Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3139302e3130332e38342e302f32322d3234203d3e20323731393730.roa
File:                     3139302e3130332e38342e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          3HY3n9np6B7Wzh4UVkmW22YJSwByUzm8W6BhSEaRnyM=
Subject key identifier:   40:B4:9F:17:6B:0D:F3:AF:17:2E:CC:88:80:F2:34:AB:16:2D:7F:13
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       278A8FAF319594F5E088603006CD8FBB900E44B3
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3139302e3130332e38342e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 05 Mar 2024 18:22:47 +0000
ROA not before:           Tue 05 Mar 2024 18:17:47 +0000
ROA not after:            Tue 04 Mar 2025 18:22:47 +0000
asID:                     271970
IP address blocks:        190.103.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8a:8f:af:31:95:94:f5:e0:88:60:30:06:cd:8f:bb:90:0e:44:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Mar  5 18:17:47 2024 GMT
            Not After : Mar  4 18:22:47 2025 GMT
        Subject: CN=40B49F176B0DF3AF172ECC8880F234AB162D7F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:17:26:1b:fa:46:16:e8:48:c2:58:7b:83:
                    df:45:45:3b:c4:77:59:27:76:75:59:39:ed:0c:0b:
                    e0:f0:ec:11:00:0a:56:a1:65:d2:bb:26:a6:86:de:
                    56:10:7c:7b:ff:34:cd:a7:90:71:b5:e7:49:c4:fd:
                    d4:7a:76:d3:1c:b6:a3:a4:ef:4f:33:be:57:46:0d:
                    26:bb:55:15:a6:de:97:ba:c0:36:35:79:de:ca:9d:
                    53:53:7a:80:aa:30:68:0e:9f:c7:52:4c:e2:3e:ff:
                    80:61:f2:34:9e:61:f2:95:5a:e7:47:59:2a:19:1f:
                    68:e3:cd:85:60:10:cb:58:3a:27:4a:83:14:28:b0:
                    82:dc:5c:85:f2:49:cd:6e:1d:c8:8e:0c:5d:e1:8b:
                    74:72:a3:16:7f:a8:db:cb:52:b8:55:66:ca:0e:d7:
                    da:42:c0:85:76:39:f4:81:b0:23:15:c2:9d:a6:f1:
                    6c:4d:11:00:ff:46:92:ae:43:12:38:fe:d9:22:5d:
                    ae:5b:d4:3a:22:2e:ce:65:7a:74:5a:93:62:01:28:
                    b3:38:e6:33:fd:e7:fa:e3:2d:ee:6b:ab:0f:af:86:
                    10:39:c8:1f:78:c2:bd:da:d0:c4:e6:e5:e1:d4:b5:
                    3d:5d:bc:92:d9:16:01:58:d1:08:6b:67:ab:c8:fc:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:9F:17:6B:0D:F3:AF:17:2E:CC:88:80:F2:34:AB:16:2D:7F:13
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3139302e3130332e38342e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:01:33:3c:28:33:ed:87:11:50:d2:cf:27:39:54:44:ec:ea:
         27:c8:1b:7c:e3:d5:55:05:9d:a7:5b:17:3e:d7:50:18:b8:2e:
         7d:46:7e:56:ae:69:3c:a3:ff:2e:3e:b4:36:c6:0e:9c:7f:64:
         1c:63:2f:9c:d5:bf:3a:e2:c0:9f:b0:b4:1c:40:37:c6:f8:81:
         b9:da:47:c0:e1:f8:9c:47:48:4f:b8:4c:0c:d0:2c:cf:3f:60:
         13:ce:d6:9d:50:72:2c:5c:99:cf:77:14:9e:87:b5:d3:92:bd:
         c3:21:fc:22:99:95:bd:e3:d7:f5:a8:77:7d:5a:37:c8:10:3d:
         6a:74:79:7b:25:bb:24:25:7b:ac:87:ec:02:5d:f8:95:6b:24:
         31:54:b0:6d:a5:e9:4e:93:5b:0f:60:8f:00:69:67:38:fd:81:
         2a:ba:bd:e0:84:bb:a4:7b:34:1c:fc:96:9d:61:58:c2:fb:3a:
         e1:b5:92:c6:7f:a5:9c:a9:28:e0:5c:a3:76:75:2e:07:b3:f4:
         50:f0:e1:c5:39:01:75:6d:17:1d:08:83:5d:35:71:4d:6a:d8:
         59:0a:e5:6d:42:a2:6b:85:c4:19:b0:5c:98:72:df:f9:2f:b6:
         74:df:02:e8:0f:0e:64:54:28:1f:5f:53:6e:4e:dc:74:1a:cb:
         f5:2d:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org