Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e35362e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          +N6JINBicEngn5MM/fG9wp4w48cS6vhfM+UE96CIdYs=
Subject key identifier:   D2:38:9F:91:F1:88:3D:CB:DC:C7:3C:07:B4:C1:78:FA:CC:3B:83:6C
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       36B541358DB8506D09C1500FC1784B4788966CD6
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:44 +0000
ROA not before:           Tue 05 Mar 2024 18:05:44 +0000
ROA not after:            Tue 04 Mar 2025 18:10:44 +0000
asID:                     27773
IP address blocks:        190.150.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b5:41:35:8d:b8:50:6d:09:c1:50:0f:c1:78:4b:47:88:96:6c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:44 2024 GMT
            Not After : Mar  4 18:10:44 2025 GMT
        Subject: CN=D2389F91F1883DCBDCC73C07B4C178FACC3B836C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:b2:18:00:6f:ba:20:e7:ca:92:80:0d:2f:
                    dd:90:95:e3:d3:13:03:73:03:c2:a9:33:80:9a:87:
                    9c:3e:18:16:5c:ab:b0:a3:6e:d3:9c:31:4a:42:af:
                    53:00:84:ef:1e:94:da:35:d8:b1:86:af:c5:ba:c7:
                    34:86:43:df:24:ae:5f:ba:51:34:bd:0b:40:3f:7b:
                    3e:87:34:07:f7:74:9b:31:a5:77:79:1c:c9:45:d4:
                    a1:12:83:2a:ea:d5:ed:ef:ad:32:f9:75:c3:68:8b:
                    e5:0d:32:aa:65:6f:76:25:4f:83:e7:6f:07:4a:f3:
                    d2:c9:d5:37:d1:da:22:e6:b8:89:37:04:23:6e:93:
                    49:96:63:fb:ec:6e:e9:93:8c:a7:3f:76:82:33:b3:
                    51:ab:a5:ce:8b:46:64:1b:18:b9:1b:d7:76:84:e5:
                    b8:cd:14:2d:5c:96:d1:61:f5:eb:a9:93:fb:0e:9b:
                    24:70:57:5c:c3:4c:97:e2:8c:f1:d0:21:60:41:3f:
                    7a:6d:fe:4d:92:56:cf:77:52:f4:21:dc:88:78:3e:
                    7c:90:a8:06:8c:7e:6a:33:17:85:95:61:ae:ac:32:
                    22:23:a5:b5:d1:02:12:07:02:43:7f:d8:1d:2c:61:
                    c6:f8:30:77:a2:a9:ce:54:13:75:6b:bb:14:95:34:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:9F:91:F1:88:3D:CB:DC:C7:3C:07:B4:C1:78:FA:CC:3B:83:6C
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:29:89:86:93:48:c3:43:91:cc:95:a2:2d:6d:a1:b9:2d:
         c8:b0:c3:ef:c8:5a:f3:70:3f:20:1d:57:15:cd:bc:bb:3a:5f:
         2c:0b:75:d0:7f:9f:50:8b:cc:78:bf:93:27:ed:24:fe:d3:72:
         ba:9d:2c:a1:0d:ee:f8:06:a9:e1:95:cb:4a:7d:48:b1:34:e9:
         b7:2e:cd:86:41:19:16:64:48:93:ce:24:51:3d:c7:b8:b6:35:
         5f:a5:5f:67:a1:08:b3:b8:56:9e:88:e1:2d:b4:69:7c:14:6c:
         85:1c:4a:99:a6:a3:33:d3:04:dc:2e:6a:1a:da:0c:b3:c8:15:
         33:80:2a:b9:be:58:02:99:1e:1d:5e:3f:71:12:9e:5f:b0:b2:
         49:26:c6:fe:dd:b1:94:ba:06:7e:88:14:02:97:c9:be:db:6b:
         5c:70:ed:91:44:00:23:f9:f7:21:4e:02:24:58:85:e2:85:41:
         9b:7e:bf:b1:5a:b8:58:3a:82:c2:49:06:45:ca:01:ab:0f:6f:
         60:0c:0a:67:6b:cc:21:c1:89:2c:34:18:78:da:92:86:02:e7:
         53:14:fd:53:b6:77:b6:c9:e9:06:da:2e:90:47:ea:c4:8b:09:
         fe:b2:c2:2f:25:c3:9f:e1:ec:76:0f:77:f5:c9:01:f3:c7:43:
         90:c2:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org