Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32342d3234203d3e203532333236.roa
File:                     3139302e3135312e3133382e302f32342d3234203d3e203532333236.roa (raw, json)
Hash identifier:          r0c7JVzSdbiTNYuDYigc03KiALFzo+snZMjUxfsS5eU=
Subject key identifier:   75:8C:B0:0A:52:50:E6:66:31:CE:E5:EF:A1:7F:48:BC:8E:A2:58:0D
Certificate issuer:       /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial:       15FF83CA0EF80DF380FED191E0B862BCC00D9439
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32342d3234203d3e203532333236.roa
Signing time:             Tue 05 Mar 2024 17:40:38 +0000
ROA not before:           Tue 05 Mar 2024 17:35:38 +0000
ROA not after:            Tue 04 Mar 2025 17:40:38 +0000
asID:                     52326
IP address blocks:        190.151.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ff:83:ca:0e:f8:0d:f3:80:fe:d1:91:e0:b8:62:bc:c0:0d:94:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
        Validity
            Not Before: Mar  5 17:35:38 2024 GMT
            Not After : Mar  4 17:40:38 2025 GMT
        Subject: CN=758CB00A5250E66631CEE5EFA17F48BC8EA2580D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:c0:11:d4:8a:2d:62:ae:c7:71:c4:49:32:
                    b1:d3:56:4d:36:de:2b:09:1d:17:09:bc:6f:48:02:
                    42:20:35:8a:6a:fc:02:a0:72:7f:ce:58:05:52:70:
                    2c:27:7b:19:59:b3:db:f4:66:df:27:e6:22:b2:4c:
                    97:a3:85:a1:10:8a:34:77:47:41:21:f5:38:82:fa:
                    3a:62:51:15:d4:1d:35:b6:af:89:f4:07:05:41:2b:
                    28:d8:ff:4e:9c:09:49:2b:e5:04:7b:83:8c:a4:51:
                    03:02:df:d0:6f:58:e9:eb:23:3e:69:d0:48:e8:2f:
                    12:01:8a:98:fc:90:19:ec:e6:64:e5:a7:99:0f:6c:
                    a5:4f:17:58:73:07:2b:5b:70:3b:f9:a5:fc:31:b6:
                    35:2e:51:ec:a9:6c:a4:c5:54:8f:d5:d8:8b:e3:c7:
                    dd:a4:8e:c7:23:37:f1:fa:da:82:5d:11:32:d9:6d:
                    be:77:b3:6a:7a:2f:38:98:ee:c4:1b:ac:84:62:8a:
                    3d:ba:ab:11:d9:44:73:08:5d:d6:77:64:d4:49:e2:
                    08:13:9f:53:c1:ee:13:d2:ef:df:ec:5c:a4:e1:f5:
                    ad:3c:b4:61:60:95:24:74:a8:63:e5:12:89:41:84:
                    94:2e:0c:38:2f:0b:01:b4:2d:c5:e8:bb:76:d6:03:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:B0:0A:52:50:E6:66:31:CE:E5:EF:A1:7F:48:BC:8E:A2:58:0D
            X509v3 Authority Key Identifier:
                keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32342d3234203d3e203532333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:0b:f5:6a:d0:6c:c8:b4:eb:11:38:40:c6:1d:ed:f7:5c:
         e7:fc:64:4a:6a:bb:87:96:d9:b0:27:61:3a:48:f9:66:f6:7e:
         16:80:66:62:ae:ad:83:f7:95:98:0b:9c:d1:fa:ee:11:8c:51:
         1d:5a:84:59:5d:89:52:5a:c0:3f:6d:ac:62:be:70:30:81:67:
         e5:72:a5:31:20:cc:bb:b9:ba:4b:fd:28:89:7a:fd:65:3c:55:
         7b:f9:34:ad:dd:a3:5a:2f:8d:a5:96:5f:fc:7b:d5:2b:cd:31:
         d6:54:e4:ff:11:6c:ae:f7:b4:81:17:56:fb:c8:6e:f3:eb:29:
         ad:dc:4b:21:f1:a4:51:b7:64:ff:fc:85:c1:1c:64:91:e9:97:
         b0:a0:b0:18:55:c9:1c:33:9c:6d:4d:72:bd:1c:cc:94:4f:df:
         1f:da:bb:8a:56:7b:e2:e3:ba:8a:a2:c9:d3:d4:5a:11:34:41:
         be:f1:88:c1:74:86:a8:b8:22:f2:5e:c4:e7:5f:86:45:a2:05:
         95:3d:ac:40:a7:2b:60:62:53:ff:b1:f6:82:aa:eb:65:8d:b3:
         57:f1:11:b6:7d:41:23:49:b3:13:5a:ae:e6:e3:83:de:84:59:
         33:23:11:fd:a4:09:b5:14:11:6a:91:c0:7d:31:ce:07:74:f3:
         85:69:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org