Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139342e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3139342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          d7hWaeQEv1cS7XD01BYYiuojD4QbYHa7lHlKYe/fmoc=
Subject key identifier:   6F:76:61:F7:74:E8:F4:CA:B6:B4:B8:E6:22:47:8B:AC:97:85:12:02
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       04CEE5D6578B5A39A795C3811729098CBDCFBAC0
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139342e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:11 +0000
ROA not before:           Tue 05 Mar 2024 18:11:11 +0000
ROA not after:            Tue 04 Mar 2025 18:16:11 +0000
asID:                     262191
IP address blocks:        190.131.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ce:e5:d6:57:8b:5a:39:a7:95:c3:81:17:29:09:8c:bd:cf:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:11 2024 GMT
            Not After : Mar  4 18:16:11 2025 GMT
        Subject: CN=6F7661F774E8F4CAB6B4B8E622478BAC97851202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:59:bc:fb:22:91:8d:47:06:90:d0:0c:58:
                    06:b5:55:51:1a:c9:7c:2a:7c:e4:ae:c2:c4:56:eb:
                    5e:60:9c:82:ac:c6:3b:14:6e:24:66:75:d9:24:5a:
                    a3:54:f3:25:c8:f2:97:97:58:32:77:4c:0c:65:70:
                    9a:68:7c:ad:a2:92:ac:19:69:8f:5b:13:ce:ef:c9:
                    84:4c:5d:1c:f8:e7:e4:b5:a8:99:b0:1a:0d:9f:0a:
                    fe:ec:c8:55:a8:df:9d:04:74:e4:13:ef:0c:9a:40:
                    c5:39:66:26:7b:60:8b:bd:b4:b5:9e:fa:f1:a4:07:
                    a6:b3:2c:f7:d8:8e:22:d8:1c:b8:fe:2a:59:c5:ba:
                    58:54:4f:ad:58:6e:f4:10:cf:a9:09:2a:23:a1:ca:
                    a1:0d:c5:e4:86:93:96:00:f8:5e:1a:be:0a:a4:f5:
                    f8:8f:e7:32:e2:57:d6:4a:12:17:8d:ce:e3:8f:1e:
                    54:5d:e0:0e:a7:98:f0:b9:33:9f:3c:61:33:67:be:
                    21:f5:6c:50:41:40:06:3b:12:0d:92:e7:66:25:be:
                    05:1b:7f:52:48:df:e8:53:07:8b:b5:50:67:2d:eb:
                    f9:59:00:52:d9:f4:1e:d2:29:83:e2:48:85:41:18:
                    65:7d:83:2d:cd:df:64:2d:f8:7f:2d:33:5e:c7:d3:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:61:F7:74:E8:F4:CA:B6:B4:B8:E6:22:47:8B:AC:97:85:12:02
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:91:bb:e8:00:8c:b3:2e:f3:ee:58:54:3c:69:e0:92:7c:59:
         14:8d:60:a9:8c:55:36:1c:98:ff:f7:37:09:85:48:47:01:e8:
         da:0b:11:2d:eb:e1:59:2e:a5:3e:20:44:4d:30:52:36:81:d4:
         7a:13:d4:1e:3d:9c:5d:04:83:a2:b2:68:7b:f4:5a:17:dc:1b:
         29:23:41:d5:83:41:ae:3d:f9:c7:76:05:5d:07:cc:b6:38:af:
         6b:9b:c6:04:17:b0:4d:d8:4e:d1:51:7a:df:f7:ab:48:85:8a:
         dc:b9:0d:c3:11:b2:ef:23:09:da:1b:03:6c:26:96:30:79:a1:
         5f:65:1f:df:3a:77:74:cf:f3:51:49:f3:fa:4b:85:1c:6b:ff:
         f4:bb:1e:49:62:3f:94:1c:c7:6a:11:62:0d:ae:e3:32:5a:13:
         27:a7:eb:b8:e4:44:9a:3a:ad:f8:80:8d:3e:ac:7f:67:b6:6a:
         d8:7c:38:78:a9:28:bf:e3:ce:c0:9f:fb:4c:b7:ab:a6:40:24:
         b2:fb:c3:25:86:7b:ba:c2:b6:fe:d8:73:bd:b4:5c:b1:f7:30:
         1b:be:33:6a:21:d1:6b:c8:94:82:47:28:f8:3c:cd:e5:5d:e6:
         49:26:4c:a6:b5:3d:dd:c8:68:3b:ef:be:cc:47:b2:56:33:c2:
         4c:18:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org