Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3230302e302e302f31332d3234203d3e2038303438.roa
File:                     3139302e3230302e302e302f31332d3234203d3e2038303438.roa (raw, json)
Hash identifier:          5U/fMyYMWBKeZ6hDmt++yJZN/+2hPTfYcNq7YxI9hqs=
Subject key identifier:   28:67:8F:4D:F4:B6:6A:4B:E4:B2:68:91:15:62:2B:C5:15:37:9B:23
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       70F36C42366718950CFBF28BF01DC6194EAEECE6
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3230302e302e302f31332d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:15:03 +0000
ROA not before:           Tue 05 Mar 2024 18:10:03 +0000
ROA not after:            Tue 04 Mar 2025 18:15:03 +0000
asID:                     8048
IP address blocks:        190.200.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f3:6c:42:36:67:18:95:0c:fb:f2:8b:f0:1d:c6:19:4e:ae:ec:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:03 2024 GMT
            Not After : Mar  4 18:15:03 2025 GMT
        Subject: CN=28678F4DF4B66A4BE4B2689115622BC515379B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:d7:c1:1f:8b:a2:57:ef:10:5c:4c:e1:43:
                    89:56:ab:3a:19:22:0c:0c:52:84:cd:0c:a3:93:92:
                    56:d0:fb:b0:b3:18:16:65:d0:39:cf:33:ef:65:14:
                    ff:98:8a:c2:ed:ee:e3:ec:19:a3:02:1e:36:97:21:
                    3d:24:fa:92:e4:86:90:98:c5:95:dc:ca:43:27:09:
                    2a:4f:8b:fb:2f:77:26:cb:c5:2b:67:61:68:6c:e7:
                    be:ba:5b:c9:2e:53:db:ae:b8:0d:99:a6:e5:9b:97:
                    17:96:0b:91:3f:32:ec:b3:c8:4e:57:85:2a:98:06:
                    d3:dd:52:b1:c0:37:8b:37:d5:5a:32:b8:80:0c:b2:
                    53:ce:ae:f7:55:15:b3:62:21:5b:c5:7a:c3:03:02:
                    9d:ae:56:8a:67:77:ad:a1:63:2c:b8:de:0c:e4:18:
                    40:2b:b8:e7:3e:88:3b:21:af:39:d3:af:a5:d2:9e:
                    1c:b6:cd:4b:7c:dc:87:63:93:73:50:37:3c:49:f1:
                    f1:d6:e2:ad:eb:8f:0f:eb:fa:8b:b8:ef:d1:b6:4d:
                    55:9e:26:02:7b:49:22:a5:62:af:06:e4:ff:45:87:
                    bf:52:78:b4:74:13:3e:73:f3:bb:a5:ec:a8:1b:73:
                    55:12:ef:06:96:10:ee:e0:35:00:21:a6:c9:14:c1:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:67:8F:4D:F4:B6:6A:4B:E4:B2:68:91:15:62:2B:C5:15:37:9B:23
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3230302e302e302f31332d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:ce:85:37:e3:44:8f:b2:c7:ed:65:50:ea:ca:7c:96:5a:
         69:e3:18:d1:a2:45:fb:32:46:40:df:49:1a:38:df:9f:a7:41:
         9d:12:f2:16:d7:ff:55:24:2d:59:bc:d4:e8:86:73:6a:4c:e9:
         9a:73:91:ed:ac:cb:4f:27:e0:4e:78:f8:34:27:61:52:6c:f5:
         f2:5c:49:85:a1:d2:e0:a7:6b:5e:32:b9:33:ec:08:dd:83:c7:
         bd:ca:7c:4d:1d:8b:19:c5:a2:3c:4e:4d:99:62:e8:8e:e3:45:
         3d:94:ad:a9:8e:6c:80:bc:a4:28:99:22:bd:24:92:b2:db:a2:
         97:ce:1e:51:25:a0:a8:b4:de:a3:e3:23:c7:99:9d:77:9d:f2:
         c3:c2:8d:b4:8e:13:0a:47:b2:9b:87:f2:10:a9:6c:e0:12:af:
         32:4a:90:a0:ef:60:2e:48:a3:01:32:e5:18:b9:5b:84:a1:cf:
         19:93:c4:b2:c9:88:68:c4:c6:6c:1d:e0:50:dd:ce:01:f8:3a:
         18:93:33:35:b1:7b:76:8b:90:36:82:c1:a4:9f:8b:97:7b:a6:
         f3:b6:ec:12:b3:44:54:55:19:50:cb:f7:ae:0f:45:58:03:13:
         03:d8:9a:a5:36:1c:79:74:e1:c1:b2:39:f7:1f:0d:13:4c:1a:
         da:e0:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org