
         a8:87:b9:03:e2:a6:6e:61:f4:a0:c9:ef:d6:d4:7e:07:e1:61:
         41:a1:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:54:07 2024 by rpki-client on console-fra.rpki-client.org