Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203132313839.roa
File:                     3139302e3131322e3230312e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          ax46ir8vzIx3yWApVu9oH3hzoGGvJefDK0cx8d3ixe4=
Subject key identifier:   18:8C:C8:A3:9D:8D:F7:88:5E:23:29:4A:92:82:D8:E6:37:90:D4:51
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       7AD0666A4B6A0ED1D088BA09D13AEAE20AE79CA9
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203132313839.roa
Signing time:             Tue 05 Mar 2024 18:03:58 +0000
ROA not before:           Tue 05 Mar 2024 17:58:58 +0000
ROA not after:            Tue 04 Mar 2025 18:03:58 +0000
asID:                     12189
IP address blocks:        190.112.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d0:66:6a:4b:6a:0e:d1:d0:88:ba:09:d1:3a:ea:e2:0a:e7:9c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:58:58 2024 GMT
            Not After : Mar  4 18:03:58 2025 GMT
        Subject: CN=188CC8A39D8DF7885E23294A9282D8E63790D451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:f6:b2:f9:22:0b:2d:13:87:7a:37:53:51:
                    bb:ff:e1:af:91:8e:10:91:25:99:05:13:79:4f:4a:
                    d7:c6:be:e2:f1:0e:6b:47:3a:4a:ab:f3:8d:90:cd:
                    c1:93:9b:bd:2e:0d:bb:3d:c2:3e:fa:b0:c8:bc:7e:
                    e1:33:ef:13:4b:56:d8:c8:1b:59:93:59:a2:54:4a:
                    87:aa:44:a5:fc:a0:23:95:65:c1:28:d1:84:29:ae:
                    7c:44:4f:d6:e8:a5:a0:06:83:c2:d5:30:4b:45:30:
                    0b:00:a0:4b:db:07:c5:1a:6c:35:7f:d5:20:32:33:
                    a2:89:0b:2d:75:83:54:8a:90:9a:40:ff:c1:4e:7b:
                    e6:f7:b6:f2:13:85:31:4c:91:c6:84:d9:aa:76:ab:
                    48:f3:57:4d:f7:be:d1:47:dd:77:f9:e8:e4:3e:56:
                    0c:d8:2d:ae:bf:d4:7c:41:84:56:6d:74:cf:84:c8:
                    65:28:f6:d2:79:b3:94:c6:55:01:8e:fb:67:91:60:
                    4b:ae:69:1a:30:ad:b0:ce:fd:02:5d:22:bb:6e:69:
                    28:12:4b:94:e1:1f:6d:59:a4:76:4e:4b:82:5e:97:
                    fd:b0:3d:8c:d0:03:2f:80:ac:28:e4:ea:69:3a:b0:
                    a7:c9:11:e9:90:02:61:07:d5:92:fe:ec:67:a9:bc:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:C8:A3:9D:8D:F7:88:5E:23:29:4A:92:82:D8:E6:37:90:D4:51
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:c2:fc:b2:33:3a:7f:0b:78:2e:88:a5:06:1a:f4:ba:82:
         09:1e:91:79:f3:8a:2e:3d:5e:44:e7:1e:04:40:af:a2:fc:48:
         79:f2:70:38:b4:f1:05:29:47:9e:81:93:fe:af:09:cf:7a:7b:
         af:bd:86:02:f2:48:14:7c:14:c0:f2:59:59:d5:86:a5:46:28:
         91:09:b7:ab:25:58:84:06:a2:b2:07:24:50:f8:ff:da:5f:c3:
         42:66:a2:16:d9:6d:2b:89:62:9f:99:8c:d4:1b:51:aa:37:76:
         5f:ba:cb:9b:7a:f8:a6:36:c6:b6:de:bd:d6:9c:da:51:5d:3f:
         bf:6e:06:50:22:63:cf:bd:0e:56:a6:2a:f6:c9:34:8d:b0:84:
         c5:52:6c:f6:49:7f:3b:4c:36:df:e3:b7:94:4f:6a:ce:99:81:
         c4:f8:5e:10:ed:9e:70:90:f6:63:50:5a:10:70:13:07:50:ef:
         48:bb:eb:aa:ea:07:60:52:2d:e6:04:5f:1a:9c:a4:05:71:22:
         55:45:e2:67:eb:e6:71:fe:eb:f4:33:55:a4:b2:70:1e:43:b6:
         ce:c9:60:9d:c8:a1:c5:8c:1e:b1:54:85:e6:83:b1:f9:f6:8a:
         12:43:3f:64:67:23:cd:0d:56:4e:34:64:dc:44:c6:04:bf:5a:
         8a:1a:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org