Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3136382e302f32322d3232203d3e20323637383438.roa
File:                     3139302e39372e3136382e302f32322d3232203d3e20323637383438.roa (raw, json)
Hash identifier:          Y4YvfPZZ+02rTYsNQDIe4ywWQJ3pqqTnn5LiJ2jIAgY=
Subject key identifier:   92:0F:83:44:A9:78:81:A3:38:D8:0E:2E:4F:E4:3C:E8:75:5F:3C:E1
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       1FAFE5BD7BDEA2A8133F39A29B319BF548C49772
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3136382e302f32322d3232203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:25 +0000
ROA not before:           Tue 05 Mar 2024 17:59:25 +0000
ROA not after:            Tue 04 Mar 2025 18:04:25 +0000
asID:                     267848
IP address blocks:        190.97.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:af:e5:bd:7b:de:a2:a8:13:3f:39:a2:9b:31:9b:f5:48:c4:97:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:25 2024 GMT
            Not After : Mar  4 18:04:25 2025 GMT
        Subject: CN=920F8344A97881A338D80E2E4FE43CE8755F3CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:db:b6:05:3d:68:ef:ca:7f:f6:7c:ed:f0:
                    3a:ee:80:db:86:2b:d4:93:ad:f3:49:99:ec:0c:ce:
                    c7:1a:e2:39:1b:28:49:28:58:5e:7a:95:ec:c2:37:
                    2a:50:e6:d6:e6:56:40:86:8a:ba:2f:a3:99:5e:e0:
                    0d:e3:4b:d5:db:a7:86:4e:36:fd:6f:41:ca:d9:7b:
                    2b:8f:d5:bc:6f:8e:ed:03:20:93:8c:3f:ec:e7:d2:
                    02:c9:20:34:1e:de:31:e7:59:8c:2a:be:f4:ca:47:
                    f3:c2:d9:f1:ff:e8:f2:8a:ef:2f:70:38:45:ac:6c:
                    64:14:50:66:25:82:9d:80:5d:28:47:7d:61:8f:ff:
                    00:0e:6f:a7:de:db:dc:78:1c:9a:d4:e3:1e:eb:bd:
                    67:d9:a8:04:d8:1f:77:65:a2:5d:1a:d4:b2:8d:17:
                    37:c2:46:36:54:ae:b7:81:7b:ee:a9:10:d5:70:8b:
                    ce:61:bf:b7:c7:0a:12:7f:96:24:81:92:1c:70:cd:
                    a4:de:f1:ff:b6:34:5f:1b:8c:84:c5:fa:cd:6d:cb:
                    b7:e8:ae:40:0d:6a:61:79:b7:10:9b:80:a2:ac:26:
                    61:98:cc:36:4f:35:ad:f9:4a:ce:a9:ff:8e:5e:a5:
                    cc:d5:8c:ff:64:f0:4b:8b:1f:93:0e:ab:8c:46:ee:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:83:44:A9:78:81:A3:38:D8:0E:2E:4F:E4:3C:E8:75:5F:3C:E1
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3136382e302f32322d3232203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:2f:62:d0:00:68:39:6a:33:af:0a:e5:da:74:8b:71:b0:
         8e:32:87:b2:65:99:65:35:79:41:73:7b:5e:de:a3:a2:40:b8:
         c6:a3:e8:0e:03:dd:d0:2e:4e:53:4e:01:ff:40:0b:22:38:48:
         87:b0:7f:87:af:27:5e:61:66:83:51:08:a4:cd:1a:b9:84:fe:
         6f:e0:37:a0:43:31:8c:1d:01:7e:f2:56:2f:ae:04:61:cb:05:
         f1:a7:fc:3d:6a:66:2e:74:e6:55:3b:c1:b8:49:34:74:62:d5:
         d0:a6:1e:af:28:1d:6a:80:fa:23:c6:18:f0:48:08:2f:cd:97:
         c3:18:64:9a:b0:db:b3:d6:43:99:26:c8:e8:7c:05:53:17:85:
         17:7b:04:ed:9a:96:d1:3a:20:66:a0:f7:06:39:0a:0b:15:02:
         4a:11:2c:b4:c4:96:91:fb:c2:43:a5:ff:48:7b:66:ad:09:57:
         d1:11:47:e2:0d:42:80:69:d7:c5:a2:fe:6b:ab:b3:bd:49:c1:
         c5:d2:3d:49:94:7f:b7:dd:79:b0:ca:9b:63:ff:0a:ff:16:68:
         e6:29:52:64:59:23:7e:d3:cf:5d:51:92:55:4e:b0:68:35:90:
         12:f8:0b:5d:f5:36:f4:18:cd:44:86:4c:f3:5c:ec:db:9b:66:
         6b:9a:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:56 2024 by rpki-client on console-ams.rpki-client.org