Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa
File:                     3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          Zc0nls44hR98gys8MLnqmnq5aSKYjtZd/QKrptbOIfk=
Subject key identifier:   7D:5C:7B:F3:E5:D1:88:D3:0B:8A:CA:CD:7C:3F:4C:4C:B4:6C:3F:6D
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       549A97212EDEE8F6FEBBA4D9D13EA01D65FD8667
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa
Signing time:             Tue 05 Mar 2024 18:00:42 +0000
ROA not before:           Tue 05 Mar 2024 17:55:42 +0000
ROA not after:            Tue 04 Mar 2025 18:00:42 +0000
asID:                     262187
IP address blocks:        190.216.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9a:97:21:2e:de:e8:f6:fe:bb:a4:d9:d1:3e:a0:1d:65:fd:86:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:42 2024 GMT
            Not After : Mar  4 18:00:42 2025 GMT
        Subject: CN=7D5C7BF3E5D188D30B8ACACD7C3F4C4CB46C3F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:68:c0:ac:c5:e2:2b:1c:09:45:61:81:51:
                    8a:e0:16:f6:8c:c8:33:b1:53:1b:99:c5:27:74:4f:
                    c4:29:e0:35:21:94:12:1c:73:57:33:73:e4:af:f2:
                    aa:b2:3a:4e:ce:d0:80:75:ba:82:e6:93:c0:a2:da:
                    28:84:4f:2b:8a:32:95:56:d9:d2:2e:94:4b:7c:88:
                    9c:f6:a6:c9:13:05:8d:d5:c6:cf:3b:dd:f4:8b:99:
                    f9:3c:63:7d:9b:d7:43:26:9e:83:61:00:57:6e:91:
                    e9:3a:ad:64:90:78:58:30:dc:8b:8f:c0:fa:87:25:
                    4c:9a:a6:61:5e:b8:98:22:7d:17:16:56:85:95:f8:
                    8d:0c:60:d0:a4:0a:ef:5e:52:41:9f:57:a8:07:b1:
                    b0:63:16:8f:78:84:97:ad:32:78:bf:f0:f5:b4:ee:
                    52:82:5d:9f:08:4d:fa:d5:c9:03:3b:4c:5a:9c:09:
                    a7:75:34:b7:29:a1:16:62:8d:85:9f:59:0c:5b:33:
                    76:57:58:f3:72:2c:1f:b9:62:86:60:f1:81:24:c8:
                    3c:e7:1a:93:7f:3e:ff:a5:eb:de:2d:13:1b:79:b1:
                    2f:bb:56:1b:48:11:5d:39:63:52:21:25:12:2b:6f:
                    07:37:1a:76:93:f8:df:f1:aa:17:ec:88:43:b6:c9:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5C:7B:F3:E5:D1:88:D3:0B:8A:CA:CD:7C:3F:4C:4C:B4:6C:3F:6D
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e33322e302f32342d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:7b:eb:f5:36:10:d8:0b:a3:50:4d:ab:28:c1:31:7e:2c:
         6c:1c:38:1e:f0:00:1b:bc:8d:49:b4:a4:50:d2:0d:fb:92:2e:
         08:01:2a:95:fd:04:99:ed:5a:64:3a:4d:e8:48:85:e6:ce:3a:
         f8:37:d6:76:63:6a:e6:da:60:5d:a1:4c:41:97:fd:9e:b3:df:
         0f:ce:5d:80:a0:fb:ac:8f:b9:b9:9e:5e:1f:10:25:84:03:9e:
         4c:34:df:f2:19:c7:5d:0f:cc:49:3b:d3:0a:b3:a6:01:8a:9d:
         53:d2:0a:b5:57:a3:a3:45:76:fe:f0:a0:05:85:67:4e:8c:6a:
         50:40:bb:12:e7:ff:f5:e5:92:ae:be:08:65:58:96:78:8e:3c:
         5f:2e:62:d0:c6:f9:d4:39:6c:92:f5:4c:68:ea:68:9d:ce:1f:
         36:32:6d:ff:83:1f:72:f2:cf:05:99:5f:df:38:0e:79:67:4e:
         36:72:f9:5c:7f:58:ef:08:b5:13:62:5b:df:b5:67:70:0b:3b:
         eb:e9:f5:4a:15:e5:9e:70:24:cc:91:f2:e4:2d:28:cc:a6:6b:
         7b:b3:95:e2:52:f2:ed:04:7d:b5:f0:74:e3:17:5d:0f:fb:32:
         20:f2:f0:87:67:82:6a:45:d7:53:ab:6f:32:e8:6e:19:41:13:
         9c:60:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org