Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa
File:                     3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          +Nx6FvzeIwiPipRV2sSxJDN+LT8H9r+bjRN22emDgU8=
Subject key identifier:   C1:B7:E5:13:AF:77:26:4D:3B:E3:17:33:A4:E5:B6:F9:90:6B:05:41
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       219315B81E78B1385A2A26F534206FABE85E2F3C
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa
Signing time:             Tue 05 Mar 2024 18:04:24 +0000
ROA not before:           Tue 05 Mar 2024 17:59:24 +0000
ROA not after:            Tue 04 Mar 2025 18:04:24 +0000
asID:                     60022
IP address blocks:        190.105.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:15:b8:1e:78:b1:38:5a:2a:26:f5:34:20:6f:ab:e8:5e:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Mar  5 17:59:24 2024 GMT
            Not After : Mar  4 18:04:24 2025 GMT
        Subject: CN=C1B7E513AF77264D3BE31733A4E5B6F9906B0541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:d7:be:30:d3:6a:9a:2f:bd:5d:8d:15:27:
                    29:4c:36:a2:a8:4a:cc:31:73:20:7e:7b:55:75:78:
                    ac:aa:45:19:19:1b:95:db:6f:d0:0f:28:36:0d:ee:
                    3e:0d:ef:68:24:1d:6c:c0:22:c7:6f:cb:dd:7e:32:
                    2f:97:60:6a:59:7a:01:fb:8a:6a:08:82:21:3a:ad:
                    5c:ab:ca:6c:0a:b5:54:39:ba:a2:65:08:56:8e:60:
                    ac:a8:88:37:73:f2:90:06:50:f5:9b:15:53:b6:c0:
                    f5:37:77:37:8e:28:c2:3a:40:f9:5c:e8:f1:32:1f:
                    32:53:22:b3:ec:17:c5:93:e8:df:b0:8d:ac:26:0f:
                    3c:f3:d0:c3:0f:9a:bd:77:2f:3a:61:ca:26:54:30:
                    9e:3d:bb:67:5f:ba:52:74:e9:c8:02:14:fd:b7:a9:
                    00:e1:b1:c6:fa:72:50:d5:cf:78:3f:60:05:37:9c:
                    6c:a3:c9:dd:27:67:26:7b:66:1c:ad:03:97:83:f6:
                    25:b5:ca:3e:65:1e:f4:35:e1:21:34:be:c3:db:60:
                    87:36:af:f5:ad:6a:7f:f2:8d:1d:6d:d0:0f:d2:9a:
                    12:37:b7:6f:2c:10:e0:98:63:15:6c:25:04:cd:23:
                    62:50:26:87:25:b8:ad:bb:c3:f1:92:70:75:f1:4f:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:E5:13:AF:77:26:4D:3B:E3:17:33:A4:E5:B6:F9:90:6B:05:41
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3130352e3139322e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:dd:3e:81:2f:ea:1c:8c:f4:20:7e:39:07:42:46:84:ac:2b:
         16:08:39:7a:a6:73:38:e8:9a:b9:e1:ea:aa:51:98:76:31:0a:
         2b:9a:dd:fb:3f:50:3e:f7:8b:86:e8:64:e9:c5:8a:ba:40:c5:
         ad:a4:5b:02:49:6d:51:29:a2:f6:8d:8e:3f:e0:53:13:db:a8:
         a0:0b:44:54:30:ce:77:dc:89:0b:76:f6:95:a3:cf:3e:74:a0:
         f7:e0:e9:ab:51:b1:3b:1a:d3:5a:3f:ad:fe:75:f7:63:9b:84:
         0e:bb:e3:51:81:bc:18:06:fe:b5:62:e5:57:d3:9d:5c:80:27:
         2a:02:d0:41:86:c6:10:22:ef:96:53:bd:ed:4d:a0:7e:3e:54:
         ef:8f:40:5b:df:da:e4:0f:74:d3:6f:4a:d5:2c:52:38:2d:68:
         83:91:ae:79:21:31:da:a7:d6:70:50:99:a0:62:b0:09:ea:28:
         37:b4:d6:25:20:30:c9:ac:f5:3a:77:1e:81:9b:41:55:24:81:
         3e:11:5d:98:54:c5:63:30:22:5a:43:84:76:4f:b7:64:da:7b:
         54:b3:ef:e4:68:a1:44:d2:88:fd:99:43:ea:a2:8e:c9:c3:c2:
         19:cc:91:3f:be:19:86:1b:fb:73:8b:7b:8a:e8:73:70:65:9c:
         ee:fe:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org