Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e33302e302f32342d3234203d3e203532323637.roa
File:                     3139302e35342e33302e302f32342d3234203d3e203532323637.roa (raw, json)
Hash identifier:          1XRWol/G0WStYbynWPO58HMH8ytK07o4ldVxo9KFKvA=
Subject key identifier:   59:52:B5:6A:93:E7:9B:1D:0B:25:BB:0E:DE:32:5F:07:98:88:EB:B1
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       7BB0C51CA02315CACCB9AE790FA1F796EC433FC7
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e33302e302f32342d3234203d3e203532323637.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     52267
IP address blocks:        190.54.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b0:c5:1c:a0:23:15:ca:cc:b9:ae:79:0f:a1:f7:96:ec:43:3f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=5952B56A93E79B1D0B25BB0EDE325F079888EBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:26:03:1f:e5:a6:97:a3:2b:48:f2:0f:ff:
                    97:01:f1:b3:6a:a3:8a:3f:c4:d7:6e:ba:d3:67:31:
                    c9:4a:08:30:2a:73:61:33:db:3d:79:80:d1:52:23:
                    5b:9c:00:3b:c3:23:97:8a:e4:16:ef:d5:6a:ad:c8:
                    de:a9:db:ec:57:59:0f:d0:76:4b:1f:00:c9:32:14:
                    75:a1:9b:63:b6:02:fb:b5:18:48:28:04:bb:18:e6:
                    64:1b:ad:37:de:a3:37:76:4e:4f:f6:0d:4b:1d:f1:
                    81:89:e4:4c:0e:30:af:b7:ad:cf:f8:44:f2:9d:bc:
                    0a:eb:c3:c1:89:2c:06:fc:a1:40:33:04:df:dc:b4:
                    26:47:89:15:40:ef:eb:95:22:54:02:f8:9d:5f:4a:
                    6e:3d:63:85:23:66:0d:ce:c4:ae:6c:27:cc:ad:88:
                    c7:84:df:2c:be:29:e2:0c:a1:11:4a:9b:82:fe:bf:
                    e8:d3:14:db:6e:bf:7a:55:82:eb:52:bc:32:59:a8:
                    ca:84:ed:07:76:01:a6:ae:5a:48:1b:74:cf:af:0d:
                    d3:2f:d7:9e:27:f6:bf:d2:c0:5a:3d:41:95:81:7a:
                    78:60:7b:5d:92:28:04:b6:2e:f7:87:0c:3a:34:58:
                    d2:c3:a8:48:62:0f:37:10:31:28:79:64:4e:21:ff:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:B5:6A:93:E7:9B:1D:0B:25:BB:0E:DE:32:5F:07:98:88:EB:B1
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e33302e302f32342d3234203d3e203532323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3d:24:75:a0:bc:f8:34:ee:8a:62:26:46:77:6b:eb:4b:b8:
         26:5a:b2:80:07:20:08:0d:76:ed:09:1d:53:48:81:9e:14:57:
         22:87:5d:bf:82:b9:84:16:40:39:13:87:e4:87:2f:95:38:bb:
         20:0f:3d:20:2a:6e:cd:57:ef:bc:23:c3:da:ad:9f:65:12:95:
         ae:0a:fc:71:0e:44:cf:0e:81:ef:c8:b8:02:ac:cc:4f:c1:ea:
         4c:84:2c:81:f4:a2:06:9b:f1:b0:66:20:68:2b:62:89:c5:32:
         36:26:e8:03:68:d8:03:44:01:7d:b1:f8:3c:7c:f6:3b:3b:86:
         fa:93:19:cc:bc:12:3a:4c:3b:03:48:1d:c5:49:a9:56:7a:61:
         25:36:4e:38:de:51:bf:17:7a:43:e9:5d:c6:dc:b6:32:46:fa:
         54:82:7b:ab:7a:cb:84:8b:d1:6a:8d:71:4b:7b:ed:35:4e:ce:
         51:f4:c0:e9:aa:34:bd:e4:63:51:3e:08:1b:21:92:5e:a1:48:
         5a:bf:08:96:0f:a0:3d:8b:6b:c8:af:02:83:b7:e8:97:5d:62:
         9a:5f:76:03:32:08:a2:4b:f3:3d:45:42:59:f3:ef:ab:2d:0a:
         c1:9f:6d:de:bc:30:41:77:7a:35:7d:2b:4e:1a:47:24:d7:52:
         87:98:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org