Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/3139302e3137312e36382e302f32322d3234203d3e20323730313236.roa
File:                     3139302e3137312e36382e302f32322d3234203d3e20323730313236.roa (raw, json)
Hash identifier:          vqtJ9fvhty5/53fNxsaR6GX26x1NBcHY8bcDve45F/M=
Subject key identifier:   B9:C8:FF:8F:80:BD:C4:50:50:A3:9F:95:22:F4:98:02:00:2A:0B:9F
Certificate issuer:       /CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
Certificate serial:       574017FC0864197E8A473E45ACDE9702A4768B02
Authority key identifier: 24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/3139302e3137312e36382e302f32322d3234203d3e20323730313236.roa
Signing time:             Tue 05 Mar 2024 18:02:14 +0000
ROA not before:           Tue 05 Mar 2024 17:57:14 +0000
ROA not after:            Tue 04 Mar 2025 18:02:14 +0000
asID:                     270126
IP address blocks:        190.171.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:17:fc:08:64:19:7e:8a:47:3e:45:ac:de:97:02:a4:76:8b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C97FF6B05F228A504E569D3FD7367E01EE2FCD
        Validity
            Not Before: Mar  5 17:57:14 2024 GMT
            Not After : Mar  4 18:02:14 2025 GMT
        Subject: CN=B9C8FF8F80BDC45050A39F9522F49802002A0B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0e:3a:e1:d8:b6:78:bd:58:1b:ff:a1:af:a2:
                    04:e6:ea:62:ae:a1:12:26:b0:ce:e8:9d:3f:b0:36:
                    fb:12:64:a0:ea:3e:95:20:ac:74:07:ad:f1:dd:3d:
                    4e:dd:d4:05:5a:6f:40:ef:b1:04:e6:96:db:13:46:
                    8e:ff:bb:e8:d7:a0:e3:94:9d:55:75:1a:b9:47:7a:
                    fd:24:34:83:15:2d:f6:11:6a:64:a8:de:b4:32:db:
                    53:e2:8c:e5:a2:64:a4:42:4b:4b:fa:38:4b:39:d7:
                    f0:28:f6:0b:65:e7:eb:c5:5d:3b:12:90:a9:23:06:
                    06:a5:7f:cb:1e:19:ab:e3:9d:a8:70:f2:49:cb:21:
                    d1:6a:73:69:58:27:37:39:ad:40:69:b7:85:63:18:
                    e6:c6:f2:4e:17:f3:3a:ed:61:0f:4a:2a:01:10:9f:
                    40:7d:76:bc:90:57:e8:af:b8:11:15:54:af:d4:02:
                    5f:a9:ba:f8:ab:2a:25:f4:3d:c8:7d:79:68:86:a1:
                    b7:a3:b7:ba:48:46:6a:12:29:7a:80:57:3f:b1:70:
                    47:16:b3:fb:0f:02:b0:96:47:74:60:ba:14:1e:ec:
                    52:de:b4:80:85:76:a5:8b:32:93:49:c8:8c:b3:db:
                    96:78:5b:2b:8a:5c:fe:9a:2e:df:be:fd:d6:8e:7d:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:FF:8F:80:BD:C4:50:50:A3:9F:95:22:F4:98:02:00:2A:0B:9F
            X509v3 Authority Key Identifier:
                keyid:24:C9:7F:F6:B0:5F:22:8A:50:4E:56:9D:3F:D7:36:7E:01:EE:2F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24C97FF6B05F228A504E569D3FD7367E01EE2FCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41A99261E0DB34F8D860D50382577C0E8FEB012F3B356116256B5B9E8A5DB088/0/3139302e3137312e36382e302f32322d3234203d3e20323730313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:d3:0b:8f:24:ec:41:2b:0a:63:fa:61:ed:6d:9d:99:10:
         cb:64:e1:cc:93:51:ac:77:ef:17:10:a7:b5:28:fb:2f:c6:78:
         a3:c4:e8:1b:2e:91:f6:53:da:9b:11:a6:31:89:4a:6d:8b:e5:
         45:0f:f4:97:bb:35:c5:2a:00:b2:4a:08:16:28:4a:aa:48:23:
         e8:19:2c:65:20:0a:6d:df:70:a6:7d:fc:94:a6:07:ee:89:8c:
         d4:38:e7:f3:26:f8:87:6d:3f:ce:f0:52:d1:18:22:20:72:03:
         01:52:23:aa:21:7e:69:25:a2:aa:c1:0a:50:df:aa:18:55:12:
         64:5c:90:18:63:a6:9e:22:4a:21:7b:ea:8e:ad:98:e0:1a:68:
         97:18:55:bd:33:aa:19:f2:31:78:6b:81:f7:b6:04:6a:e3:3e:
         e2:6d:13:ac:8e:ab:8a:33:a4:88:d4:88:99:49:8d:a9:76:d2:
         66:fa:7e:af:f3:d1:c3:fa:a7:f6:4e:ee:02:73:28:2d:f8:77:
         a7:7c:42:8a:15:48:8e:c6:14:67:5e:cb:67:f9:46:6a:63:a2:
         31:4c:8c:74:54:a2:59:4d:71:18:a2:2a:c1:3f:53:71:f7:00:
         e8:34:76:81:14:f3:a8:83:6e:66:ef:c0:ed:a1:7d:a1:8d:a0:
         86:44:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org