Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33372e302f32342d3234203d3e203237373733.roa
File:                     3139302e39392e33372e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          03qube6sXfnSG67Hdqppf5MigqLqmfI/aZKD5OXKT20=
Subject key identifier:   A4:F3:7E:E1:DB:B8:8C:5D:A1:64:D2:4F:4C:D2:A6:6A:61:B7:F1:D4
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       63A2AB4BDEC035F0A7D5E243AD7C8C0577BB3807
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33372e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:42 +0000
ROA not before:           Tue 05 Mar 2024 18:05:42 +0000
ROA not after:            Tue 04 Mar 2025 18:10:42 +0000
asID:                     27773
IP address blocks:        190.99.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a2:ab:4b:de:c0:35:f0:a7:d5:e2:43:ad:7c:8c:05:77:bb:38:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:42 2024 GMT
            Not After : Mar  4 18:10:42 2025 GMT
        Subject: CN=A4F37EE1DBB88C5DA164D24F4CD2A66A61B7F1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1c:2a:2e:5d:4d:a2:b2:35:09:aa:b0:0e:f3:
                    1a:8d:88:b4:38:07:f7:c5:de:46:c4:e4:ed:2d:b3:
                    d2:9e:44:26:10:a5:3f:9d:97:52:9c:3d:ec:cf:af:
                    29:6c:5e:95:b7:ec:47:65:e9:bc:2d:47:9b:80:cf:
                    6b:41:9d:d7:ae:aa:bf:9b:be:1f:9d:a1:43:1f:68:
                    09:a7:c2:f8:9c:b8:a8:1e:b9:7c:b9:41:89:6c:31:
                    cf:ff:c9:1a:50:8e:78:53:82:37:f1:9b:cc:dc:d0:
                    be:40:2d:4c:fc:42:db:d7:6f:f2:e6:43:df:7e:f6:
                    f9:ba:e1:04:6b:d8:28:6e:b7:2f:35:55:9c:f0:83:
                    09:90:38:55:58:3f:18:6b:8e:96:66:4b:31:f4:35:
                    5a:4e:fb:9f:e2:d5:05:29:2c:0d:75:7d:30:5c:81:
                    cd:98:ab:7b:de:70:b8:9c:9c:42:37:6c:96:5b:f9:
                    9a:79:ab:2f:3f:f5:d4:df:50:60:06:ea:bd:93:a5:
                    0b:61:e4:c2:30:81:4c:81:4e:a1:13:96:71:31:80:
                    dc:12:12:f9:03:44:04:eb:f0:76:c1:b9:5d:ea:97:
                    cc:91:4b:3f:72:b5:9b:a2:d9:a6:68:74:86:11:14:
                    34:7e:ae:b4:9a:f8:8e:d7:28:00:45:28:94:f1:5c:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F3:7E:E1:DB:B8:8C:5D:A1:64:D2:4F:4C:D2:A6:6A:61:B7:F1:D4
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33372e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:2c:6a:b5:4e:88:5e:bf:de:93:7f:de:c1:bc:5a:11:81:
         6b:ff:87:f6:49:3d:bc:7c:53:c5:23:20:e9:8d:40:cf:17:c6:
         37:7b:8a:92:9b:6f:d8:02:d7:bc:5f:55:27:72:37:be:a1:7d:
         1e:fb:4e:b7:cd:2a:03:71:29:87:df:3f:37:bb:e5:bb:7f:94:
         1b:f6:aa:4d:b1:c9:72:5d:d6:12:d1:55:3a:e8:7f:44:1f:b5:
         1b:9c:01:31:b3:9c:1b:2e:6a:9a:42:3e:a9:ef:c2:f8:e4:77:
         9e:2f:e5:f7:18:08:4e:96:28:43:2c:d9:3a:44:62:0a:10:b7:
         da:78:d3:c9:65:c0:8c:b8:db:26:a5:9a:33:ba:47:b6:b6:df:
         44:03:eb:fb:07:d9:6a:ab:6c:83:3f:76:a3:9e:a5:d2:21:24:
         aa:1b:e7:0b:0f:ff:a7:a4:d1:77:a2:10:46:c8:4c:32:df:9d:
         2f:31:c8:d7:52:e0:6d:e5:8c:8b:b7:f7:82:ed:b8:30:2c:c3:
         a6:ed:18:fa:ff:b7:91:f3:e7:9e:fd:a4:51:d8:38:86:6a:52:
         a8:6c:c7:58:90:ca:b5:1c:f3:b2:52:e3:93:3a:bb:fc:20:1c:
         4a:ef:38:9e:37:47:46:8f:39:22:09:4f:d1:8b:1e:f6:56:f5:
         77:83:3b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org