Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235302e302f32342d3234203d3e20323731393034.roa
File:                     3139302e3231362e3235302e302f32342d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          xMl8bMA/5bsduBMwP0v5mENkfFuQIIblIheEWCUruTs=
Subject key identifier:   FA:F5:94:12:5A:7D:72:F3:FF:5C:FF:CF:C0:45:EF:45:C8:B4:DB:43
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0BCE39C5945790AA9BEC89EFA1C5B368E8E5C09B
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235302e302f32342d3234203d3e20323731393034.roa
Signing time:             Tue 05 Mar 2024 18:00:50 +0000
ROA not before:           Tue 05 Mar 2024 17:55:50 +0000
ROA not after:            Tue 04 Mar 2025 18:00:50 +0000
asID:                     271904
IP address blocks:        190.216.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 19:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ce:39:c5:94:57:90:aa:9b:ec:89:ef:a1:c5:b3:68:e8:e5:c0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:50 2024 GMT
            Not After : Mar  4 18:00:50 2025 GMT
        Subject: CN=FAF594125A7D72F3FF5CFFCFC045EF45C8B4DB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:c3:e7:03:2b:21:a0:a8:73:5e:3c:ba:17:
                    b3:71:73:9b:2d:01:1b:2f:0a:b9:b3:0c:98:fa:43:
                    c5:b0:0e:25:8a:46:95:95:e8:8c:bf:50:d6:d4:43:
                    b3:78:1f:4b:43:3b:e5:51:d2:d2:1e:86:25:45:98:
                    7b:63:1b:75:df:f5:b9:97:5c:a0:eb:01:6b:8b:be:
                    96:af:ab:da:92:d9:d4:52:8d:28:89:55:5a:48:bf:
                    41:8f:9c:65:91:7c:c4:db:84:39:b3:07:ae:c3:85:
                    90:ff:b8:1a:a2:26:5b:20:4f:a4:2d:5f:b5:e5:70:
                    05:3c:33:03:62:bb:f2:8e:6b:24:02:ed:96:e8:ed:
                    14:04:5d:be:c3:e0:5b:c9:04:7a:cf:59:9c:49:c3:
                    4b:c6:e7:21:73:2b:6e:3a:57:e9:87:1b:1c:77:b4:
                    24:04:43:d8:e4:ff:68:52:07:47:45:a6:1b:18:d0:
                    38:30:48:e9:7f:f5:7a:d1:df:5c:d9:c1:37:ff:70:
                    ff:68:02:90:d1:8b:ce:36:43:7b:fd:1a:cc:e1:cf:
                    7c:bb:f9:41:bd:17:b8:37:75:ce:50:11:b2:5a:4e:
                    0e:0a:e0:0a:ff:d0:e8:a5:ee:03:41:2c:e2:e4:e5:
                    3a:f0:d7:11:80:bc:89:4e:dd:2a:ea:67:4f:c4:e6:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F5:94:12:5A:7D:72:F3:FF:5C:FF:CF:C0:45:EF:45:C8:B4:DB:43
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235302e302f32342d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:c8:42:8a:ff:27:1a:40:16:d1:f2:3f:66:b5:1b:ce:a4:
         49:35:68:cd:d9:ee:d6:db:2a:97:aa:e1:0b:80:b7:db:11:fc:
         ee:13:73:75:f3:c0:58:dc:06:98:d4:46:b6:6a:a9:fb:40:64:
         23:bc:9e:43:db:d6:ba:5b:bd:9c:d9:77:23:69:78:24:40:bb:
         c8:06:e0:56:04:8e:24:43:a0:6c:95:09:60:3e:b6:85:b8:63:
         84:ee:47:a3:c0:18:96:14:97:74:53:cd:d2:d8:09:fe:e9:9a:
         dc:f0:ea:ce:60:99:87:08:eb:e8:fe:a7:25:51:3f:94:96:48:
         67:53:1d:c1:5e:ac:e7:6b:ee:5b:6f:15:54:d0:c1:94:29:2a:
         13:44:bb:0f:b7:c1:f6:39:14:49:cb:e4:c3:a1:3b:0b:24:35:
         be:e1:c6:6f:46:20:dd:f9:bf:9d:81:39:f4:ed:28:f3:69:28:
         0c:a4:bc:37:3e:50:48:1f:b3:e0:db:6f:c6:87:60:dc:d3:26:
         fd:7d:7e:d5:f3:ea:22:73:fc:ae:8c:c3:ac:15:b1:cb:ee:fe:
         68:d3:3b:34:19:54:ba:01:64:a1:ce:d1:c1:a4:b1:ad:c2:e7:
         f9:19:82:25:72:b3:51:6c:3b:a5:a8:cd:cb:d2:89:2c:9e:e4:
         8d:dc:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org