Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/3139322e3230372e36372e302f32342d3234203d3e203233303331.roa
File:                     3139322e3230372e36372e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          a4jQJue4yx3fFDWyL9mUuBSuVehAhnexl4MDDvN/xUY=
Subject key identifier:   C4:7D:F9:10:AF:42:BB:C7:11:9C:03:38:E4:B4:63:32:CB:04:08:98
Certificate issuer:       /CN=83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3
Certificate serial:       305BB035AFE8301643317F3546A0CAAE6CFBC47F
Authority key identifier: 83:E2:3D:1C:F3:7B:B1:A7:4B:E6:25:B6:B2:9E:4B:3F:27:E2:94:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/3139322e3230372e36372e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 18:23:19 +0000
ROA not before:           Tue 05 Mar 2024 18:18:19 +0000
ROA not after:            Tue 04 Mar 2025 18:23:19 +0000
asID:                     23031
IP address blocks:        192.207.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5b:b0:35:af:e8:30:16:43:31:7f:35:46:a0:ca:ae:6c:fb:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3
        Validity
            Not Before: Mar  5 18:18:19 2024 GMT
            Not After : Mar  4 18:23:19 2025 GMT
        Subject: CN=C47DF910AF42BBC7119C0338E4B46332CB040898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:e9:6a:c1:b7:c2:6a:32:aa:30:bc:cc:8e:
                    08:e4:5b:fe:a5:87:be:19:1a:10:83:6d:33:7c:5c:
                    42:13:36:c4:1b:56:50:45:a9:81:ec:75:af:1e:c7:
                    b8:8c:bd:b8:34:68:ff:ac:cc:d6:e2:f8:99:ea:2a:
                    2b:12:cb:cb:e3:7f:53:2c:1e:e8:e9:4f:0d:88:72:
                    4c:84:15:73:89:2e:b6:69:2b:d4:53:7c:8a:b2:46:
                    46:38:c2:91:8b:86:18:da:e0:34:c1:02:7a:66:f1:
                    64:2e:d3:34:05:b5:00:d2:92:5f:28:30:0c:49:8c:
                    e3:5d:7f:89:b0:a7:f4:d8:98:3e:92:c0:57:c0:58:
                    6a:be:1a:ae:16:87:f9:76:1e:2c:bd:dd:d8:0a:22:
                    a5:b7:35:5c:e3:2d:15:66:74:34:29:3b:e3:1a:8e:
                    7b:4a:fb:0a:70:cd:33:c8:16:27:f1:89:b5:1e:36:
                    ec:13:e0:c0:ef:28:90:44:c4:f3:b3:fc:ae:c4:50:
                    40:b3:8b:98:f2:da:6f:21:0a:ca:71:c3:c3:9a:04:
                    8a:9a:0f:1b:d1:4e:08:4f:51:15:d4:27:e7:0a:ef:
                    b4:92:ed:0d:f4:8f:30:83:d3:cb:2e:57:09:9b:8e:
                    4a:de:27:b7:6b:9b:b2:6e:cb:a1:a4:f8:ac:bc:26:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:F9:10:AF:42:BB:C7:11:9C:03:38:E4:B4:63:32:CB:04:08:98
            X509v3 Authority Key Identifier:
                keyid:83:E2:3D:1C:F3:7B:B1:A7:4B:E6:25:B6:B2:9E:4B:3F:27:E2:94:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/3139322e3230372e36372e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:05:07:59:59:f8:11:ab:20:60:12:8e:87:4f:28:5e:73:
         97:46:a0:cd:27:ca:01:a0:bb:e2:a8:df:59:3e:b1:86:24:b7:
         c7:ba:3e:4f:ee:9d:29:da:6b:c2:57:44:1d:64:45:35:9a:3e:
         16:27:f8:cc:46:b4:9e:ba:96:aa:c6:9d:fa:11:9f:da:72:d0:
         ff:82:78:03:f4:3d:55:8d:25:fd:3e:dc:25:74:67:9b:0a:86:
         b4:c7:66:73:8f:1a:1a:a1:d2:6d:39:a9:e9:4a:5a:61:06:05:
         9e:72:e0:68:35:58:ce:d5:cf:87:b9:3b:ee:d1:be:a0:dd:8e:
         65:ab:ef:22:b4:eb:f1:0e:99:ff:b8:1d:2f:b1:ac:30:c5:31:
         3f:58:80:25:ef:fa:cc:f6:96:9f:11:dc:61:24:1c:d8:0b:9b:
         4b:13:34:9a:c9:d6:32:93:9b:7c:58:fa:dc:86:a3:84:c2:59:
         78:c4:ee:bb:c0:8a:fe:72:b5:7d:b8:ba:ac:08:46:92:05:98:
         b8:eb:8c:5a:64:78:f0:33:6d:95:17:2e:78:e7:0e:66:8b:4f:
         09:62:59:79:03:d6:31:b8:37:ad:b0:45:32:b2:ce:d3:5a:38:
         cc:be:48:c9:1f:ed:02:87:9e:fc:cd:2d:d7:4c:44:b9:98:f8:
         82:7c:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org