Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e36312e302f32342d3234203d3e203532343434.roa
File:                     3139302e3231362e36312e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          owSdy6bl0YHIudOTrbDnGlYJ6kmqHoMmbnkeZEBO4LM=
Subject key identifier:   0C:76:B2:DB:48:D0:A1:6B:66:DF:05:3D:E3:BB:75:63:C6:49:07:BA
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       47A3C292E1F07E12369C419BDBEEFE2B5821D294
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e36312e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:00:40 +0000
ROA not before:           Tue 05 Mar 2024 17:55:40 +0000
ROA not after:            Tue 04 Mar 2025 18:00:40 +0000
asID:                     52444
IP address blocks:        190.216.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a3:c2:92:e1:f0:7e:12:36:9c:41:9b:db:ee:fe:2b:58:21:d2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:40 2024 GMT
            Not After : Mar  4 18:00:40 2025 GMT
        Subject: CN=0C76B2DB48D0A16B66DF053DE3BB7563C64907BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:07:68:8a:58:ab:66:9f:82:6a:dd:d7:cd:
                    e4:83:4a:32:ce:2d:b6:77:1a:bd:f3:2e:68:1b:44:
                    2c:a8:72:f5:c4:b1:55:38:4e:9b:c6:ac:ea:97:4b:
                    62:ae:f0:5e:89:34:26:ca:8b:0f:30:93:be:54:a1:
                    71:30:2a:91:59:59:3b:1e:b4:5c:f3:92:2d:85:1b:
                    4a:94:fd:86:60:87:a5:d6:cc:de:57:e6:9e:ee:b2:
                    ba:27:11:ef:00:a0:b7:b9:0e:a6:45:1f:47:2f:36:
                    54:4c:77:f9:f8:d3:f9:d3:13:84:2c:91:07:4e:41:
                    73:74:f4:6e:0e:ef:b2:d3:ad:79:96:b3:54:8c:93:
                    99:fd:a7:e8:c6:96:66:94:2b:1f:1d:17:eb:ca:6b:
                    19:57:ad:f6:ba:1a:15:ba:88:d6:29:76:7a:ed:42:
                    59:df:01:6a:3b:61:24:de:80:31:6b:ac:4b:ab:59:
                    6b:45:60:2c:7c:f7:31:46:de:cd:6f:16:53:68:78:
                    04:6e:7d:7f:21:d2:3b:a2:6f:1c:95:1d:20:2e:06:
                    24:f5:c5:84:4c:b6:6c:a0:dc:66:6e:9e:e7:0c:2c:
                    90:ba:b3:b8:04:b4:91:5c:2f:73:aa:94:22:c5:df:
                    0d:4f:68:eb:e4:f9:56:98:1f:9c:28:e8:4d:1d:ff:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:76:B2:DB:48:D0:A1:6B:66:DF:05:3D:E3:BB:75:63:C6:49:07:BA
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e36312e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:df:9e:cd:e7:e4:f8:3c:7f:1f:9b:78:fe:99:cf:15:51:
         1f:98:73:1d:5e:08:84:a0:9a:73:b7:44:9b:ef:ed:cb:23:2b:
         e6:be:4a:00:e1:f3:9f:5f:eb:e1:e0:cb:fd:f0:2a:0a:25:27:
         78:d5:ea:68:e4:79:9d:e6:2c:71:26:28:ee:79:28:e1:88:da:
         23:49:dc:51:04:58:2a:5b:0b:95:e3:ea:7d:98:2d:e4:e3:2e:
         08:2f:5b:2b:6c:d1:f3:7e:aa:83:d9:e1:7f:ce:e1:f9:a7:f0:
         f8:89:f5:2a:a9:43:5b:c0:37:fd:af:a0:fe:3e:54:e2:64:f8:
         68:8c:6c:b8:2b:50:ed:8a:ed:8a:79:47:b5:07:be:82:df:34:
         1f:fc:2b:bb:d0:3d:65:ad:97:a6:75:14:17:a8:37:c1:5c:98:
         50:d4:35:bb:5b:86:3b:16:a3:49:0c:ac:c1:ad:5f:fb:32:49:
         8d:ca:4a:de:33:f9:fd:60:e6:0b:f1:c0:c9:61:26:8b:69:dd:
         f6:45:26:8b:cc:b0:d6:13:87:78:18:53:dc:d4:03:b9:74:d0:
         9d:3d:a1:1c:d1:98:c5:69:c1:83:df:23:2d:51:3a:c6:9e:a8:
         9b:36:a0:fb:4f:56:99:6c:5c:3c:f8:4a:e9:9b:80:ed:18:14:
         b4:92:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:19:22 2024 by rpki-client on console-ams.rpki-client.org