Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          U24WNVaK2IqZ60DtGhVjaBMF3kV+iJD8MgPmoDOwZU0=
Subject key identifier:   BE:37:9F:63:1F:18:B0:04:70:3E:BC:E1:B0:73:DC:44:88:39:A0:89
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       26EA0BEF31982BF22F1805C393E05DBE78A9FB16
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:11 +0000
ROA not before:           Sun 31 Mar 2024 03:20:11 +0000
ROA not after:            Sun 30 Mar 2025 03:25:11 +0000
asID:                     52369
IP address blocks:        190.184.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ea:0b:ef:31:98:2b:f2:2f:18:05:c3:93:e0:5d:be:78:a9:fb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:11 2024 GMT
            Not After : Mar 30 03:25:11 2025 GMT
        Subject: CN=BE379F631F18B004703EBCE1B073DC448839A089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:7e:9c:39:40:08:37:90:99:72:54:11:69:
                    46:96:d0:da:67:c6:d9:86:ab:63:3b:22:9b:10:f6:
                    d9:90:4c:4a:0d:d3:8e:c0:e2:26:aa:f7:f4:0e:c7:
                    c4:a0:fe:a2:a3:99:d2:de:9a:59:b8:ac:0a:47:a7:
                    6a:bf:98:ab:d6:a5:3b:7c:39:77:1a:cf:7e:8e:ba:
                    75:1d:3a:1d:2c:8a:8e:87:15:64:87:ec:58:82:51:
                    5c:2f:d3:b5:01:0b:fa:e2:56:de:ec:2a:e7:c0:4d:
                    56:64:67:62:34:a1:75:14:02:f3:52:46:74:ea:ee:
                    6b:e6:dd:0b:71:f2:7f:76:04:e8:23:e6:4a:68:49:
                    61:2c:7c:42:da:d0:b7:ac:6d:55:f0:8d:8b:07:ae:
                    60:17:6d:34:19:f2:c4:d7:be:cc:14:96:2f:5b:82:
                    01:af:8a:41:b6:9d:b8:fd:d0:58:69:3e:b4:69:28:
                    b2:27:9f:d3:57:01:20:b9:3c:69:b6:a8:36:56:2c:
                    59:2a:b8:bf:85:ca:d4:93:4d:9b:6f:42:b7:d3:00:
                    79:55:be:28:d2:be:95:14:2b:9b:f1:72:f3:69:67:
                    cd:ab:e1:5a:5c:5b:1e:53:6d:10:fa:8a:61:1d:ce:
                    96:32:46:a0:d8:85:ee:ed:13:30:2d:dd:63:ff:fb:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:9F:63:1F:18:B0:04:70:3E:BC:E1:B0:73:DC:44:88:39:A0:89
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:33:45:f9:68:45:5a:66:21:f1:27:48:a3:38:89:fc:b5:
         a1:4b:43:9a:9a:21:06:ea:dc:87:df:5f:52:c1:79:03:98:df:
         36:a9:d5:5b:ba:f5:90:7f:34:03:f7:51:f2:78:45:e1:6e:4d:
         7c:86:57:a5:cb:57:9d:13:cf:0a:48:c0:ca:13:3c:92:3e:c3:
         85:b9:74:e9:0b:e4:f4:d1:0b:94:70:bf:2e:22:06:59:20:88:
         ce:43:b0:8c:04:01:60:9f:93:7c:a6:54:bf:97:a7:70:f3:ec:
         22:15:64:7f:62:a7:42:65:54:7c:d1:4b:07:9f:df:28:36:bc:
         73:50:91:47:91:3f:23:34:49:9c:09:3b:64:3b:51:1d:5b:46:
         dd:98:0d:41:f0:94:d3:fc:1c:0f:6f:bb:57:9c:63:b6:f6:64:
         02:15:8b:50:df:b6:b8:2d:3b:fd:66:ce:53:9f:2f:d8:37:ec:
         9f:e3:05:29:29:1f:3d:f5:86:54:e9:69:82:0c:47:c2:ee:df:
         5c:17:45:05:be:77:f1:c0:7a:02:62:6b:4d:0e:cb:29:ce:31:
         77:14:22:f6:bd:0d:7a:ac:a7:19:28:c4:c0:29:69:32:a5:08:
         1d:22:0e:b8:31:5b:cb:5a:40:bb:76:f2:28:84:60:ed:62:60:
         74:6d:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org