Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3139382e302e302f31352d3234203d3e2038303438.roa
File:                     3139302e3139382e302e302f31352d3234203d3e2038303438.roa (raw, json)
Hash identifier:          aoqx4NvVhmzdJKHGCv5Xq267zwQaUPmdeWYKSP1Bw7g=
Subject key identifier:   BB:49:9D:9B:30:E6:D2:AD:5F:D2:9D:87:DB:25:67:DB:07:8D:EF:1B
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       7E2D0191B6CBE822A24F92C9BD9369CEE4880F2B
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3139382e302e302f31352d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:15:02 +0000
ROA not before:           Tue 05 Mar 2024 18:10:02 +0000
ROA not after:            Tue 04 Mar 2025 18:15:02 +0000
asID:                     8048
IP address blocks:        190.198.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2d:01:91:b6:cb:e8:22:a2:4f:92:c9:bd:93:69:ce:e4:88:0f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:02 2024 GMT
            Not After : Mar  4 18:15:02 2025 GMT
        Subject: CN=BB499D9B30E6D2AD5FD29D87DB2567DB078DEF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:c6:05:9c:77:6c:d9:81:d7:8e:52:65:93:
                    34:87:55:7c:2d:16:3b:7c:c0:39:19:d8:e3:fe:a8:
                    aa:ad:93:79:05:18:ec:48:81:8a:7f:30:09:4f:d6:
                    0d:7c:79:82:ce:e0:d8:f1:fa:dd:e5:68:3a:0c:d6:
                    4e:cb:47:71:fc:fe:5e:80:40:8b:f8:e5:c4:95:61:
                    9b:ae:21:d9:c5:d5:c1:50:a1:84:2b:92:2c:e8:a8:
                    61:5a:99:96:41:6f:db:0d:53:5a:a4:3d:73:2c:9d:
                    af:dd:ca:1c:9d:6c:e6:65:4d:9d:aa:7d:6d:5a:25:
                    64:cf:03:3c:72:33:59:95:e9:41:73:54:e3:5c:86:
                    2f:83:39:ee:a1:f5:08:fe:8e:9b:98:30:82:83:df:
                    21:0c:4c:46:d4:6f:2b:03:6f:fa:04:43:f7:53:32:
                    ef:66:2f:de:1a:03:5c:97:26:a0:53:36:f0:3c:4a:
                    17:88:02:4b:d3:87:be:7f:b3:9b:9e:0c:6b:dc:7b:
                    e4:d7:85:14:e9:0b:8a:60:39:ec:88:c9:f3:e7:b7:
                    d7:84:72:0e:9f:4b:bc:f8:a4:63:3d:1c:44:9b:8f:
                    f8:4c:10:0b:e7:fc:be:fa:49:9b:13:57:40:3c:d9:
                    a6:e2:e9:d3:56:29:53:31:d5:39:14:ba:f6:fa:8a:
                    fb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:9D:9B:30:E6:D2:AD:5F:D2:9D:87:DB:25:67:DB:07:8D:EF:1B
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3139382e302e302f31352d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:86:45:30:fe:6d:d8:c0:3e:89:de:78:de:7e:17:83:55:
         23:bd:1d:b3:0a:c9:b5:62:f3:45:8b:67:0a:53:f5:4a:ad:6b:
         b6:2c:b6:62:4f:cc:91:47:1d:ef:67:d8:e8:75:10:34:e3:85:
         85:88:f7:f1:10:48:f7:45:a6:3b:7d:5d:8b:c5:52:3b:3a:46:
         54:b0:43:47:e4:e4:96:cf:45:e2:bb:1e:ed:cf:09:ae:df:ae:
         f3:31:ec:09:8e:d6:65:b2:f3:dc:76:81:77:17:08:45:38:a6:
         62:47:19:e3:e9:82:58:cb:4d:0d:de:b9:03:0b:2f:15:a6:14:
         63:ae:a9:4d:10:aa:fb:e9:c5:85:f9:a8:0b:74:20:90:8c:aa:
         92:5d:87:22:2e:9b:b4:15:70:15:67:42:46:3a:54:86:36:c6:
         25:8d:a1:f6:ab:5e:ff:ae:ea:0f:1e:23:4b:d3:b3:7e:c0:3b:
         b3:13:f2:53:bb:7a:b2:35:4e:5f:f4:7b:df:b3:6e:8c:97:fc:
         73:65:1a:1b:21:53:ba:53:33:86:9a:32:88:2a:78:6b:db:0d:
         39:49:eb:e6:d6:ca:71:44:c9:fa:1e:82:32:84:ad:c4:cb:15:
         89:47:ed:4b:42:36:1b:58:ff:19:09:b8:8c:4d:73:ec:6e:74:
         a4:49:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org