Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa
File:                     3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          B/28HX8UCT8G2kw6p3+AJ06OYk7Gkck2FOZbQYmb/oM=
Subject key identifier:   93:DB:9F:8A:01:08:24:3B:B9:2A:FB:52:6F:1A:C9:BB:80:82:24:7F
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1C153F7FE76D386C27AB1A7014A99F4BAB42285D
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:22 +0000
ROA not before:           Tue 05 Mar 2024 17:37:22 +0000
ROA not after:            Tue 04 Mar 2025 17:42:22 +0000
asID:                     14754
IP address blocks:        190.148.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:15:3f:7f:e7:6d:38:6c:27:ab:1a:70:14:a9:9f:4b:ab:42:28:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:22 2024 GMT
            Not After : Mar  4 17:42:22 2025 GMT
        Subject: CN=93DB9F8A0108243BB92AFB526F1AC9BB8082247F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:97:39:94:6b:e6:c9:f3:b6:b1:45:ce:9c:
                    4c:69:bf:63:4d:65:03:0e:85:c9:0f:6b:e6:a8:b8:
                    fc:89:2c:93:ef:91:5b:6a:c3:28:7d:0a:70:13:e9:
                    6d:5a:11:93:26:d3:46:89:3d:79:38:c7:21:44:9c:
                    3c:c8:19:0e:ea:67:53:d7:0f:1b:bb:d1:b3:8c:33:
                    b7:a9:b7:23:e0:b1:72:e4:5f:29:38:9d:2a:45:bb:
                    41:59:cc:b6:87:94:9a:5b:07:5f:d9:0d:77:27:f1:
                    db:c4:0f:91:38:01:96:ca:54:9c:fa:79:0e:c8:70:
                    12:81:ba:d6:b1:d2:b0:f4:99:9f:9c:a4:8f:fa:91:
                    bd:69:40:96:9c:75:59:23:01:b3:a3:52:6c:a8:b4:
                    f9:e6:95:9b:03:4d:fb:91:e5:d8:04:53:53:7b:d7:
                    a3:d0:40:26:a8:45:1a:a4:6c:a7:c8:63:bf:80:0c:
                    54:29:89:b1:61:18:0c:45:60:38:a7:93:c8:4c:f2:
                    41:16:1f:a5:e2:03:5f:f5:bc:7a:f7:7c:b0:8b:b1:
                    b9:02:b8:7d:85:89:5c:86:78:a0:c3:6e:43:66:cb:
                    ab:63:cf:32:ad:e9:12:b3:93:72:be:3f:01:d6:57:
                    34:3e:31:c8:d7:c3:81:2d:11:ca:f8:57:1c:46:66:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DB:9F:8A:01:08:24:3B:B9:2A:FB:52:6F:1A:C9:BB:80:82:24:7F
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:a4:b9:20:84:79:f6:50:9d:65:34:8f:86:e9:1b:01:de:
         ca:44:b0:d3:04:cc:1b:fc:b6:a9:dd:be:c0:74:f2:19:3e:c7:
         10:8c:cd:88:0f:e7:41:31:ed:22:9c:1f:53:84:8b:45:49:c7:
         ff:65:b9:f3:5e:c5:6e:3d:e4:5a:39:68:af:1b:db:0a:4d:8f:
         88:dd:45:05:f2:c2:2e:76:18:f4:cf:da:6a:1e:ec:eb:14:1d:
         f0:40:dc:fd:61:e5:1a:24:9d:37:c9:eb:c5:73:ed:06:88:41:
         e3:1a:e0:db:11:7b:61:1e:10:c8:a7:fb:66:c3:fb:02:d2:d6:
         77:8c:63:31:b4:17:18:8f:29:42:0b:b8:39:6a:c2:40:e3:b7:
         9f:52:c6:df:ec:73:4c:25:58:f8:34:57:6d:a3:d5:a7:b6:01:
         92:ff:4e:0b:bd:1c:e0:4b:15:39:21:33:33:b8:03:cb:55:5e:
         a8:73:9f:12:35:f8:6f:63:66:18:df:8b:8a:2b:d4:70:31:95:
         31:4d:c3:0d:34:21:e6:9d:7f:76:46:d8:e5:9c:4d:1e:31:de:
         0d:69:9b:4c:f1:b8:57:da:f0:c7:15:10:00:72:df:d7:c8:8a:
         8a:58:f6:b2:cd:de:fe:e0:d9:84:ed:36:2f:fa:e9:9a:a2:7c:
         86:11:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org