Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa
File:                     3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa (raw, json)
Hash identifier:          LZru1GFr7qNWX9Ahc5p+yVlP/R/WAyGL/k7HwhONWak=
Subject key identifier:   7B:66:6B:03:CF:59:D8:68:2F:EA:FF:2D:08:00:3C:5D:67:2D:67:4B
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       52CAE0DA554DD93A57BBFB5BB797B27A6D959CAB
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa
Signing time:             Tue 05 Mar 2024 18:01:37 +0000
ROA not before:           Tue 05 Mar 2024 17:56:37 +0000
ROA not after:            Tue 04 Mar 2025 18:01:37 +0000
asID:                     52278
IP address blocks:        190.105.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:e0:da:55:4d:d9:3a:57:bb:fb:5b:b7:97:b2:7a:6d:95:9c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Mar  5 17:56:37 2024 GMT
            Not After : Mar  4 18:01:37 2025 GMT
        Subject: CN=7B666B03CF59D8682FEAFF2D08003C5D672D674B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:af:81:db:1e:2b:30:4a:b0:c6:ce:2d:2f:
                    35:e8:11:18:c3:39:88:dc:65:f2:0a:11:be:65:8f:
                    41:62:e4:ed:72:0c:2d:b4:47:43:55:31:48:7e:e8:
                    f1:6e:a9:97:7f:64:c6:bb:1d:f6:16:ce:da:9c:e2:
                    04:21:4b:25:e5:5d:ea:e7:fc:9f:11:92:e3:6a:6e:
                    5e:48:fd:c1:72:a8:c7:12:73:3a:30:cb:a1:1a:b0:
                    67:34:27:e1:2b:23:55:c2:7e:6c:a2:9d:d2:1b:18:
                    90:e5:b5:7a:22:52:99:0d:3d:58:95:fc:32:66:f3:
                    ef:9b:66:65:2e:fa:3e:58:90:02:f3:9e:63:c3:21:
                    dd:83:32:41:79:29:ea:11:cd:4e:10:6b:91:60:db:
                    88:ab:1e:4b:44:d3:e2:f6:55:36:85:4a:fb:0f:1b:
                    af:c4:3c:ff:c3:8a:15:d4:d9:07:69:7c:ca:ce:29:
                    ba:b2:f6:67:a9:76:94:bf:0c:8b:c7:11:91:ca:a4:
                    56:96:de:49:90:ca:4b:3e:a1:2f:75:6c:93:e3:1c:
                    0b:5c:90:66:a0:22:55:39:b4:e1:0b:9d:33:ae:80:
                    98:62:ca:24:7c:c1:fd:c9:8e:52:38:e3:c7:61:09:
                    2d:04:95:2f:01:a5:e1:99:f8:9d:12:b9:0a:79:4b:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:6B:03:CF:59:D8:68:2F:EA:FF:2D:08:00:3C:5D:67:2D:67:4B
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:55:a9:8f:0c:30:cc:8a:e6:d9:e7:7b:81:91:ea:08:1e:
         68:8f:70:6e:78:72:70:f5:6f:72:77:e9:64:a9:85:a9:9b:da:
         f8:7b:0a:69:53:aa:17:0a:00:04:b8:f9:c3:4e:4d:ae:dc:e7:
         9f:77:28:05:ec:ce:50:2e:d9:4c:87:90:c0:65:b9:a6:bc:c5:
         1f:bb:02:91:e6:ca:d5:11:21:10:02:ae:1f:0c:ba:92:b4:c8:
         4f:ac:df:32:a6:75:75:5f:0f:50:e0:40:eb:5c:48:74:28:70:
         2e:14:7b:40:98:81:ec:4a:44:4f:f5:74:2a:8b:e7:53:44:30:
         b3:0d:d2:8b:1c:80:6f:14:82:ee:60:1f:fe:f4:77:8a:7c:f8:
         7b:d8:b9:e8:14:2d:c1:14:ef:78:89:75:c2:27:0d:f0:a4:10:
         85:7f:44:16:b8:f6:89:e2:0a:ec:76:52:66:52:ed:e0:23:0b:
         4a:9f:dd:d8:fe:5a:9d:4e:ec:f5:5f:80:7b:c7:03:97:95:a2:
         4c:e0:93:a7:1f:5f:b2:8a:2c:05:26:fe:35:f5:00:da:a7:e7:
         c7:6f:43:8a:1f:ff:9e:5f:8b:74:e9:5a:0b:3a:3c:4e:72:98:
         3d:84:24:3d:a0:c7:b7:da:fd:3b:0d:32:fe:38:42:f8:06:d2:
         e7:fb:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org