Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          BbhkKOShqQQn0FGKRS+TLKjDLFOSpX/CrIz5bFqVHhs=
Subject key identifier:   73:E8:98:0F:0B:49:49:28:66:F2:E2:3B:C1:89:DF:76:AD:B4:7A:93
Certificate issuer:       /CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Certificate serial:       74BB2984C767A4608DC958C14651C22E7DA83A1A
Authority key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:23:08 +0000
ROA not before:           Tue 05 Mar 2024 18:18:08 +0000
ROA not after:            Tue 04 Mar 2025 18:23:08 +0000
asID:                     27947
IP address blocks:        192.188.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bb:29:84:c7:67:a4:60:8d:c9:58:c1:46:51:c2:2e:7d:a8:3a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
        Validity
            Not Before: Mar  5 18:18:08 2024 GMT
            Not After : Mar  4 18:23:08 2025 GMT
        Subject: CN=73E8980F0B49492866F2E23BC189DF76ADB47A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:c5:c2:83:df:ca:49:bc:92:39:68:0c:53:
                    72:c7:44:bd:26:c2:5d:40:0c:7e:85:f3:5a:41:17:
                    5b:23:2a:30:b2:44:ed:61:02:82:48:85:b5:af:10:
                    bb:7a:db:aa:58:38:91:bd:d0:52:62:d6:a6:41:05:
                    3c:f5:71:2a:a3:00:dd:7c:1b:86:ac:4f:ab:62:08:
                    fb:ef:b7:38:e8:e0:0c:89:38:0f:a9:42:5c:e7:14:
                    29:d3:27:73:6f:fb:c8:8b:7e:b4:78:4d:8f:2c:cb:
                    97:26:78:7d:23:f8:38:43:c0:06:5e:7c:80:ed:44:
                    cf:aa:a3:93:ca:fe:9b:1f:64:9c:d8:e7:1b:72:59:
                    21:d4:6f:81:e4:d2:b1:01:d5:15:bb:39:c6:81:5b:
                    40:b9:6c:4d:ff:64:a9:92:3c:b2:61:c5:01:91:87:
                    d1:54:d0:99:ae:72:83:b6:b3:d3:a1:4e:1f:da:47:
                    72:6b:a8:07:ef:31:52:2e:49:2d:cc:68:02:14:a9:
                    10:e5:a8:fa:a6:cd:a3:57:4c:b2:b4:79:d4:3b:bc:
                    8f:ce:02:32:56:be:3a:67:d3:a8:67:81:40:7f:97:
                    31:3f:b5:a2:eb:20:bd:1f:87:cc:f1:1a:60:9c:2b:
                    03:70:d4:34:01:87:83:f4:52:ec:93:53:84:d0:b4:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E8:98:0F:0B:49:49:28:66:F2:E2:3B:C1:89:DF:76:AD:B4:7A:93
            X509v3 Authority Key Identifier:
                keyid:BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:91:da:0b:bb:3a:1e:21:f1:dd:a8:79:3e:6c:f9:95:c9:
         88:47:76:87:20:b9:12:a4:11:01:d9:ce:96:0c:33:3d:55:68:
         63:cc:04:0e:13:e5:20:ee:3a:40:f3:e4:fa:18:61:5a:82:84:
         7d:c5:40:2f:a6:d4:83:0d:81:4b:b2:3d:d0:d3:a4:56:5f:3f:
         53:c4:a0:f2:63:69:21:31:9c:80:8a:dc:ab:ad:7d:21:89:97:
         88:b9:03:7a:ea:51:ca:05:9b:9c:c3:47:56:41:75:3a:9d:f6:
         a1:33:ec:0d:5c:a9:a4:32:7d:f3:ef:17:aa:c0:50:29:5b:87:
         6e:83:4f:d3:99:4b:96:b4:1e:18:ce:9f:9e:9f:ae:35:e7:b2:
         30:1d:d1:3c:93:b3:58:fc:e9:01:ad:87:a5:31:04:5d:1b:83:
         63:12:ff:39:a8:2a:b7:dc:d7:09:e9:bf:5d:37:2d:f1:c3:7b:
         a1:47:10:02:bf:79:9b:ff:f2:e2:02:80:f0:60:7e:b9:b3:52:
         f9:5c:13:f3:31:c8:64:12:90:9b:5e:9d:49:78:d9:b3:2c:e4:
         53:04:c3:7d:54:5d:34:12:0f:e9:c7:ce:14:9d:26:2a:bb:dc:
         c5:3d:83:cf:8e:ef:84:65:b7:6f:3f:47:4c:4f:f7:b9:16:6d:
         41:39:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:49:23 2024 by rpki-client on console-fra.rpki-client.org