Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37322e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          9opSXsaRrhxTAaZfZ575lBuEFZJM9qV0z7Pj+SsD5aY=
Subject key identifier:   CB:1C:D5:99:6F:F3:FF:7D:AC:3F:BF:85:2E:10:E6:84:2C:EE:18:0E
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       24FC335489D72EA88FA1F6A73FE594CD2D4AE401
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:36 +0000
ROA not before:           Tue 05 Mar 2024 17:36:36 +0000
ROA not after:            Tue 04 Mar 2025 17:41:36 +0000
asID:                     52493
IP address blocks:        168.90.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fc:33:54:89:d7:2e:a8:8f:a1:f6:a7:3f:e5:94:cd:2d:4a:e4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:36 2024 GMT
            Not After : Mar  4 17:41:36 2025 GMT
        Subject: CN=CB1CD5996FF3FF7DAC3FBF852E10E6842CEE180E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:f8:ac:b0:de:fe:2d:84:b1:c1:5e:9b:ae:
                    fb:81:24:2d:17:82:eb:0e:ee:90:aa:7f:62:77:ce:
                    2d:cb:22:ff:42:98:25:bf:cd:95:8e:f2:ee:91:8a:
                    2d:57:21:02:38:e9:69:a7:ff:f6:3a:bc:bc:25:ec:
                    4a:d8:32:0e:21:75:8b:07:cd:f6:a9:77:1f:53:e3:
                    26:7d:31:a6:08:b7:3f:70:6f:eb:26:93:7b:34:1e:
                    09:81:f2:43:7a:70:5a:94:83:eb:4a:65:0f:5e:e2:
                    7d:c7:bc:e2:79:04:38:f6:dd:77:3e:22:05:10:c9:
                    e1:a2:98:76:3b:36:0b:ba:59:47:56:14:eb:49:07:
                    b6:f5:c1:67:b3:1d:68:de:a8:1c:9a:89:37:6e:4f:
                    80:4c:9a:6b:52:24:97:53:9c:da:5a:06:eb:ca:a7:
                    a1:09:e7:a9:5b:c8:36:96:1d:f2:b6:60:64:0c:db:
                    b5:6b:20:cf:8a:30:25:87:fd:db:de:2f:af:af:e2:
                    47:a5:5b:55:fd:7e:3c:12:10:5d:d5:e1:b4:ab:5c:
                    92:7a:32:db:73:0a:31:1a:8e:e6:9f:64:1a:31:66:
                    02:61:da:25:d2:63:b5:98:b0:0a:3d:38:0b:96:c6:
                    6e:f5:fb:a3:b1:17:68:fe:ba:7d:15:70:13:6e:cb:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:D5:99:6F:F3:FF:7D:AC:3F:BF:85:2E:10:E6:84:2C:EE:18:0E
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:73:aa:2b:2a:26:a0:a7:50:60:da:43:fd:fa:79:53:ce:bc:
         a4:bc:fa:76:07:e8:00:da:b8:b0:53:ac:c0:1f:de:97:a0:6e:
         46:8c:15:6c:5b:5c:f5:4d:77:f0:dd:fb:e5:9e:cc:d4:59:1c:
         c9:aa:48:a6:30:03:81:f9:95:4b:c5:26:76:16:94:2f:b2:e7:
         c7:f7:ad:dc:3f:90:17:99:16:04:06:97:b4:43:d2:3d:9d:69:
         75:cb:ca:a7:32:b8:58:98:3d:a5:16:92:9a:98:17:2f:71:ae:
         d7:ae:0a:f7:a0:a9:fb:87:ef:58:e2:ad:66:b9:af:83:3b:e7:
         8f:53:46:ce:31:c7:a7:15:cd:d2:b0:fa:87:2b:63:b3:ce:cf:
         8d:52:4e:ca:1f:39:5f:14:e0:34:d9:fd:c9:2b:cf:6b:40:7d:
         e0:e1:0d:8d:5d:b7:1d:27:21:09:b5:f9:d2:8f:d5:dc:c3:fe:
         a0:ff:1b:cb:c9:8d:e6:dd:c1:65:27:03:eb:5f:00:da:a9:f3:
         d5:e6:21:df:36:70:df:ad:e8:3d:aa:dc:5b:5d:3d:27:06:b6:
         ff:7e:22:60:18:bf:cd:73:92:fb:ca:ac:3d:8f:91:9d:44:20:
         ca:54:40:c2:45:a3:e4:7d:8d:b6:9f:5c:ec:3f:b2:7f:ee:c8:
         a1:9e:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org