Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa
File:                     3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa (raw, json)
Hash identifier:          Oax1wAU/V7/vpFUNhXsqhlS/USjD+k+EYAtNJfg6UbY=
Subject key identifier:   18:9B:8F:67:39:B2:4D:5B:23:78:E6:1B:54:17:EE:6E:A2:73:4E:F0
Certificate issuer:       /CN=53953B71C225D2143C92C173E8F140C5C5F22612
Certificate serial:       0427BC7B2C8CFEDFDFEE98D4B7613C61F7FE8B56
Authority key identifier: 53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa
Signing time:             Tue 05 Mar 2024 18:20:27 +0000
ROA not before:           Tue 05 Mar 2024 18:15:27 +0000
ROA not after:            Tue 04 Mar 2025 18:20:27 +0000
asID:                     52337
IP address blocks:        190.105.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl
                          rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:bc:7b:2c:8c:fe:df:df:ee:98:d4:b7:61:3c:61:f7:fe:8b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53953B71C225D2143C92C173E8F140C5C5F22612
        Validity
            Not Before: Mar  5 18:15:27 2024 GMT
            Not After : Mar  4 18:20:27 2025 GMT
        Subject: CN=189B8F6739B24D5B2378E61B5417EE6EA2734EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:96:00:57:33:e7:36:18:c2:27:ab:8e:f7:
                    3a:98:14:06:98:b3:19:89:ba:56:84:b3:36:73:58:
                    8e:3d:16:bf:d9:52:46:43:c9:99:6e:1b:06:42:1a:
                    08:13:eb:60:c4:99:18:07:40:0b:f6:eb:96:fb:ac:
                    95:f1:ae:f2:94:11:14:2b:36:ed:62:b6:f0:03:ae:
                    ea:2b:82:50:30:d4:e6:c2:01:33:9c:d2:f1:de:0a:
                    1e:e8:52:92:06:aa:32:e1:9b:17:c1:b8:a2:f0:5c:
                    86:8b:5d:7e:74:38:70:f8:70:62:10:30:4d:6b:b7:
                    8a:1f:46:19:57:1c:e8:29:b0:15:fe:d3:ae:c9:e1:
                    f6:00:12:50:54:02:b2:91:97:f5:f1:44:ab:90:4c:
                    4a:b3:2b:e8:47:8f:df:0e:aa:98:85:50:52:8f:db:
                    8c:64:c9:d0:74:60:39:3c:9b:8f:6d:aa:17:a0:41:
                    bb:20:fc:03:3e:45:4b:d7:34:41:5d:9e:f0:85:4e:
                    0f:47:bf:de:64:01:ea:85:7a:5d:50:94:e4:f2:b4:
                    fe:b7:10:96:dd:31:24:51:51:56:db:31:75:a6:37:
                    f0:1d:77:85:0d:d9:e7:e4:2d:39:bd:97:b9:0b:44:
                    9b:12:d4:d9:4b:7d:1c:2c:f0:3b:b5:d2:27:d0:fb:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9B:8F:67:39:B2:4D:5B:23:78:E6:1B:54:17:EE:6E:A2:73:4E:F0
            X509v3 Authority Key Identifier:
                keyid:53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:7c:7a:d3:dc:fd:7b:9b:dc:a3:39:66:57:15:6d:e3:ff:7c:
         5a:93:cc:09:d8:27:ab:24:d7:e6:10:00:7d:91:86:38:8c:e4:
         aa:b7:65:94:b2:58:e0:54:3f:ae:3f:77:6e:4d:ef:6b:1f:15:
         02:82:f7:74:ab:d7:0c:18:31:e6:e2:1d:7d:ba:db:88:58:5d:
         52:84:05:59:c6:b1:6e:e3:8b:84:4f:1b:26:48:f6:a9:04:fe:
         d2:fe:ae:f2:b7:db:c3:5f:42:2a:7e:97:99:5d:94:95:6f:20:
         26:3c:4c:d0:98:5a:b7:f9:64:ba:19:e1:e5:74:e1:39:7d:ef:
         30:f1:22:f8:c9:74:ce:c2:01:4e:2f:2f:95:92:b4:e4:73:19:
         70:5c:b9:a9:3f:a4:12:cd:8e:4d:60:1c:b6:0c:29:39:4f:07:
         b3:89:e1:13:60:2c:4a:82:90:6b:79:5a:c7:b9:79:74:bc:4a:
         7f:37:4d:82:28:0c:42:2d:b7:ae:7b:16:6e:76:e0:fb:f2:42:
         63:18:8c:a3:57:0d:fd:d5:e9:61:03:99:cb:32:23:cb:2e:0e:
         9c:32:89:5f:a8:8e:4d:4f:88:40:6d:cd:9e:43:52:79:52:5b:
         b7:a4:6f:4c:5f:1a:cc:51:03:4f:af:c8:34:d4:cd:09:93:56:
         68:cb:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org