Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37352e302f32342d3234203d3e20323633323436.roa
File:                     3139302e3130382e37352e302f32342d3234203d3e20323633323436.roa (raw, json)
Hash identifier:          eTjX1xu7nQrd0v34PVT3r8MLYUufxZyi2bTKtsQzVJk=
Subject key identifier:   01:37:D8:7D:B8:E3:4D:BD:B6:85:18:B7:E7:37:EA:CC:34:F9:9F:08
Certificate issuer:       /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Certificate serial:       1C1E3212D2762F37517160F9CF82407565E0F1E5
Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37352e302f32342d3234203d3e20323633323436.roa
Signing time:             Tue 05 Mar 2024 17:59:21 +0000
ROA not before:           Tue 05 Mar 2024 17:54:21 +0000
ROA not after:            Tue 04 Mar 2025 17:59:21 +0000
asID:                     263246
IP address blocks:        190.108.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1e:32:12:d2:76:2f:37:51:71:60:f9:cf:82:40:75:65:e0:f1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
        Validity
            Not Before: Mar  5 17:54:21 2024 GMT
            Not After : Mar  4 17:59:21 2025 GMT
        Subject: CN=0137D87DB8E34DBDB68518B7E737EACC34F99F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:f0:8d:17:a3:da:53:a8:4a:90:74:da:02:
                    9b:6a:26:59:6b:2a:7d:55:a9:48:20:24:64:f4:61:
                    ca:0c:06:4c:bc:0b:29:b0:97:fe:4e:d3:d7:5a:74:
                    8b:ce:b3:45:e7:b6:70:f7:3d:6f:5c:bf:a9:4d:f6:
                    04:97:0f:06:b2:14:17:bd:f8:3a:f3:34:5e:0a:97:
                    48:b9:ec:44:67:c8:97:bf:1a:5e:6e:c9:09:5f:f6:
                    f9:4f:37:b1:9b:94:91:87:1a:79:2b:c8:0c:4b:7b:
                    71:0e:ad:64:15:e4:4c:c0:b2:93:94:6d:1c:8f:1b:
                    ff:d2:b1:d6:7e:1e:59:28:79:66:0c:ae:c2:5e:96:
                    2c:d8:05:a8:17:3e:d8:c9:fe:5f:5a:63:8b:4c:08:
                    92:56:65:6c:37:01:29:c0:5c:ca:c7:2f:13:aa:10:
                    28:33:9f:da:9b:ae:dc:ed:be:c1:58:1f:da:eb:af:
                    eb:72:7c:46:39:ee:d7:d6:d5:6a:47:0e:38:c1:02:
                    81:de:b0:3f:30:26:0d:29:65:35:94:67:69:ee:89:
                    a6:7c:d6:aa:ff:4a:09:1d:5b:6b:f5:f9:5a:3f:5d:
                    c2:3e:80:43:b0:80:8c:f5:80:ce:f8:25:e4:c5:db:
                    aa:a9:03:37:e5:4c:06:23:1f:ca:ce:9e:ba:e5:ae:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:D8:7D:B8:E3:4D:BD:B6:85:18:B7:E7:37:EA:CC:34:F9:9F:08
            X509v3 Authority Key Identifier:
                keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37352e302f32342d3234203d3e20323633323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:20:23:49:a7:cd:0f:01:95:28:15:b9:c7:c5:93:b1:7a:3c:
         a9:13:95:14:1c:92:e3:5b:e6:0d:03:87:19:80:da:ee:09:c2:
         ca:8f:f2:26:ea:9d:f1:34:ae:f4:a9:d2:27:ff:3f:d1:c8:0f:
         3a:10:8d:aa:20:7b:ab:b0:2b:8b:d8:b0:7e:3e:b2:35:ad:62:
         b8:a8:60:ff:b0:a0:8e:37:cd:77:78:2c:bd:37:e2:e9:aa:68:
         d9:aa:46:ff:77:b0:18:4d:27:15:a0:e0:9d:b0:eb:5f:f7:ba:
         e6:c4:c3:29:2d:e7:36:6e:c7:7a:e0:ad:01:79:d4:23:5a:82:
         5c:81:48:91:44:97:a7:20:50:fd:cc:18:ee:13:53:53:86:c9:
         11:dd:bf:83:01:95:92:1a:13:f2:ff:f6:32:89:cf:a2:5e:3a:
         7e:da:16:85:73:5c:5d:d9:0e:6b:c4:34:e5:ce:57:50:f8:29:
         c0:a8:da:cd:f5:5e:da:be:f0:90:f9:15:ab:25:c5:28:98:c3:
         78:98:68:b9:52:87:8d:8a:bd:85:79:48:63:7e:0d:7d:c2:dc:
         c4:ab:df:64:66:e9:2a:09:e1:d8:c6:a6:20:29:d2:54:d9:a8:
         b2:b4:93:ad:60:b5:be:29:9d:32:2e:7d:52:45:ff:b0:37:aa:
         37:b6:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:45:28 2024 by rpki-client on console-ams.rpki-client.org