Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa
File:                     3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa (raw, json)
Hash identifier:          8SXDE2k/yqTElF1IqYxqJpvUEQ8SycIDtrcCXO9YmAI=
Subject key identifier:   03:46:E7:D4:08:FB:22:E3:67:1E:AE:15:0A:C4:38:27:02:83:0C:48
Certificate issuer:       /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Certificate serial:       692E10EACDFBEC428D4E9C4BBC41ACBABA9C8DA9
Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa
Signing time:             Tue 05 Mar 2024 17:59:20 +0000
ROA not before:           Tue 05 Mar 2024 17:54:20 +0000
ROA not after:            Tue 04 Mar 2025 17:59:20 +0000
asID:                     263246
IP address blocks:        190.108.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:10:ea:cd:fb:ec:42:8d:4e:9c:4b:bc:41:ac:ba:ba:9c:8d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
        Validity
            Not Before: Mar  5 17:54:20 2024 GMT
            Not After : Mar  4 17:59:20 2025 GMT
        Subject: CN=0346E7D408FB22E3671EAE150AC4382702830C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:5a:d9:ee:b9:8a:79:23:f2:b0:7e:0c:9d:
                    41:41:19:22:64:25:14:77:77:22:4a:da:5e:77:3d:
                    c5:cc:3a:55:2f:d8:f9:be:dd:ff:b7:0e:d5:36:1c:
                    82:ff:f8:9f:2e:fc:81:d1:64:15:cd:2e:94:bb:42:
                    7c:62:71:bb:f5:89:9d:89:11:02:d9:a6:de:c9:2b:
                    02:10:4a:e1:a8:1e:69:90:01:82:68:d0:f4:d1:e1:
                    6f:75:99:54:cb:10:dc:56:66:43:aa:34:c8:3b:c6:
                    5b:f7:61:e1:44:d4:76:78:69:07:ec:b4:b6:de:bc:
                    02:24:05:29:6a:36:10:0b:72:0c:aa:95:75:5f:e5:
                    2f:51:38:1e:54:a9:bd:96:fe:20:d2:0b:78:37:18:
                    ad:7d:7a:06:8b:1b:37:3d:7b:d2:c3:f7:cc:ff:ec:
                    bc:b7:dd:6c:09:d8:96:20:56:3c:5b:c2:65:91:0a:
                    f4:74:62:32:50:1b:eb:da:bc:6f:4f:57:87:eb:bf:
                    1d:1d:53:ac:0b:69:34:7c:55:c4:ee:8c:b2:af:54:
                    0f:b1:39:45:3d:89:93:03:7a:d6:e4:13:b6:c8:7b:
                    f4:47:8e:ee:66:2c:fa:14:73:30:48:41:72:67:26:
                    4f:b1:bc:a0:94:e7:8e:f5:8f:37:17:55:66:3a:10:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:E7:D4:08:FB:22:E3:67:1E:AE:15:0A:C4:38:27:02:83:0C:48
            X509v3 Authority Key Identifier:
                keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:32:ee:89:97:d9:04:09:9a:69:9b:aa:5f:04:87:f2:bd:
         21:30:49:70:b6:c1:fd:a3:8b:e8:f0:fb:3f:53:a5:35:5d:69:
         af:b3:ae:82:9e:88:0b:71:5a:74:1d:a9:90:14:e7:0c:ed:94:
         38:a0:7d:08:12:75:30:1a:27:68:e3:9f:17:c1:7f:88:a1:e0:
         42:29:0b:3e:d8:2a:d3:2b:10:15:93:b5:0a:4e:49:91:f2:b5:
         8a:08:40:9b:9f:6b:ed:c4:ff:cb:fa:67:c5:00:9f:67:4a:a6:
         2c:9e:8e:e7:3a:9a:e0:1a:07:3e:39:c7:aa:87:a1:35:03:27:
         2b:b1:41:6e:4b:12:e6:c4:6e:4b:1d:c9:2f:03:87:82:31:ae:
         e9:cb:25:17:27:a2:98:60:f6:72:73:c9:58:32:84:31:6f:0f:
         f1:d8:0d:85:c0:e2:11:17:29:a8:8d:99:c1:cb:a9:ee:14:f3:
         8e:d6:90:92:8a:c5:41:3a:a9:9f:e9:7d:ef:a0:d7:41:36:5f:
         c5:ec:7f:2b:9c:85:02:6f:14:0a:41:4e:31:16:b1:75:37:bc:
         4a:35:98:42:cd:4b:fa:64:27:f2:9b:36:98:f4:bd:ff:4a:9f:
         ce:ed:bf:b5:d3:e6:a0:69:d4:1a:2e:79:84:ce:10:bb:05:9b:
         cf:7d:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:30 2024 by rpki-client on console-ams.rpki-client.org