Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e33362e302e302f31342d3234203d3e2038303438.roa
File:                     3139302e33362e302e302f31342d3234203d3e2038303438.roa (raw, json)
Hash identifier:          MK/iVujmzZsZIdAq5eN3S5EUqT9enDNqIbvrWqvFpto=
Subject key identifier:   01:79:C4:38:BA:01:A7:4C:A7:D5:2E:F1:E6:47:94:E9:FA:73:6C:FA
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       1E05EB87CF3FDDDD498BFC9F410930E303CE3D14
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e33362e302e302f31342d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:15:05 +0000
ROA not before:           Tue 05 Mar 2024 18:10:05 +0000
ROA not after:            Tue 04 Mar 2025 18:15:05 +0000
asID:                     8048
IP address blocks:        190.36.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:05:eb:87:cf:3f:dd:dd:49:8b:fc:9f:41:09:30:e3:03:ce:3d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:05 2024 GMT
            Not After : Mar  4 18:15:05 2025 GMT
        Subject: CN=0179C438BA01A74CA7D52EF1E64794E9FA736CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:87:25:e1:39:56:ab:e5:33:05:17:85:9c:
                    96:24:04:19:d6:75:93:5d:06:99:c7:e2:fb:22:f4:
                    5e:e8:fa:57:c5:ff:cf:a5:1c:2e:0b:58:f1:69:40:
                    bf:b6:b5:e5:c6:b3:c4:24:c5:45:34:27:c4:f4:a1:
                    03:a7:b1:48:6d:b2:df:57:45:ee:05:a2:bd:15:7e:
                    97:05:f8:32:d1:b8:ee:0a:06:d1:c8:c8:a4:05:b6:
                    71:74:40:78:dc:ef:79:8e:2d:25:14:c6:3f:bb:cf:
                    3d:0a:b4:44:02:ef:33:d4:2b:72:82:12:57:d0:1e:
                    e2:e3:04:48:ef:07:ed:3d:19:9f:67:6f:d7:44:88:
                    32:76:8f:ef:65:52:61:a1:ff:43:bf:5e:d4:86:4c:
                    e0:16:f3:f9:98:ce:f5:44:da:66:5a:ac:50:3c:cf:
                    8e:13:0a:da:8c:c8:03:8c:8e:88:f9:a2:59:5d:f9:
                    ab:78:bd:50:cf:87:54:8c:fd:61:bb:62:6f:f0:a1:
                    5e:85:12:e0:36:ca:8f:ff:65:ae:b8:fd:6a:08:f4:
                    71:dd:2f:7b:68:f2:9b:34:ef:df:56:71:bb:16:7f:
                    f0:c1:8c:b1:83:01:23:2f:0f:fb:a8:25:7e:54:8c:
                    b3:6b:fe:be:07:7c:ec:4d:7e:6b:f3:28:53:e1:bd:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:79:C4:38:BA:01:A7:4C:A7:D5:2E:F1:E6:47:94:E9:FA:73:6C:FA
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e33362e302e302f31342d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         63:69:79:fc:2d:68:26:ed:d2:6b:e9:c2:60:d2:89:52:54:94:
         8a:15:27:ac:93:1f:76:ca:b0:1d:a6:9c:57:88:57:29:e6:c4:
         b8:78:0d:07:1c:1a:d4:da:46:78:0f:0e:3f:6f:30:50:6d:ef:
         65:d2:80:f2:41:72:de:02:db:e6:fb:e7:2b:e6:ed:66:79:38:
         c2:87:72:f3:a7:a5:61:0e:67:31:0d:50:37:12:fc:ea:cc:77:
         6c:ce:bc:1d:19:35:08:7e:60:ce:24:40:04:bc:5c:fb:c8:20:
         8e:f8:4f:5e:08:78:d5:2f:b8:b6:69:fd:e7:2f:6c:7f:4c:fc:
         2c:99:e7:11:f5:05:b6:b3:e1:15:15:5d:2a:a0:62:9e:92:21:
         b0:7b:eb:fd:72:91:13:6f:4b:13:f7:a4:1a:05:d9:da:93:3c:
         76:c6:09:10:99:de:dc:84:66:78:c4:f6:27:d0:a1:2f:80:05:
         6c:b2:4a:09:fa:7c:c1:76:65:a0:95:6e:d3:7f:94:da:dd:e2:
         17:7f:4f:cb:8b:b3:29:ab:bc:75:9d:1a:65:db:f0:c5:43:f1:
         da:49:ac:0b:9d:a4:b5:33:a6:d6:07:a5:92:bb:be:00:fb:87:
         e7:22:70:2c:53:b7:bc:bf:89:15:9a:09:67:e0:5a:f8:34:44:
         23:89:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org