Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232372e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3232372e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          dt0yTWh2ymR286JGfAztbg2kOqVwv6M6Mx4jzjVf4Io=
Subject key identifier:   F8:37:03:7C:85:0C:B3:DA:85:A4:2E:D4:7C:60:93:A9:85:79:33:D9
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       36D2E997832F6A4B8113065C6EA9A3039C240203
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232372e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:02 +0000
ROA not before:           Sun 31 Mar 2024 03:20:02 +0000
ROA not after:            Sun 30 Mar 2025 03:25:02 +0000
asID:                     52369
IP address blocks:        190.184.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d2:e9:97:83:2f:6a:4b:81:13:06:5c:6e:a9:a3:03:9c:24:02:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:02 2024 GMT
            Not After : Mar 30 03:25:02 2025 GMT
        Subject: CN=F837037C850CB3DA85A42ED47C6093A9857933D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:f8:e6:95:64:4c:11:9c:e7:27:67:e8:a6:
                    bb:e1:65:9c:6e:c0:c4:45:0e:d3:49:6e:68:db:0d:
                    70:2d:0d:54:ab:f1:2c:1c:0a:b7:8d:04:5f:da:bf:
                    81:2c:97:7a:ff:87:7b:cc:b1:8f:6f:bc:76:29:f8:
                    0b:e4:f8:5d:ea:57:9f:82:cc:fb:8f:18:24:73:8a:
                    a4:08:bd:65:6c:7f:22:0e:45:b2:ec:61:c2:63:48:
                    ca:2f:1c:ad:41:66:fc:ef:06:23:8d:58:e1:bd:23:
                    9e:62:d2:ef:fb:31:ac:e0:79:7f:7a:66:8c:a1:eb:
                    88:7d:72:ac:1f:c0:99:9b:cd:dc:6b:56:68:9b:db:
                    65:cb:16:8a:82:e0:b7:b6:19:5d:f2:1b:0a:b2:e4:
                    7a:59:44:7f:26:23:ef:f1:70:f0:cd:72:e9:98:df:
                    35:1a:47:83:15:33:28:e5:8d:ce:02:09:b6:04:5f:
                    c3:e2:1c:2d:69:06:fb:7f:5d:36:2b:35:05:9a:32:
                    a8:76:e9:0a:72:f6:c5:22:0f:18:cb:d6:a5:0c:ac:
                    a9:bc:d8:9a:3f:7b:db:cf:87:3f:b0:ae:3a:56:60:
                    0b:03:60:3e:83:f6:65:0f:c3:45:57:66:92:7b:9b:
                    a7:d9:98:16:61:0e:93:85:2c:56:f3:5c:3e:22:f5:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:37:03:7C:85:0C:B3:DA:85:A4:2E:D4:7C:60:93:A9:85:79:33:D9
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232372e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:20:dc:f7:37:ae:c1:3e:aa:a0:5b:05:d4:b6:6a:f8:5b:bf:
         5d:2e:e0:72:39:ef:c8:9e:19:c1:ed:4a:24:55:be:d4:25:e2:
         33:1b:89:34:fb:3f:5b:02:99:06:6d:50:f2:c0:ff:ad:b1:fb:
         62:36:a5:45:3c:15:73:45:48:41:b7:e9:77:e9:a5:02:ee:ff:
         37:76:f1:9b:be:39:f9:5a:52:45:96:c3:5b:58:4d:45:66:38:
         20:a7:26:b5:24:78:91:34:14:52:3c:2b:ae:4b:83:de:c3:d0:
         a6:17:2e:f5:e0:fd:2b:96:8d:05:ad:b2:15:37:31:af:ee:ff:
         90:40:06:0d:e7:f4:fa:07:ab:86:0b:57:d4:6d:84:75:aa:59:
         58:33:45:20:29:5b:5c:c0:bb:0b:33:06:d7:de:bc:0b:be:67:
         5e:a2:f8:20:2e:b0:72:02:83:f2:68:24:29:44:ea:f5:37:56:
         fb:dc:6c:82:8c:a2:7b:e1:0b:c8:a1:ae:b2:90:98:9a:e0:70:
         f3:9a:2f:2f:29:1f:ba:d9:3e:87:e4:3a:bb:97:35:bb:5d:40:
         b1:48:93:be:0f:25:f1:f5:c8:49:f5:c4:05:9d:b2:55:19:2f:
         16:5b:27:00:08:89:57:b0:00:21:4f:9b:ba:f8:70:b0:b3:6f:
         6f:5a:de:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org