Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa
File:                     3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          e0MaoDGWE0Gw7a8Vrm8+iehUqzE9khCPUvJU2RAf0Xc=
Subject key identifier:   21:84:B8:E5:DC:D6:D2:84:A9:59:ED:39:29:1C:C8:4C:83:A5:86:55
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       6BE06BC693B8CCAC284D3208145903ABA59B2A5C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:37 +0000
ROA not before:           Tue 05 Mar 2024 17:37:37 +0000
ROA not after:            Tue 04 Mar 2025 17:42:37 +0000
asID:                     14754
IP address blocks:        190.149.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e0:6b:c6:93:b8:cc:ac:28:4d:32:08:14:59:03:ab:a5:9b:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:37 2024 GMT
            Not After : Mar  4 17:42:37 2025 GMT
        Subject: CN=2184B8E5DCD6D284A959ED39291CC84C83A58655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:1c:ee:d6:5a:69:4e:fb:0e:d4:d6:14:3c:
                    97:84:78:9b:49:99:0e:90:66:fb:66:6e:80:9b:b0:
                    71:6f:f5:6e:4f:7d:b7:0e:5e:c2:68:16:41:d0:04:
                    99:62:bb:39:10:04:76:d9:6f:92:f9:a5:90:3c:97:
                    cc:6d:b1:7a:89:cf:36:df:4b:e4:4d:5e:cd:28:9c:
                    12:c3:9b:3c:d3:10:c4:4a:f3:d0:98:38:5c:bd:00:
                    e9:b6:98:6c:9e:c0:78:93:9f:ab:55:b6:af:c3:fc:
                    cc:dd:77:f8:b2:68:cb:94:ad:1a:be:f7:92:cc:36:
                    17:e3:9d:b8:d1:63:c3:02:bd:35:2a:e7:70:ce:86:
                    18:cd:5a:b4:3a:af:6f:4f:f7:51:73:c8:2e:18:95:
                    6b:51:72:d6:2e:2b:80:3a:3b:d1:5c:25:a9:fb:76:
                    b7:02:a9:54:39:e9:24:f4:39:3e:aa:e6:e1:fd:d7:
                    94:c1:f6:00:8d:ba:84:a1:9d:89:b0:60:70:91:97:
                    85:05:bb:21:44:6f:26:df:08:09:aa:b7:9f:0b:64:
                    d0:51:9a:10:57:cc:4e:e3:a7:44:b0:24:99:f8:db:
                    58:20:fa:46:26:7b:3a:81:50:a3:b3:cf:29:81:34:
                    82:95:c8:26:4a:67:fd:e0:b0:ee:50:04:30:07:2f:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:B8:E5:DC:D6:D2:84:A9:59:ED:39:29:1C:C8:4C:83:A5:86:55
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:70:e7:44:ad:93:f4:fd:12:3e:d4:72:cc:5f:fb:ca:88:
         a0:6d:fa:e5:97:5e:cc:40:01:18:d7:52:f7:c2:36:59:b4:f7:
         40:4c:d6:91:3c:8e:e6:4a:ce:bf:4b:0f:f0:f6:6d:68:39:e3:
         a2:2c:ab:bb:f6:2c:03:7d:46:53:bd:49:37:b3:ca:db:de:f8:
         06:8c:29:6c:38:c8:95:0f:06:0a:e6:37:7f:97:f7:a0:8e:26:
         b0:a3:8a:f8:e1:2a:1a:8d:78:00:de:a8:37:d3:2b:81:d7:68:
         5c:68:b5:dc:f0:c0:1d:73:a5:c3:b5:60:90:00:9f:7f:e9:7b:
         4c:83:1e:c5:59:c7:ca:30:7a:e6:23:2b:2f:90:7b:12:69:bb:
         18:4d:96:91:1b:f4:4f:69:6c:78:ae:47:7e:47:57:f3:77:8b:
         1b:8e:79:6f:60:30:d2:26:0b:02:c0:cc:cd:84:4a:10:f0:5a:
         2d:15:ed:a8:46:62:22:a4:dd:bb:28:19:8f:49:54:67:0e:88:
         cd:c9:84:39:c8:15:07:6e:5a:b4:64:bc:2f:49:76:db:40:d5:
         11:ad:8a:a7:ab:e2:3b:9d:0c:6a:d6:34:2c:92:2f:39:b2:c5:
         10:01:1d:42:f0:28:4c:80:90:9e:31:ec:14:76:ce:f4:f0:6c:
         56:33:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org