Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e38392e33302e302f32332d3234203d3e20323634363238.roa
File:                     3139302e38392e33302e302f32332d3234203d3e20323634363238.roa (raw, json)
Hash identifier:          Q/leNdmxqOacdsY/rgmjQOGZVF5HS8fM3zLQ46CgxS0=
Subject key identifier:   A5:F4:EE:0A:6D:AC:80:23:4F:06:82:7A:83:3C:69:CC:14:56:B5:CC
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       0873544EDDDB808AA6F46A6C5F276E27CAF8B8F0
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e38392e33302e302f32332d3234203d3e20323634363238.roa
Signing time:             Tue 05 Mar 2024 17:58:31 +0000
ROA not before:           Tue 05 Mar 2024 17:53:31 +0000
ROA not after:            Tue 04 Mar 2025 17:58:31 +0000
asID:                     264628
IP address blocks:        190.89.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:73:54:4e:dd:db:80:8a:a6:f4:6a:6c:5f:27:6e:27:ca:f8:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Mar  5 17:53:31 2024 GMT
            Not After : Mar  4 17:58:31 2025 GMT
        Subject: CN=A5F4EE0A6DAC80234F06827A833C69CC1456B5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:47:e0:a3:6e:71:89:69:c2:5a:6d:3f:51:
                    64:55:60:f3:09:b9:26:05:2c:7d:4c:0f:c8:36:c1:
                    ce:fc:21:1d:17:9f:b9:19:ae:ef:d7:a4:72:9c:98:
                    d9:bd:34:a7:e3:e3:8f:f3:8b:cb:35:e3:96:12:a4:
                    72:ff:33:e8:f9:7c:1e:97:35:c0:1f:48:b2:f3:e3:
                    60:98:c6:d9:64:da:26:ed:66:27:03:81:5d:a7:b6:
                    a8:af:7b:3f:e1:fa:2e:f0:0f:75:8e:d7:83:58:5c:
                    51:06:9d:77:3b:1b:4c:23:b8:90:ca:05:aa:30:29:
                    b0:74:53:37:d3:c8:81:58:98:49:ec:23:7c:10:4c:
                    b6:c5:c3:78:76:24:c1:73:a0:1e:61:e2:fd:40:4e:
                    85:18:f5:75:48:67:a3:9f:f3:55:7b:25:cd:34:ce:
                    02:01:48:79:49:0d:dd:46:d7:2f:8e:21:b6:4b:bc:
                    33:47:b3:d1:4c:6f:bd:01:2c:96:57:08:f5:fe:07:
                    05:06:6c:d1:ee:29:a8:7f:5f:fc:61:e9:b4:dc:cc:
                    58:68:5b:c6:e4:44:06:c9:33:5b:84:e7:df:f2:1f:
                    98:0b:d2:c8:c5:fe:59:01:14:fd:ef:29:e1:ac:71:
                    ac:c6:bc:24:ae:53:c2:a9:6e:ba:ad:22:e7:18:0d:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:EE:0A:6D:AC:80:23:4F:06:82:7A:83:3C:69:CC:14:56:B5:CC
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e38392e33302e302f32332d3234203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:61:a4:ff:d2:45:c3:b8:5b:38:a8:2e:3c:c2:67:51:0f:
         a5:65:d8:d1:b1:b9:d0:61:a7:5a:39:30:cb:39:17:99:91:53:
         62:ae:cb:1c:88:9a:59:05:df:a7:97:95:b3:19:ce:0b:03:c8:
         1f:5c:8c:89:87:1a:70:3c:54:b5:46:9a:94:f9:10:60:99:67:
         1b:38:c4:f2:a7:03:45:8c:f8:e0:65:b7:d7:0c:be:1e:b8:18:
         b0:d1:de:9f:3f:20:3d:ef:6e:da:7a:07:15:cb:4a:a2:e6:6b:
         74:3e:f5:4a:0a:d4:58:40:fb:83:8c:01:32:e2:1f:ba:1d:97:
         45:5e:6e:f8:9d:fa:ce:a6:75:a3:08:7a:fb:81:5a:9d:58:7e:
         2e:11:c2:2d:2e:30:9a:64:f7:2d:07:28:0e:9c:c6:99:04:b6:
         2c:a4:f8:9f:c9:25:67:a5:73:d2:ea:ba:c3:8d:bc:71:e9:f7:
         7f:f7:12:c8:fe:a1:68:5f:a7:ae:3b:ff:d6:aa:d3:e4:3b:a6:
         1a:ec:98:5f:71:fb:8f:f8:ba:8f:b6:ef:d5:3e:f6:43:7a:46:
         13:66:b3:4f:d5:a7:ec:57:0d:e8:24:e6:e6:51:bd:59:85:f4:
         43:72:15:27:7e:7c:53:7c:13:bb:3b:5e:eb:d9:ab:a1:9d:b2:
         83:c2:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 03:58:33 2024 by rpki-client on console-fra.rpki-client.org