Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa
File:                     3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa (raw, json)
Hash identifier:          FDI15bVcnL80q4E+LxnwKXln2wh2Bk6drDycmbr2438=
Subject key identifier:   02:90:FF:24:0F:78:A0:80:5B:9E:A2:47:F1:B4:CD:3B:F2:5F:5F:25
Certificate issuer:       /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial:       684A32206A2D2B0008E367C7E6C1BCF34FE405FC
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa
Signing time:             Tue 05 Mar 2024 18:03:07 +0000
ROA not before:           Tue 05 Mar 2024 17:58:07 +0000
ROA not after:            Tue 04 Mar 2025 18:03:07 +0000
asID:                     52341
IP address blocks:        190.107.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4a:32:20:6a:2d:2b:00:08:e3:67:c7:e6:c1:bc:f3:4f:e4:05:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
        Validity
            Not Before: Mar  5 17:58:07 2024 GMT
            Not After : Mar  4 18:03:07 2025 GMT
        Subject: CN=0290FF240F78A0805B9EA247F1B4CD3BF25F5F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:47:b0:cb:5f:f7:77:24:b4:b5:10:11:6b:
                    87:57:97:a7:42:fa:4a:9c:dc:7c:4d:bb:07:1c:90:
                    8e:b8:fc:5c:13:33:fa:96:78:d0:f4:28:26:58:8e:
                    33:87:09:db:b6:52:f5:2b:52:95:0c:68:b9:89:c0:
                    00:e6:74:bf:d6:10:b3:53:0a:e2:19:9c:28:be:d9:
                    58:52:6e:80:f3:ab:c5:98:eb:6f:f7:1c:0b:c7:86:
                    25:4d:61:86:3e:ea:9c:b3:5a:b1:77:5c:b1:3e:4d:
                    72:5f:d1:b9:97:f5:be:18:66:e6:9a:82:a3:f0:90:
                    b9:73:d1:49:37:ee:eb:93:13:30:ae:a7:f6:c5:89:
                    e0:f0:c9:4a:cf:ce:ad:b2:20:70:a7:17:ad:fb:23:
                    0d:33:eb:80:88:c9:6f:c2:0b:50:fc:de:31:59:16:
                    73:54:f2:34:55:63:12:25:89:9a:0a:63:46:75:b6:
                    b2:4f:82:69:00:65:32:59:93:02:ee:60:00:3f:d9:
                    d4:c3:56:39:ee:cf:24:ab:28:70:03:9c:7c:75:73:
                    ac:5b:af:68:78:e0:a4:e0:91:a1:a0:9c:5c:4d:eb:
                    71:37:c9:e8:cd:ae:22:60:e4:98:12:03:1c:d2:82:
                    1e:9c:9a:5c:a4:70:55:55:0b:cd:7b:74:9d:0b:cb:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:FF:24:0F:78:A0:80:5B:9E:A2:47:F1:B4:CD:3B:F2:5F:5F:25
            X509v3 Authority Key Identifier:
                keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:e6:28:cd:9b:c7:bc:57:dd:2f:3d:3b:cf:4b:73:14:bc:
         3f:9e:cd:53:e0:1e:89:a5:42:d6:35:d7:d4:54:a7:4d:17:0d:
         da:6f:1b:38:48:7d:78:2d:f3:18:fe:e4:67:43:91:46:15:6c:
         cd:ca:f3:28:bc:54:de:80:f6:8a:84:b4:16:be:2f:b3:fc:1b:
         8f:c2:ed:92:aa:98:4a:32:8f:c6:fb:25:20:1e:fe:c5:3a:8c:
         30:5b:a0:b6:ab:cb:36:83:60:62:89:8e:8c:5b:67:52:14:54:
         c7:4e:be:3e:02:bb:e6:a0:e1:84:03:0a:18:26:ff:59:16:4a:
         bb:d6:db:12:2f:df:87:99:e1:16:2a:84:2e:2e:56:f6:2b:e7:
         2f:8a:5d:20:45:cf:77:d7:f8:fa:e2:20:84:d5:8c:5e:ea:5d:
         ea:8d:11:32:a3:78:e0:06:2a:7d:da:df:f0:95:da:10:e5:dc:
         6d:16:ae:e6:27:4c:94:4d:82:27:90:28:7e:ec:13:d9:ac:a2:
         e7:e6:01:e2:e1:01:62:22:c0:ea:be:d1:b8:b7:e6:51:4f:8c:
         7e:06:97:14:cb:1a:2b:ae:43:95:e6:d2:de:2c:aa:d0:38:05:
         43:99:b0:f1:35:2a:bb:e1:b0:49:27:7c:6f:19:17:09:d2:6d:
         c5:b8:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org