Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3233203d3e203532333236.roa
File:                     3139302e3135312e3134302e302f32332d3233203d3e203532333236.roa (raw, json)
Hash identifier:          qXavFba4DLHLVb2BEapVeEIOR/ExAtqj33SRVqqBiUU=
Subject key identifier:   22:57:CA:F5:9F:02:69:A4:80:89:1E:DC:CF:D2:23:7D:AB:E1:3E:E3
Certificate issuer:       /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial:       7A9ECBAEC89D5509D17C84A17D1339FECDF83829
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3233203d3e203532333236.roa
Signing time:             Tue 05 Mar 2024 17:40:37 +0000
ROA not before:           Tue 05 Mar 2024 17:35:37 +0000
ROA not after:            Tue 04 Mar 2025 17:40:37 +0000
asID:                     52326
IP address blocks:        190.151.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9e:cb:ae:c8:9d:55:09:d1:7c:84:a1:7d:13:39:fe:cd:f8:38:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
        Validity
            Not Before: Mar  5 17:35:37 2024 GMT
            Not After : Mar  4 17:40:37 2025 GMT
        Subject: CN=2257CAF59F0269A480891EDCCFD2237DABE13EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:6c:be:5a:c3:a4:89:12:22:7d:d2:e9:cb:
                    28:1e:26:10:3b:5e:6d:b3:27:86:57:67:9a:19:d5:
                    91:0e:2c:62:f7:10:fa:37:22:d7:a1:24:fc:12:77:
                    22:aa:23:62:59:f5:cd:38:51:2c:95:ef:da:22:01:
                    28:2f:eb:1c:73:58:cb:b5:f6:2f:2e:e1:4e:92:28:
                    59:50:d2:27:8c:b1:ee:ec:bb:4d:a5:ce:79:ef:79:
                    6f:d6:95:b5:88:5d:6b:26:20:8c:5a:88:4b:e3:c5:
                    e3:16:09:f2:06:a6:01:81:9b:6d:37:83:4d:6b:e5:
                    30:d3:d8:da:3b:be:43:73:e2:06:21:53:47:4e:64:
                    24:f8:53:63:1c:4d:2e:45:97:ef:c7:78:19:88:61:
                    cb:46:b6:74:0e:d9:92:d0:04:62:0e:b8:91:33:69:
                    97:29:e9:bc:f3:8b:da:e5:12:7a:a1:7a:a9:ae:d0:
                    29:8f:5c:e1:f9:30:82:42:41:0d:bc:fe:44:e3:34:
                    de:13:07:2d:93:62:0a:d7:84:32:f9:f9:0d:0b:d5:
                    2a:fd:8a:2a:12:f6:b0:fb:8d:f3:5e:06:00:05:c7:
                    f6:b0:4f:55:56:8f:a9:09:a2:5c:e6:35:5e:e5:70:
                    8b:b8:fa:89:f9:f4:ae:c2:6c:84:ca:68:1e:96:b6:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:CA:F5:9F:02:69:A4:80:89:1E:DC:CF:D2:23:7D:AB:E1:3E:E3
            X509v3 Authority Key Identifier:
                keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3233203d3e203532333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:27:e0:98:b3:1f:ea:da:1c:e9:f1:ac:94:bf:46:86:2b:
         af:3b:df:5f:96:ed:a5:a6:9e:e4:27:a4:8a:0f:ef:0c:38:c5:
         c6:3c:2a:17:99:16:86:fb:30:5e:c6:bf:6d:8d:7c:17:49:00:
         8e:d5:a9:12:10:36:79:b8:27:72:58:2c:25:6a:e0:b5:ca:44:
         ee:3c:0f:9f:2b:cd:52:22:bd:cb:17:7f:87:33:f2:26:e6:14:
         ec:88:c2:a0:61:e4:06:b4:f1:1e:cc:f5:e3:09:19:ed:f6:3e:
         45:eb:09:e4:27:8d:5f:c9:58:45:09:e2:8d:8c:2f:82:86:61:
         6e:7b:b8:64:4a:4f:e9:40:fd:03:cc:6e:52:df:9c:8f:7a:4e:
         ff:0b:9f:a0:bc:38:ee:00:a1:fb:1f:1c:67:60:20:6b:90:1c:
         ed:1a:c0:ad:65:50:32:fe:40:41:54:6b:36:eb:e6:b7:26:21:
         d3:36:a5:4c:cd:99:12:a4:32:f1:a3:e2:54:cb:41:de:2b:34:
         60:b9:64:f6:7e:11:05:ae:fe:80:60:47:36:5e:67:94:22:9e:
         1d:cf:91:d1:07:35:7d:df:4f:e3:a2:e8:8e:67:f4:d3:88:62:
         bd:44:0d:4e:07:07:45:c3:d3:8c:cf:82:dc:a6:2a:c7:1b:d2:
         70:5b:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org