Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e36342e302f31382d3138203d3e203134373534.roa
File:                     3139302e3138342e36342e302f31382d3138203d3e203134373534.roa (raw, json)
Hash identifier:          EibHpOSyWSyVkkUbCdwl0keyxkQ0XjejJqOBM7h+fAM=
Subject key identifier:   33:71:83:86:B1:90:10:A0:06:80:5F:51:39:67:AE:51:E2:6F:E7:5B
Certificate issuer:       /CN=A379859384774565F06B5085B32618E97FC5CFD1
Certificate serial:       6F228F1F064E8620185B6B69115658FE38529A0F
Authority key identifier: A3:79:85:93:84:77:45:65:F0:6B:50:85:B3:26:18:E9:7F:C5:CF:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e36342e302f31382d3138203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:43:33 +0000
ROA not before:           Tue 05 Mar 2024 17:38:33 +0000
ROA not after:            Tue 04 Mar 2025 17:43:33 +0000
asID:                     14754
IP address blocks:        190.184.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:22:8f:1f:06:4e:86:20:18:5b:6b:69:11:56:58:fe:38:52:9a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A379859384774565F06B5085B32618E97FC5CFD1
        Validity
            Not Before: Mar  5 17:38:33 2024 GMT
            Not After : Mar  4 17:43:33 2025 GMT
        Subject: CN=33718386B19010A006805F513967AE51E26FE75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:21:9e:17:22:fe:93:58:b6:07:75:ff:ba:
                    8b:3f:04:8e:d9:39:6b:94:7e:f0:f4:85:d4:87:f6:
                    6a:25:19:28:ad:b1:e9:f4:87:c0:eb:f9:1f:fc:07:
                    de:8b:25:33:8b:7e:6e:cc:ec:9b:cd:1c:15:4f:67:
                    0d:65:f8:e1:e2:a9:b9:b2:47:55:2f:8d:c5:22:e4:
                    a9:ef:fe:fa:f2:57:ea:41:8e:b1:b8:92:fa:ef:e8:
                    7a:cc:a5:c3:91:a9:43:76:bf:6e:06:58:d4:2f:3a:
                    00:be:b7:ff:a7:bc:5d:98:4d:5c:73:1a:e5:30:47:
                    ca:b6:ba:0e:d2:e8:6e:40:b3:9c:db:74:3d:3c:31:
                    51:e6:b0:b2:8c:cf:88:61:3d:c3:f1:36:d1:53:22:
                    32:95:69:59:32:5e:80:0f:d6:18:9c:e0:70:42:b2:
                    37:24:93:e9:f2:2e:d9:11:1e:1b:2f:10:03:15:82:
                    f5:e9:40:4f:a5:04:db:83:ed:9d:31:89:46:5e:95:
                    7b:39:b0:e1:c0:68:7b:a1:4f:6c:78:f5:b9:47:9b:
                    20:e4:c0:c2:32:5c:e0:76:43:8c:24:de:9d:64:3e:
                    69:2b:1e:e5:a3:a6:a9:84:89:36:82:d4:bc:50:40:
                    b7:af:09:1f:cc:56:55:04:04:c9:da:a6:a0:2d:e9:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:83:86:B1:90:10:A0:06:80:5F:51:39:67:AE:51:E2:6F:E7:5B
            X509v3 Authority Key Identifier:
                keyid:A3:79:85:93:84:77:45:65:F0:6B:50:85:B3:26:18:E9:7F:C5:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/A379859384774565F06B5085B32618E97FC5CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A379859384774565F06B5085B32618E97FC5CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/516C99B42A63CE26FA05B486F6D26CE83DBF5BE4AD17FBA62DBA5B53D2E6825D/0/3139302e3138342e36342e302f31382d3138203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:26:a1:9d:06:3c:a9:a0:f5:b2:34:56:fb:40:b7:26:17:
         c6:e8:10:1e:68:26:79:6b:41:ef:73:72:73:ed:dc:bb:5e:22:
         e8:e8:6b:d2:52:99:db:f6:42:70:1c:f8:73:b8:04:95:c7:d8:
         28:5a:aa:e4:c4:78:4e:62:db:9a:31:4e:9e:35:b8:4f:90:a7:
         b2:8e:bb:4c:b3:10:03:35:45:c8:f0:49:28:eb:ff:b1:78:35:
         d4:fa:be:9f:56:92:c3:b1:7c:32:24:c3:95:f5:ad:91:7c:13:
         a2:1a:ed:79:a5:d1:89:fc:cc:59:8e:da:c4:52:60:6f:bd:82:
         20:3d:93:5a:46:84:f1:e6:c8:89:e8:98:25:a0:ff:9e:64:04:
         64:ff:49:7b:2e:98:54:10:d4:d0:c5:a2:43:60:70:48:36:17:
         29:80:f9:a4:1c:de:0b:1f:8a:51:05:a0:37:5a:31:0b:26:92:
         a4:a4:08:5f:ec:ab:b0:3c:95:8a:b3:7e:1d:3e:20:08:4f:93:
         6b:1c:21:9b:cc:11:2d:04:e3:4e:ed:f6:31:65:16:70:b7:78:
         6b:3e:c3:b9:bc:34:5f:d6:d2:57:85:a4:bc:17:81:3f:03:cb:
         4e:a6:8f:33:0d:f9:73:64:07:74:30:79:0d:69:27:d9:c2:48:
         90:9b:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:42:01 2024 by rpki-client on console-fra.rpki-client.org