Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa
File:                     3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          ZKT+/EH3/bUR7mirvb6RYPIneMiOSNuDSzrnYW+6YdY=
Subject key identifier:   AC:8E:4C:CE:73:9B:5A:1D:08:7E:0A:EF:E8:6E:39:EE:5D:2F:27:EF
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       6AA1F2E0D214506F0E3A99206A962F2430473AAD
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 05 Mar 2024 18:00:44 +0000
ROA not before:           Tue 05 Mar 2024 17:55:44 +0000
ROA not after:            Tue 04 Mar 2025 18:00:44 +0000
asID:                     263771
IP address blocks:        190.216.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a1:f2:e0:d2:14:50:6f:0e:3a:99:20:6a:96:2f:24:30:47:3a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:44 2024 GMT
            Not After : Mar  4 18:00:44 2025 GMT
        Subject: CN=AC8E4CCE739B5A1D087E0AEFE86E39EE5D2F27EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:ab:31:1b:4e:45:32:fa:52:1c:ee:e4:bd:
                    f1:3b:f0:ce:08:ee:75:8e:2e:b4:97:51:7e:e5:ad:
                    bc:47:35:96:fc:64:b5:d7:90:11:e6:bf:a0:c8:63:
                    11:3a:19:e2:df:33:33:31:3b:33:ff:d9:c5:dc:22:
                    47:a1:00:4c:dd:14:3c:74:ec:6d:57:e7:87:b7:3a:
                    42:d5:25:c4:f0:61:0d:a9:c1:aa:b9:4a:5a:d3:47:
                    d9:fc:dc:91:de:20:bc:62:0e:90:c4:9d:b0:7e:a5:
                    fe:b2:20:46:b2:2d:2d:5f:cf:66:42:4e:e2:14:9b:
                    67:d9:96:59:46:d5:66:97:4f:d9:6e:60:8a:e7:89:
                    b1:a4:de:a2:ec:9a:16:2b:87:16:ea:9a:bc:af:cb:
                    50:14:11:dc:68:34:4e:da:a9:6c:bb:3a:e5:6c:4b:
                    d1:69:57:23:6d:a9:c1:39:36:40:f1:14:09:37:98:
                    b9:4c:8f:fe:e9:4d:97:37:ec:38:5e:f3:d5:0c:53:
                    8a:ea:d7:d7:fc:ce:ef:16:84:23:38:70:46:16:31:
                    02:7b:00:75:0e:1f:64:77:18:1b:d9:91:c9:39:f9:
                    5c:11:5f:42:a6:04:55:0d:24:fd:e4:f3:1f:1f:be:
                    51:db:4a:77:f9:84:5d:d0:36:cf:ed:90:c6:a0:a9:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8E:4C:CE:73:9B:5A:1D:08:7E:0A:EF:E8:6E:39:EE:5D:2F:27:EF
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235312e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:88:1f:56:fe:35:ed:49:d3:87:db:85:68:a1:c5:19:4f:86:
         cb:ef:b1:f2:fa:0e:a4:35:59:64:3b:6f:1f:d3:33:e8:91:25:
         0a:2a:d6:11:35:90:e8:87:9a:10:cf:e7:6d:31:ec:e7:fc:06:
         b5:4b:ce:ad:ab:f6:4e:71:0b:1d:b8:bc:c1:ca:35:0f:66:67:
         83:af:f5:38:c2:c4:00:c1:95:5b:7e:c4:0b:27:e9:64:2f:89:
         3e:f8:4f:03:6c:74:f5:8f:52:49:42:85:cb:ab:7a:fd:3a:54:
         82:14:c3:dd:a1:bb:81:cc:91:f4:06:b9:fa:e3:77:43:c0:85:
         94:4a:b4:80:ee:b4:fd:2d:06:1d:97:ae:6a:a5:12:f7:2e:15:
         89:3e:a3:a4:03:5c:23:01:fb:2d:64:44:58:17:48:22:5a:1d:
         91:bd:28:c6:e0:51:0b:89:e7:bc:65:1f:bb:f3:5b:74:35:b6:
         d5:50:65:d1:93:e1:7e:1b:2f:1e:28:08:17:1d:cc:c6:fa:1f:
         4f:93:70:4e:ed:b6:07:ad:91:87:81:40:0d:64:e1:97:f8:70:
         f6:2b:95:1a:33:b4:b3:2d:18:49:1f:3f:35:41:15:0f:96:36:
         d3:ae:af:6b:62:13:e7:43:f1:67:d0:fc:47:8f:30:92:d4:27:
         ba:1f:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org