Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e35362e302f32342d3234203d3e20323635373538.roa
File:                     3139302e3231362e35362e302f32342d3234203d3e20323635373538.roa (raw, json)
Hash identifier:          Zx1vUUDJWu74JhYZdad/e4YByJ7FL4TUTNwAuNu2Wjs=
Subject key identifier:   F9:FB:37:1F:65:9F:2D:A1:37:0B:4C:26:F8:E0:F9:52:FF:05:F3:31
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1DA277478E5F62898FD6C02E2813D327C35B6FAA
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e35362e302f32342d3234203d3e20323635373538.roa
Signing time:             Tue 05 Mar 2024 18:00:53 +0000
ROA not before:           Tue 05 Mar 2024 17:55:53 +0000
ROA not after:            Tue 04 Mar 2025 18:00:53 +0000
asID:                     265758
IP address blocks:        190.216.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a2:77:47:8e:5f:62:89:8f:d6:c0:2e:28:13:d3:27:c3:5b:6f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:53 2024 GMT
            Not After : Mar  4 18:00:53 2025 GMT
        Subject: CN=F9FB371F659F2DA1370B4C26F8E0F952FF05F331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e7:f9:84:ea:a0:a9:9d:36:c5:cb:d1:8d:42:
                    ef:ff:fa:bb:c0:25:b9:93:26:23:9d:26:06:89:fa:
                    31:91:35:0f:e9:2a:e8:9b:ac:62:50:f3:d1:eb:f6:
                    00:ca:59:c2:8d:62:a0:66:f7:6c:f0:d3:21:f2:f9:
                    64:4a:02:4e:d2:22:b6:9f:72:3e:e7:df:f2:40:00:
                    ef:c5:bc:54:37:d3:ab:f8:d0:62:6c:b9:18:b0:f7:
                    20:b1:c2:89:a8:b8:1d:3f:c4:ff:e6:d2:62:60:3a:
                    71:a4:04:0b:ed:02:a5:53:7a:55:81:0c:79:83:b9:
                    bd:33:6b:ed:a0:df:a9:85:93:c1:4c:e1:b6:71:6e:
                    a7:e7:ec:57:ea:11:df:73:fb:00:fc:95:61:1d:bf:
                    8f:87:d6:b6:f7:e0:e0:d1:31:5d:da:e4:b3:35:e2:
                    51:22:7f:59:6b:ad:60:26:41:74:4b:be:06:d5:24:
                    a0:a6:f7:31:ff:2e:75:f3:58:16:c6:f6:52:7f:de:
                    f0:48:5c:b3:a4:0d:26:0f:c1:0d:f2:35:11:8e:fd:
                    52:4e:53:c4:be:df:d5:12:df:b0:17:81:57:d5:28:
                    c8:e2:e7:40:bc:ca:5f:0f:3a:21:1d:a4:a0:e0:65:
                    b6:db:25:4b:98:1d:8e:7c:a6:a8:18:bb:92:38:a3:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:37:1F:65:9F:2D:A1:37:0B:4C:26:F8:E0:F9:52:FF:05:F3:31
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e35362e302f32342d3234203d3e20323635373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:36:ca:7a:b2:d6:ab:cf:b0:1c:b3:8f:bf:4c:b2:71:db:ac:
         76:75:df:de:38:c5:60:b3:e9:5f:dd:ea:1b:33:df:c6:bc:0b:
         de:4b:07:58:46:c8:71:82:ef:18:28:84:c8:3a:49:3c:2b:78:
         01:be:8a:71:82:87:ae:e3:27:19:a0:4e:c2:03:07:21:13:b3:
         e8:52:b2:70:13:11:72:6a:77:07:06:3e:b6:ca:ff:47:40:7b:
         e3:17:2f:af:2a:f7:bc:d9:e2:59:2f:71:a5:55:c2:56:95:1d:
         13:70:9c:e5:0e:c4:1a:51:40:d9:2f:8b:45:48:83:21:d6:88:
         28:bc:3b:48:38:22:f5:31:8d:ac:18:97:df:4a:38:ae:88:65:
         4c:ac:4e:5c:6b:14:26:b6:ca:ab:88:56:e7:c9:89:d9:9c:33:
         c8:5e:ce:44:1d:de:20:77:9d:9b:1a:9e:db:11:72:67:f0:7f:
         66:0b:d7:20:2c:de:0b:2f:6f:2d:b5:40:e5:82:3d:f2:7b:52:
         c3:82:e2:88:7b:bf:3b:91:5b:fd:fe:44:af:98:ac:69:a2:ef:
         c2:ef:51:91:f3:54:51:2b:91:cc:15:b9:c8:63:51:04:74:bb:
         87:5c:d4:06:f8:83:b0:83:86:4f:f1:0b:b0:70:70:60:d6:de:
         43:d3:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org