Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/3139302e3136382e302e302f31372d3137203d3e203233303037.roa
File:                     3139302e3136382e302e302f31372d3137203d3e203233303037.roa (raw, json)
Hash identifier:          APf79lJEKGBFrEie/zwwxT7lnWQxvQTCSDXGc2b6Urc=
Subject key identifier:   F1:DA:C5:46:60:B1:7B:86:69:43:BB:AC:49:F4:D0:8E:30:27:02:93
Certificate issuer:       /CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
Certificate serial:       7732EC50ABFCF957F25B244042CD98304225A446
Authority key identifier: FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/3139302e3136382e302e302f31372d3137203d3e203233303037.roa
Signing time:             Tue 05 Mar 2024 17:49:37 +0000
ROA not before:           Tue 05 Mar 2024 17:44:37 +0000
ROA not after:            Tue 04 Mar 2025 17:49:37 +0000
asID:                     23007
IP address blocks:        190.168.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:32:ec:50:ab:fc:f9:57:f2:5b:24:40:42:cd:98:30:42:25:a4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
        Validity
            Not Before: Mar  5 17:44:37 2024 GMT
            Not After : Mar  4 17:49:37 2025 GMT
        Subject: CN=F1DAC54660B17B866943BBAC49F4D08E30270293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:2c:4d:b3:ec:82:de:1a:27:a6:8d:8a:ed:
                    be:b3:2f:24:e5:70:bb:34:1c:36:48:84:fc:2a:de:
                    0a:33:00:5e:8a:fb:93:69:81:a3:9c:5d:90:2d:eb:
                    73:cf:40:07:6d:30:a7:26:4e:92:26:b8:2f:f4:55:
                    2b:a7:4c:6c:66:7f:c1:d0:a8:c4:84:f0:81:0e:09:
                    21:99:82:5d:8a:33:79:28:71:1c:1a:ef:a4:ec:cf:
                    e8:7f:15:fe:4a:67:0e:e1:3b:de:b8:e1:c7:78:89:
                    42:c2:c7:0b:fe:bb:8d:80:ea:1e:f6:7b:87:86:a9:
                    8a:71:d9:0a:59:9e:ce:db:46:1e:92:0d:43:98:f4:
                    cc:c0:6c:1d:ef:8f:97:02:3f:13:d4:0c:9e:51:34:
                    f7:d7:e1:c1:da:4d:37:ac:f8:de:47:37:49:ca:0a:
                    46:1a:c6:4d:48:ce:4a:31:73:ac:79:0d:5e:84:d5:
                    c6:9b:ea:a8:63:86:fa:75:58:b2:8c:32:7e:b9:24:
                    9e:40:fb:48:9d:1c:e6:a9:3d:f6:4c:f3:c9:2a:8e:
                    0c:02:95:5f:1e:11:32:a1:da:55:0e:cc:17:5b:46:
                    9d:fc:2c:d1:c9:40:19:37:a2:6e:db:8b:3b:a0:de:
                    64:e5:2f:58:35:11:77:5f:13:90:4e:81:4b:dd:f2:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:C5:46:60:B1:7B:86:69:43:BB:AC:49:F4:D0:8E:30:27:02:93
            X509v3 Authority Key Identifier:
                keyid:FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/3139302e3136382e302e302f31372d3137203d3e203233303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.168.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3b:74:1f:6b:28:8b:64:65:cd:75:68:45:3c:38:d1:c7:35:2c:
         01:24:35:ea:55:e0:77:af:7e:21:c9:da:58:98:38:59:2f:20:
         69:5a:26:44:cc:92:c6:ca:48:ec:7a:9d:99:84:1d:d2:04:52:
         44:c6:c5:52:78:21:9e:57:02:e4:81:b0:23:38:ea:4e:70:69:
         8a:72:9f:6b:23:51:e0:80:f8:c3:e7:d6:61:b9:3c:01:2a:30:
         a9:27:64:8e:51:fc:f5:ee:ef:28:f2:bb:4f:3b:20:9a:33:88:
         eb:a3:46:19:f4:b1:75:46:ce:8f:68:f1:0f:c1:a6:07:9c:22:
         2a:8a:5d:4b:c8:55:7e:1f:7d:01:df:c0:b0:e9:bd:f3:89:d7:
         d7:fa:44:52:5d:dc:80:af:5a:40:68:3c:74:0d:38:5d:b8:45:
         31:99:fc:3a:64:f2:ed:47:7e:b4:b2:14:16:d9:33:c1:ee:a1:
         3a:23:fa:31:a3:45:c5:40:4c:b7:21:db:a5:6c:3d:2a:2c:6a:
         bd:8f:c6:fb:1a:f2:1e:6d:2a:26:40:12:76:4e:db:55:08:d2:
         e6:81:5c:11:79:cc:fa:d6:ab:bd:ad:a1:6c:10:b5:3b:17:b2:
         2b:3c:bf:be:f6:01:bf:08:91:53:cc:b5:05:ee:4a:91:43:dc:
         6c:7f:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org