Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa
File:                     3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          iWWSWAyC/MNfN/vFTw1d50udcgbItmY6AfhpLAqm2PU=
Subject key identifier:   BF:4B:53:96:B6:49:14:20:B5:DF:87:B8:7B:06:F6:EC:F3:79:88:D0
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       3A92700067F213E8BF56C923F3A14AF1CFFE9210
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa
Signing time:             Tue 05 Mar 2024 17:47:44 +0000
ROA not before:           Tue 05 Mar 2024 17:42:44 +0000
ROA not after:            Tue 04 Mar 2025 17:47:44 +0000
asID:                     265683
IP address blocks:        190.185.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:92:70:00:67:f2:13:e8:bf:56:c9:23:f3:a1:4a:f1:cf:fe:92:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:44 2024 GMT
            Not After : Mar  4 17:47:44 2025 GMT
        Subject: CN=BF4B5396B6491420B5DF87B87B06F6ECF37988D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:ca:5a:94:c8:bd:ae:9b:11:f3:d6:7a:a4:
                    a1:5e:2d:53:8c:3c:8b:ce:7a:21:f8:e7:f9:ec:9d:
                    d1:ae:f0:16:16:b9:dc:2f:43:33:7f:db:1a:70:8f:
                    19:5f:15:b9:3c:16:3f:47:fb:23:91:84:b7:a0:87:
                    a4:bc:e4:dd:76:3b:d3:40:63:d4:84:07:18:ea:3e:
                    ce:13:ed:33:b8:2d:1a:a1:cb:ea:20:c8:87:f7:72:
                    0f:7f:41:43:46:7f:27:93:36:1a:44:d1:a8:0b:22:
                    c1:07:33:7c:54:54:8a:17:fd:f5:cc:47:90:55:6a:
                    bc:f5:68:f7:d3:57:af:89:85:b1:de:80:07:c2:74:
                    ab:06:df:26:d5:f9:c2:b1:a9:75:59:3a:44:55:6b:
                    4f:ef:a5:21:98:68:0d:ac:15:52:60:d5:89:90:d8:
                    f0:ab:08:f7:61:25:28:81:ae:64:d5:a4:03:67:ba:
                    65:07:65:67:4e:9b:0c:fc:d1:c3:c2:e1:0e:85:f8:
                    d8:37:bb:f1:80:75:4d:5b:41:eb:63:29:5c:88:7a:
                    bb:96:d5:b3:05:1d:11:b2:e2:d5:42:5d:47:6a:30:
                    d9:e5:0c:0d:70:30:46:d3:ff:45:8f:64:06:f8:f8:
                    fa:0b:c4:2b:61:57:64:c8:55:3d:7d:cd:bd:5d:9c:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4B:53:96:B6:49:14:20:B5:DF:87:B8:7B:06:F6:EC:F3:79:88:D0
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:4e:0c:af:73:53:e0:3c:75:b7:85:a3:4b:76:ac:68:30:
         23:50:e7:00:71:c7:cf:66:56:c1:60:d3:03:19:72:f0:f0:95:
         70:8d:39:7e:e5:c4:30:f0:46:a3:b0:16:15:f2:74:6f:48:bc:
         8e:a1:f5:21:2b:7c:c6:97:c5:99:70:c3:e4:68:c9:f7:cb:ef:
         6e:eb:5d:87:8a:c3:bc:90:4d:a9:6a:77:74:5a:e6:6c:7e:34:
         e5:92:c0:f3:a3:14:2b:46:bc:a6:72:64:60:ac:a7:52:dd:28:
         a6:a5:da:40:85:17:52:b8:f0:e8:c7:dd:87:2f:a8:bb:a3:10:
         ce:fc:9d:4b:27:49:1f:4f:d3:53:76:30:14:9c:36:71:af:17:
         37:f6:2c:be:18:32:4e:55:37:1a:e5:bb:d4:8b:25:2e:1b:42:
         f7:cd:1e:b4:ec:a8:09:f4:f0:06:2d:bc:51:33:e9:c0:93:9c:
         fc:e0:df:55:ae:6d:1b:31:76:9e:ab:71:9f:cf:44:75:5a:54:
         56:8f:09:d4:6d:03:46:eb:b4:fc:e0:5a:37:d4:32:d9:f1:69:
         b2:82:51:1c:0b:7d:06:b1:76:5b:6a:85:42:55:b6:b3:69:e2:
         0f:62:54:33:e0:3d:32:b3:60:b9:a9:1b:c3:12:7f:44:49:7e:
         c0:33:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:45 2024 by rpki-client on console-fra.rpki-client.org