Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa
File:                     3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          MIVnBTp1zgHQIxVaHNa4Yt3i2j8sCLXf5ufqDTUdICY=
Subject key identifier:   E5:A0:32:70:2B:BE:DA:E0:C0:F8:1D:FE:CE:B4:B6:FE:F1:90:20:61
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       2728FACEB03FC97FFD31683E3E66D8A3EBA79DC4
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:30 +0000
ROA not before:           Tue 05 Mar 2024 18:05:30 +0000
ROA not after:            Tue 04 Mar 2025 18:10:30 +0000
asID:                     27773
IP address blocks:        190.150.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:28:fa:ce:b0:3f:c9:7f:fd:31:68:3e:3e:66:d8:a3:eb:a7:9d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:30 2024 GMT
            Not After : Mar  4 18:10:30 2025 GMT
        Subject: CN=E5A032702BBEDAE0C0F81DFECEB4B6FEF1902061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:a1:0f:97:60:0b:3a:ae:3a:b9:18:69:65:
                    45:17:a1:51:72:e3:5d:d2:06:4e:b6:d9:24:16:53:
                    67:87:07:79:57:b7:d0:f5:a2:be:56:47:91:20:6c:
                    be:3f:7e:d8:4b:0c:7b:fb:93:db:93:f6:4d:77:c1:
                    b2:01:95:b5:bd:5f:23:e9:45:e6:b3:89:9f:44:54:
                    0d:a8:33:c9:e3:a1:2a:44:7e:3a:54:0b:0c:40:43:
                    cb:53:8e:07:86:36:ef:bb:08:fc:fa:df:0d:02:a5:
                    25:33:5d:bf:5d:4a:e7:fc:74:02:7a:3a:21:c2:f3:
                    a1:fb:f5:55:ee:43:96:40:3c:9d:f3:9b:90:f5:12:
                    ac:de:68:0a:fe:03:ce:85:5e:2d:77:c3:53:4c:49:
                    b2:d3:e8:80:2f:62:92:05:f6:31:cb:0d:7a:b8:9d:
                    fa:86:f9:16:1a:cf:31:ea:7a:33:42:49:e9:c3:e2:
                    fe:b0:b5:93:13:8e:2a:a0:68:59:58:32:b2:ba:c7:
                    49:6f:76:32:06:c2:35:fc:86:c4:fd:b2:29:99:98:
                    58:b1:68:c3:17:be:b3:03:45:a4:3c:09:f6:00:e5:
                    40:d3:fa:f7:b7:60:87:98:50:de:ea:c2:78:f5:16:
                    80:a2:71:5c:db:1a:41:84:84:30:b2:f1:63:be:d0:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:32:70:2B:BE:DA:E0:C0:F8:1D:FE:CE:B4:B6:FE:F1:90:20:61
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:af:a4:46:7f:9c:74:1b:00:26:39:05:75:b5:5d:ac:93:73:
         20:fa:5e:61:e9:72:cc:3e:4d:f5:44:54:df:ad:55:09:da:41:
         4a:c2:93:dc:e6:16:3b:c4:88:89:e7:97:3c:a4:3e:c1:68:58:
         f1:88:18:c6:19:2f:4b:1c:bf:e8:61:17:bf:b4:b3:e1:30:0a:
         4e:8b:da:35:58:6d:bf:4a:18:c3:a6:5d:2b:df:96:9c:c6:3d:
         15:79:03:ea:f1:fd:0e:53:7c:af:bc:8b:34:8a:c7:5c:76:1a:
         ba:a7:47:0f:74:56:00:44:00:28:53:05:55:05:5a:7f:20:0d:
         bc:55:2e:dc:68:e7:7f:79:84:da:cd:1d:3d:1e:f3:56:a6:af:
         35:b1:a1:b2:8c:0f:78:e4:df:3a:75:b3:a8:22:c2:a4:2f:92:
         99:61:54:40:56:f6:16:b6:1a:42:ab:9b:b1:9d:4a:2f:a3:fa:
         54:f0:f3:cf:bd:27:be:47:09:62:9b:8c:c4:dc:6f:36:8b:34:
         cb:fb:80:b3:68:04:30:70:24:21:e2:4c:72:72:8f:e2:6c:c1:
         6a:73:58:92:d4:2d:40:b6:25:f8:16:33:aa:f5:2a:5a:02:82:
         d1:69:7d:60:7c:6e:1b:34:f6:fc:06:f5:2e:9c:16:2a:16:72:
         fa:14:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org