Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa
File:                     3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          aFYh+Ltu2f9I41Uphqh3zL7wcg4QO+ImCaYPPnk8fWA=
Subject key identifier:   6F:B8:0D:69:46:A5:C1:CD:14:57:B8:50:07:EB:B4:3F:5C:98:31:25
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0CD1C3102EA86E043853562BA6AF9B0C23441A29
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa
Signing time:             Tue 05 Mar 2024 17:42:35 +0000
ROA not before:           Tue 05 Mar 2024 17:37:35 +0000
ROA not after:            Tue 04 Mar 2025 17:42:35 +0000
asID:                     262172
IP address blocks:        190.143.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:c3:10:2e:a8:6e:04:38:53:56:2b:a6:af:9b:0c:23:44:1a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:35 2024 GMT
            Not After : Mar  4 17:42:35 2025 GMT
        Subject: CN=6FB80D6946A5C1CD1457B85007EBB43F5C983125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:01:db:81:d8:c7:2b:17:89:c6:20:75:e8:
                    6e:a8:be:34:46:c7:e8:a6:c7:58:e8:de:22:6f:98:
                    ec:08:6f:ff:6a:9a:e7:77:63:fa:9b:44:97:bd:3f:
                    60:fe:44:37:35:74:50:cc:3c:88:b4:09:01:7d:f7:
                    48:12:2e:3f:26:03:53:92:24:8c:7e:e6:a5:4e:d4:
                    e4:4e:2e:53:b3:36:00:c2:d4:97:b8:04:fa:ff:4e:
                    61:58:35:26:2f:be:41:92:5b:aa:4c:3a:ac:d7:78:
                    6c:75:e2:d2:95:b1:63:0f:a9:3b:c9:b7:02:d2:51:
                    78:df:53:21:94:c8:86:ba:da:f0:ab:37:b9:c0:d4:
                    34:76:97:27:de:f5:2f:b6:d5:4d:9f:f2:2b:31:19:
                    85:42:32:6a:8b:e6:d7:41:83:7d:10:b2:f6:1d:7d:
                    0d:0e:8c:02:79:78:85:de:2d:03:04:27:96:df:08:
                    02:b3:18:9e:9e:ba:2c:b0:dc:87:19:5c:b1:cb:c6:
                    e7:eb:31:64:c5:97:33:20:e9:19:fc:aa:42:78:c2:
                    64:11:f5:2e:97:45:99:c8:62:42:c8:93:8d:df:13:
                    ca:6f:21:4c:ce:a9:18:41:d9:02:a6:69:ff:63:01:
                    15:bc:aa:31:b6:85:8e:d2:7a:4b:85:b6:a4:62:53:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B8:0D:69:46:A5:C1:CD:14:57:B8:50:07:EB:B4:3F:5C:98:31:25
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:5b:4f:d7:b8:ce:dd:a6:af:44:96:6f:b5:11:59:d8:d0:c7:
         a9:09:0e:c7:71:d9:88:21:00:ae:ae:91:a6:fe:bd:1f:0b:bb:
         ca:4c:eb:65:da:99:e6:c2:34:df:e4:c3:f4:a5:29:ea:c0:7b:
         13:0f:ab:1a:7a:74:ae:96:b2:cd:6e:8b:05:60:5e:44:59:5f:
         47:cd:87:3a:ef:44:04:d3:04:7e:09:cd:5e:be:ee:25:ab:b5:
         3d:e8:70:ba:c5:79:9c:47:36:93:31:9a:3a:b8:e6:21:f5:55:
         3f:00:6f:c4:ae:ce:22:7c:44:ba:c9:c4:18:60:6f:b7:e9:e7:
         0c:5c:8e:b7:e9:47:38:d1:15:ba:42:60:f5:d8:af:0b:d7:a4:
         9f:f4:4f:c0:d8:be:4c:bf:07:fd:2d:e9:7d:19:93:10:19:7b:
         e8:fa:0a:1d:fa:5f:c2:33:4c:94:48:ff:d8:88:10:3b:46:e3:
         c9:4f:03:29:f5:8c:b9:32:67:ff:7b:2b:6e:ff:5c:bb:23:a9:
         b5:bd:ed:37:64:7a:5a:d1:4d:f9:ca:02:27:9c:cb:df:06:96:
         87:a8:6b:fd:32:9c:2b:dc:e1:95:f8:89:da:7b:4a:97:f9:cd:
         2d:41:5a:ad:69:ac:a0:a4:9f:57:ba:86:a6:ca:1d:64:f5:dd:
         19:e0:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org