Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa
File:                     3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          zv7BLNzYZbo4g+ZNfYKIqr2YZFYWuIyiZLIbp0tisQA=
Subject key identifier:   B9:6D:4B:EE:88:34:2D:35:5E:4C:FC:4F:53:12:47:6F:68:F8:97:53
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       0C00B24C537225F070CE15F25E3DDEB126EEC49A
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 05 Mar 2024 18:06:24 +0000
ROA not before:           Tue 05 Mar 2024 18:01:24 +0000
ROA not after:            Tue 04 Mar 2025 18:06:24 +0000
asID:                     269931
IP address blocks:        190.110.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:00:b2:4c:53:72:25:f0:70:ce:15:f2:5e:3d:de:b1:26:ee:c4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Mar  5 18:01:24 2024 GMT
            Not After : Mar  4 18:06:24 2025 GMT
        Subject: CN=B96D4BEE88342D355E4CFC4F5312476F68F89753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:a4:be:ed:b8:77:85:91:bb:ff:1f:b6:dd:
                    76:ac:17:90:75:f7:50:b0:a2:38:71:94:01:ad:6a:
                    4f:74:6e:ae:52:88:64:b3:c4:2f:b0:cc:b1:b6:46:
                    68:d2:c0:a4:12:af:6e:5b:7b:40:ed:6b:11:8a:c7:
                    38:7b:34:a5:b9:5e:e2:63:d4:56:c8:5b:f5:09:2a:
                    90:44:8e:25:22:91:b6:8a:65:d6:cc:e7:68:13:e7:
                    f7:4b:c4:3f:97:8b:dc:ff:e7:48:5f:de:22:17:e9:
                    33:d9:d2:f4:dc:78:10:ca:15:ad:bb:29:d2:0f:03:
                    51:7a:4e:80:7d:18:55:fa:82:12:df:6b:28:91:79:
                    bc:73:2a:ce:f4:41:c4:f8:89:f4:28:e6:52:b0:01:
                    31:2a:6a:c7:ec:51:ab:09:d3:bd:fe:10:0d:bf:bf:
                    7b:14:71:5e:89:66:84:b1:d5:94:ee:6b:7f:76:88:
                    46:e4:dc:2a:f7:15:02:33:8a:57:8c:96:45:f3:0b:
                    a9:a9:db:b7:ee:47:8c:bd:15:16:b3:1a:70:8a:45:
                    19:05:d3:57:c3:be:a4:2b:3e:50:c9:55:ca:20:94:
                    14:23:a4:36:2a:5e:0c:87:6f:63:b1:31:81:d5:de:
                    bc:fc:6b:45:79:d3:1a:ee:47:bd:ef:1e:d5:a0:e1:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6D:4B:EE:88:34:2D:35:5E:4C:FC:4F:53:12:47:6F:68:F8:97:53
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:73:cc:d8:54:0c:93:df:5f:f7:55:e9:ce:78:46:77:61:
         76:24:ef:ad:d6:2b:a4:da:18:ad:f0:9d:46:f0:c0:26:db:30:
         95:ab:63:c6:b4:e6:f9:ce:3f:04:51:f1:3a:f8:99:84:38:0e:
         bd:9c:31:a4:83:af:77:90:60:8c:96:48:1c:0b:9e:18:ea:7f:
         ca:df:e9:24:9f:a5:74:26:93:9d:b1:71:1f:24:1e:5d:fc:67:
         08:d3:86:e7:d2:10:51:09:3b:0f:d6:c7:6a:fe:fe:27:88:55:
         be:7e:0c:66:8b:1f:29:51:e6:83:b0:25:27:9d:d0:0d:a6:64:
         af:a3:07:0e:04:16:4a:62:9d:22:1a:93:c9:9a:73:fa:c5:2c:
         e7:49:ec:ad:b6:87:dc:46:9d:43:f9:b3:96:0f:1e:68:f5:45:
         3a:0c:81:a2:16:1b:13:78:f8:5b:72:e6:c3:e1:d5:df:42:30:
         66:63:31:4e:4a:97:b2:75:7a:51:38:5e:91:60:42:ab:14:17:
         39:bb:1e:14:21:5b:e2:4d:1a:e1:0b:9c:10:34:f4:4d:8b:ce:
         75:9a:8a:76:ce:e3:f6:79:03:6f:d5:29:b4:8e:3c:c7:df:46:
         1d:67:a8:86:d0:db:01:c4:2b:85:6b:be:67:57:dd:e9:13:c7:
         25:06:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org