Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa
File:                     3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa (raw, json)
Hash identifier:          YzIC+rVq8rP6Fl6f3nUksuEOibip4HoUoawUVMgJprM=
Subject key identifier:   07:E3:40:C7:93:D5:6D:5A:7B:0B:57:50:B6:9A:73:46:AE:80:2A:D8
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       7100CAF468FCC1E0BEA374966B5A585F0C26671F
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa
Signing time:             Tue 05 Mar 2024 18:21:57 +0000
ROA not before:           Tue 05 Mar 2024 18:16:57 +0000
ROA not after:            Tue 04 Mar 2025 18:21:57 +0000
asID:                     52312
IP address blocks:        190.110.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:00:ca:f4:68:fc:c1:e0:be:a3:74:96:6b:5a:58:5f:0c:26:67:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:16:57 2024 GMT
            Not After : Mar  4 18:21:57 2025 GMT
        Subject: CN=07E340C793D56D5A7B0B5750B69A7346AE802AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:75:9d:a8:fa:36:87:da:7e:ad:0b:91:b7:
                    2b:e6:76:d1:39:de:4a:ad:7e:69:3c:e6:68:5e:7d:
                    29:d2:2a:b6:7d:24:15:5a:6f:7d:33:98:3f:ab:45:
                    2c:ed:c1:a5:09:d3:20:60:a5:ed:8b:82:e9:77:7f:
                    c3:0b:06:3e:88:bc:9b:14:9e:3c:49:ea:87:08:13:
                    73:c3:bb:c1:94:83:c5:3e:8c:9f:b8:c1:d4:22:40:
                    91:f1:43:28:77:d5:77:e9:d7:d6:f6:9e:f1:0c:20:
                    03:1d:4c:88:22:c8:88:ff:91:ec:66:6a:83:63:05:
                    b6:42:27:96:e2:6c:7b:cf:b0:6e:08:14:c8:a9:a1:
                    f8:2e:5d:c7:d8:04:6d:38:bc:85:0e:a6:16:35:ec:
                    d6:4b:73:e3:0c:ed:15:6e:53:98:6e:21:83:1a:53:
                    26:88:75:80:2f:25:50:0a:aa:a1:5c:8c:e4:88:86:
                    56:af:70:05:b3:b3:2d:05:32:19:d0:7b:8a:33:50:
                    80:3e:ed:10:b0:3f:86:77:71:1b:a8:6d:5e:25:d9:
                    70:cc:cc:8e:bb:a5:1d:68:00:0d:78:c8:88:22:e0:
                    38:80:66:96:a0:8e:ae:0e:72:97:63:a0:bc:61:62:
                    db:f6:64:10:8a:59:db:79:72:35:16:06:6e:16:ae:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E3:40:C7:93:D5:6D:5A:7B:0B:57:50:B6:9A:73:46:AE:80:2A:D8
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:1c:32:12:cc:df:12:6d:b2:2f:2e:fa:e7:24:25:e5:04:
         d3:f3:8d:19:18:36:b0:e4:77:7d:12:0b:fc:4c:b8:e8:94:cb:
         4b:3e:d1:74:4d:bd:28:b2:d9:ae:92:a3:f6:67:7a:91:5b:e3:
         ce:8c:8d:ce:3e:a8:62:3c:10:da:ec:63:dc:c2:91:56:2d:35:
         ba:89:d4:51:fb:8f:74:b3:03:0d:79:50:1b:ca:48:36:82:2b:
         f2:75:8c:49:48:be:7c:ed:3f:1b:94:1f:af:5a:60:1f:66:1e:
         9c:54:e1:5a:21:19:b9:a0:fd:76:32:83:9e:1c:cd:c2:30:40:
         9c:9d:99:e9:8a:50:0a:0c:f4:fa:e6:7f:af:ac:38:bc:8f:cc:
         3b:75:6c:39:65:38:a8:99:c7:ec:c9:34:3f:02:87:1c:cb:87:
         34:09:94:23:59:4e:97:6a:36:67:d6:2b:28:0e:54:3b:70:21:
         be:05:8a:0f:b7:05:34:92:b1:e5:1d:e5:e3:dd:80:0a:eb:3a:
         b1:06:2f:77:1b:67:47:d5:ad:a8:e7:4e:f6:25:ba:00:24:a2:
         bb:ea:2c:98:24:d2:51:55:92:d9:dd:4b:9e:9a:3b:15:8c:ae:
         85:83:6a:d1:9f:f8:5a:76:60:70:da:b1:8b:3b:bb:07:7e:e9:
         3c:e8:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org