Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
File:                     3139302e382e3136382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          0fqnHVTpwE6e9E2u0vGnWMw4M/T6XK9J8GUQp8LMRzw=
Subject key identifier:   0D:CF:75:9C:99:39:D6:04:CE:97:BF:D1:57:C8:2B:8E:2E:9A:CD:13
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       0E25C2D988941E35277CCF3A773F6E3D01C851D2
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 05 Mar 2024 18:04:19 +0000
ROA not before:           Tue 05 Mar 2024 17:59:19 +0000
ROA not after:            Tue 04 Mar 2025 18:04:19 +0000
asID:                     269750
IP address blocks:        190.8.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:25:c2:d9:88:94:1e:35:27:7c:cf:3a:77:3f:6e:3d:01:c8:51:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Mar  5 17:59:19 2024 GMT
            Not After : Mar  4 18:04:19 2025 GMT
        Subject: CN=0DCF759C9939D604CE97BFD157C82B8E2E9ACD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:d1:cf:8f:f2:3a:39:a6:57:0c:80:1e:ab:
                    84:32:26:08:c4:1a:91:4b:a4:09:86:20:b6:bb:e4:
                    5b:69:c4:cb:95:eb:25:6d:c9:87:69:0f:58:3e:35:
                    5c:2b:36:ce:0d:d0:ca:02:cf:7f:c3:87:d1:8f:77:
                    9c:3e:77:f0:f4:42:b2:62:ee:1c:a3:a4:fe:dc:35:
                    72:3d:18:72:a3:81:39:79:02:65:a5:f0:22:1d:a6:
                    88:58:7d:96:ef:28:40:c3:7b:bf:f4:50:f7:e6:b2:
                    3c:5b:13:a4:98:78:4e:48:e1:c2:13:38:03:3a:62:
                    87:26:d8:9a:02:1a:a3:85:c9:c4:1e:53:f1:14:3e:
                    ef:73:2b:31:91:b7:c3:a2:49:54:c3:8d:bf:6a:3c:
                    3a:81:71:7b:32:8c:08:ad:96:c8:bb:df:66:68:31:
                    dc:a2:cd:9e:d9:be:f1:39:d7:c6:d8:22:99:c2:fe:
                    6c:d9:15:08:03:4a:b0:2b:68:b5:fa:66:1d:26:b5:
                    18:bc:55:40:bc:64:2d:db:76:8f:d3:69:2b:5f:6d:
                    50:73:1b:c4:38:1e:1d:48:50:d3:2a:04:d4:8b:c3:
                    4f:c8:f5:15:58:23:f2:d8:1f:e4:70:18:78:02:60:
                    1f:55:92:33:b3:c8:00:de:4c:0a:42:55:ad:9b:66:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CF:75:9C:99:39:D6:04:CE:97:BF:D1:57:C8:2B:8E:2E:9A:CD:13
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:e7:b4:bb:3f:92:44:62:d4:fa:8c:e1:f1:7c:cc:ab:b3:
         5f:69:e9:70:df:85:c3:61:3c:ab:9a:79:a8:7f:50:28:c0:fd:
         58:1a:59:06:7e:99:80:7a:4a:a3:4f:e5:38:b8:13:17:a6:03:
         e0:7f:42:43:91:ee:ec:18:c7:fe:2e:fa:a7:83:3f:10:2c:fd:
         9d:d6:64:96:cb:d3:6d:fc:01:cf:94:e0:aa:38:e7:01:5f:62:
         d5:00:5c:78:e6:26:11:d9:35:64:4d:6e:3c:56:6c:c0:59:aa:
         b3:b7:07:b3:24:08:d2:7a:56:07:7e:b3:cc:bb:41:e5:06:5c:
         20:93:42:61:0a:86:e7:5f:4f:11:3d:9d:c0:7f:db:ea:6f:1a:
         3b:d3:c3:cc:58:f4:1f:01:e2:93:5a:bd:8d:c3:5e:25:42:83:
         53:47:12:d1:75:3e:6c:3e:54:a0:f3:bc:94:56:8b:5a:0d:74:
         a9:82:dc:13:c7:1d:0e:25:e0:af:7a:73:5a:d4:3f:87:c5:cd:
         6d:bd:55:39:f8:cb:80:a0:fa:05:c3:d3:68:c5:7a:eb:6d:62:
         18:19:ed:7a:51:32:e2:7f:a4:c9:fc:65:73:b0:75:e4:95:2c:
         40:98:ce:27:19:f2:54:e0:f5:59:f8:a0:bb:70:77:ec:b1:1b:
         09:e0:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org