Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
File:                     3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa (raw, json)
Hash identifier:          1TxdvuIoa4ejLfbpeVOsvoRYRebCK+dwX/tLK4bUqKo=
Subject key identifier:   CE:8A:EC:8C:9B:6D:C6:2D:65:4B:C0:0B:84:E6:C5:52:76:0F:2A:AF
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       2AAA6B3C939CE795295877EAE50EEE70D50DC98E
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     263703
IP address blocks:        190.97.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:aa:6b:3c:93:9c:e7:95:29:58:77:ea:e5:0e:ee:70:d5:0d:c9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=CE8AEC8C9B6DC62D654BC00B84E6C552760F2AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:6e:3f:33:52:16:bb:9a:0b:c1:b5:3d:7a:
                    77:24:cd:67:61:56:9c:99:07:e8:ca:b6:88:3b:33:
                    2c:5d:57:c5:31:2d:c1:16:78:eb:4b:d4:f5:4a:3d:
                    45:79:e6:bd:4b:ab:5f:c4:40:26:87:5d:f3:20:4a:
                    7e:2c:d0:0c:e1:ba:fd:f9:24:e6:63:98:c0:ff:99:
                    3f:d1:a7:ff:83:83:67:c3:ce:b7:55:72:73:b6:d9:
                    e8:fd:3a:5e:ef:99:c6:21:8e:81:85:7b:a7:30:7a:
                    09:08:a2:91:ed:3b:43:1a:bb:b0:2c:70:37:56:e1:
                    80:72:bb:f7:33:a1:44:a9:b8:3f:3d:43:e9:03:06:
                    40:89:b4:54:53:7a:52:bf:bd:10:97:c3:c5:9e:f8:
                    fe:fe:5b:e9:fe:4e:01:29:57:34:09:e1:54:ba:cf:
                    54:8d:a8:3c:9c:61:31:bf:03:a3:33:e8:b1:53:fb:
                    dd:62:81:91:a3:a7:21:61:b4:2d:16:4a:2e:ef:75:
                    c6:0f:72:c3:ae:ce:db:71:aa:b3:91:fa:9d:3f:f5:
                    63:e7:44:9c:f3:ab:ea:10:6f:20:8c:33:8b:94:f7:
                    c6:22:ff:6b:f6:3c:af:4a:f9:b6:cf:47:2f:d0:5e:
                    48:d9:82:2c:07:23:16:4b:8e:32:8d:5d:47:75:e1:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8A:EC:8C:9B:6D:C6:2D:65:4B:C0:0B:84:E6:C5:52:76:0F:2A:AF
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:b9:3f:6c:04:cf:92:1b:9f:4c:a7:35:43:0c:69:3c:ec:
         1c:d1:fb:50:b9:ba:7b:4f:d9:0b:68:2d:9c:32:c6:39:11:17:
         44:24:b4:68:83:d2:ad:a5:39:ce:36:dc:ad:fd:b4:12:35:a0:
         4d:db:ab:cc:9a:e7:68:1a:a3:31:77:77:46:f8:60:4c:de:ba:
         93:37:b6:15:e9:69:77:a7:80:29:6e:35:63:97:60:da:8f:d8:
         ca:ac:28:87:7c:ed:62:22:1e:4b:ca:fc:b3:53:60:40:57:3c:
         2d:27:e5:7b:fe:ce:22:8a:24:26:ee:30:29:8c:0c:61:08:49:
         59:1c:e1:fd:cb:77:5f:c2:92:80:5a:25:b4:a7:31:03:12:90:
         b8:da:8d:69:a6:50:50:3a:78:20:e9:76:5e:9a:36:18:91:11:
         5b:00:a5:49:4d:13:24:99:62:fe:fd:2f:43:3f:c3:9b:26:0f:
         86:2a:b6:10:82:aa:a0:c0:52:66:f8:b2:ec:48:3e:03:80:05:
         a4:02:42:67:c7:e3:55:a7:ab:21:ea:97:26:8b:c7:b1:5a:eb:
         47:25:43:f2:43:ee:e9:ae:c2:80:da:cc:49:15:94:70:d5:aa:
         df:a2:d5:4d:b9:67:84:3c:df:4b:76:12:a3:f0:fd:95:4b:ee:
         96:2c:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org