Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34372e302f32342d3234203d3e20323633323031.roa
File:                     3139302e35332e34372e302f32342d3234203d3e20323633323031.roa (raw, json)
Hash identifier:          LlFEJWlj/l9LzdE/RjH2P4nj/aOioCR+cVytn//woaY=
Subject key identifier:   D3:08:FE:4B:D6:33:2C:46:DB:26:12:76:DB:F7:9D:C5:33:FA:AA:71
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       272D9DA22FB8881A8DC2F6E34C053ADF32D0B427
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34372e302f32342d3234203d3e20323633323031.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     263201
IP address blocks:        190.53.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2d:9d:a2:2f:b8:88:1a:8d:c2:f6:e3:4c:05:3a:df:32:d0:b4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=D308FE4BD6332C46DB261276DBF79DC533FAAA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:e9:7e:29:77:a3:8c:89:c6:9f:c1:dd:0b:
                    3e:aa:82:d8:cd:0f:78:4d:d5:69:ae:2c:32:8e:a0:
                    a4:45:b4:91:10:a2:2a:9e:08:d6:af:bc:e2:39:b7:
                    48:7a:52:a3:f2:93:c8:a0:c2:a4:f6:8c:6c:a5:fe:
                    be:e7:93:ba:82:5e:0f:94:f6:a1:56:c7:35:71:b8:
                    73:59:e5:ff:6a:14:23:41:12:e3:98:67:7d:68:98:
                    3b:e5:e8:60:be:be:b3:60:f3:a3:3a:23:1f:c7:7d:
                    96:1e:f2:64:e8:0e:c6:95:2d:ee:d4:78:40:d9:6d:
                    9a:59:25:1b:bb:16:54:1b:58:09:aa:a7:42:61:d3:
                    6b:87:b0:f0:17:3b:0d:7b:40:38:d6:eb:47:97:08:
                    de:8d:83:13:a5:8a:ac:9c:00:af:16:03:75:3a:57:
                    aa:e4:4f:d9:b9:8a:0f:79:af:2f:d7:d6:f7:b1:93:
                    31:2c:3c:19:7f:96:d6:21:1a:db:4e:c1:c7:ca:d3:
                    ef:2d:8c:01:09:8d:cb:87:99:2f:0e:04:3d:69:5a:
                    af:be:65:3b:11:53:9c:5c:4c:ad:d5:c6:79:80:a4:
                    5e:d0:c5:d7:68:89:86:b0:87:78:2f:0b:d9:43:1a:
                    46:19:31:fa:53:f2:e9:33:6c:a3:4a:96:83:53:62:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:08:FE:4B:D6:33:2C:46:DB:26:12:76:DB:F7:9D:C5:33:FA:AA:71
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34372e302f32342d3234203d3e20323633323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:0e:a3:14:f6:24:12:01:68:52:ad:02:1f:8d:1d:cb:12:52:
         5a:9c:8a:21:b9:5d:90:aa:da:bb:fe:7a:3d:84:26:33:01:9d:
         7b:14:a2:63:2e:4d:d5:d6:6c:9e:ac:82:e5:3c:42:31:d1:07:
         10:c2:f8:f5:0b:2b:87:f0:cd:8e:b7:83:c5:e4:06:39:87:de:
         8f:c1:45:83:94:b3:e2:8e:7c:fd:30:02:21:e1:9a:33:08:e1:
         7f:68:9c:82:b4:a5:ac:be:71:ca:3e:8d:cf:55:7f:36:21:58:
         98:57:7b:31:e4:97:c9:75:04:8b:4c:97:d0:32:06:a0:fe:e7:
         d3:75:b5:3d:f2:ca:39:e2:a9:81:b3:b7:5c:32:df:d6:1d:a4:
         90:21:72:de:30:00:9c:e6:ed:93:85:c1:fe:38:bc:24:02:26:
         d2:14:b9:eb:4e:3f:e9:b1:a4:c0:44:11:2e:3d:f7:7e:06:d3:
         c0:27:b7:10:99:08:f5:36:43:33:84:a3:36:8c:00:24:5c:ce:
         80:64:8a:e6:89:61:ec:eb:76:5c:de:27:32:a2:78:e0:60:b8:
         63:54:0a:fb:99:1e:fc:6a:3b:51:ea:63:3a:88:49:4e:82:96:
         ff:d9:0a:db:f0:23:23:a0:bb:35:48:9c:09:ff:37:4f:78:26:
         2f:1a:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org