Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa
File:                     3138372e36322e39322e302f32322d3234203d3e20323639393039.roa (raw, json)
Hash identifier:          8lz/sWsCWMSKb1eI/ZpMh5pRi+ziadUFxajlX7ndfVQ=
Subject key identifier:   ED:BF:1D:96:03:38:9C:2C:1D:A1:5D:8B:2F:91:8D:3F:F5:F5:0A:CD
Certificate issuer:       /CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
Certificate serial:       657664E08DD34E3DD5A7E787D2EC6276E15521BF
Authority key identifier: 39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa
Signing time:             Tue 05 Mar 2024 18:23:31 +0000
ROA not before:           Tue 05 Mar 2024 18:18:31 +0000
ROA not after:            Tue 04 Mar 2025 18:23:31 +0000
asID:                     269909
IP address blocks:        187.62.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:64:e0:8d:d3:4e:3d:d5:a7:e7:87:d2:ec:62:76:e1:55:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
        Validity
            Not Before: Mar  5 18:18:31 2024 GMT
            Not After : Mar  4 18:23:31 2025 GMT
        Subject: CN=EDBF1D9603389C2C1DA15D8B2F918D3FF5F50ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:85:bd:70:dc:cf:dc:16:fb:91:86:9f:e5:
                    17:13:a7:27:d1:57:10:35:70:cb:5b:02:a3:2c:7c:
                    c8:93:e9:aa:c1:32:35:d0:dc:26:e4:03:c7:f2:50:
                    56:c0:3c:eb:72:f3:a1:53:74:78:b7:f5:8b:78:78:
                    9c:40:14:b7:06:d7:a5:f3:03:99:7c:62:6d:fc:f6:
                    e8:e0:85:69:dc:aa:5c:1e:08:b5:5c:1d:9c:b7:a8:
                    41:a5:01:3c:1b:b8:8f:02:d8:6a:bb:8e:78:14:42:
                    43:17:00:6f:19:b3:22:66:3d:8c:aa:8f:59:ea:a8:
                    ee:a3:72:bc:37:06:ed:c6:02:cd:93:45:d8:10:4e:
                    6f:df:eb:17:94:02:61:94:4d:65:86:bc:57:62:82:
                    0d:79:c2:75:56:5b:99:46:56:b1:23:78:21:53:d1:
                    56:db:70:2a:4b:37:ad:19:df:ab:ee:21:98:f9:da:
                    50:80:7d:c4:1b:5a:ff:59:0e:ba:14:b7:a1:75:10:
                    fb:c9:59:d6:b6:6e:1c:39:7a:75:7a:4b:d1:f6:87:
                    ce:cc:7a:3c:e0:27:96:44:a4:49:04:76:46:3d:d2:
                    3e:3c:7d:c6:61:37:72:31:2f:be:5b:aa:8f:35:b8:
                    48:c4:b6:56:f9:16:c6:72:75:a3:bb:8b:f3:57:c6:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:1D:96:03:38:9C:2C:1D:A1:5D:8B:2F:91:8D:3F:F5:F5:0A:CD
            X509v3 Authority Key Identifier:
                keyid:39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:51:fc:27:56:6e:5f:7b:2c:ac:a2:13:b7:ab:4d:e8:1b:62:
         0d:4e:e0:ab:b4:97:ca:91:88:71:e3:ac:a8:79:70:c9:44:87:
         7f:44:4c:a0:8f:15:bd:02:23:d9:ec:9f:c3:00:8a:24:74:97:
         94:dc:49:70:2d:00:16:71:13:45:75:38:16:f2:b2:65:53:db:
         89:44:1b:b0:8f:84:bd:f3:f8:8f:a9:c5:ac:e0:9c:85:ea:13:
         65:5b:a3:61:d7:0b:a2:63:28:ca:aa:26:cc:cd:95:c3:6e:5a:
         29:64:c1:fb:0a:cb:40:8e:b2:49:61:9d:38:1f:10:6e:fe:27:
         d4:8f:75:74:17:32:54:b1:6a:58:80:2f:c8:13:c0:8e:a7:90:
         86:75:20:1a:7d:6f:44:23:52:25:76:3b:aa:64:a5:54:41:56:
         d5:4c:c1:5e:a7:6c:cf:a2:94:3d:3c:9f:ce:25:1b:6a:c0:72:
         ab:71:b4:f8:39:54:ce:bf:1c:bf:1f:ec:31:7b:82:01:d8:43:
         f8:61:d3:4c:4f:a6:68:64:94:ec:84:d2:fe:e5:cc:4c:01:e8:
         93:c1:c4:4d:43:92:99:2d:53:e5:b6:f0:c6:15:b2:52:fd:d2:
         b6:9e:c1:f2:96:a9:f8:ab:e3:6a:36:b2:4c:9d:d7:02:7b:a6:
         80:be:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org