Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa
File:                     3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier:          Sfzuhx0EDAv+OS6y5LeNHtPixdThYkZfYVnXImitvxQ=
Subject key identifier:   2D:4C:15:3C:56:BA:A3:9B:38:5A:60:5B:E3:14:C9:26:DB:8F:60:37
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       4A149E6EE738FBAEA7AB44EB7955441EDEE49F7F
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa
Signing time:             Tue 05 Mar 2024 17:59:11 +0000
ROA not before:           Tue 05 Mar 2024 17:54:11 +0000
ROA not after:            Tue 04 Mar 2025 17:59:11 +0000
asID:                     264850
IP address blocks:        168.90.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:14:9e:6e:e7:38:fb:ae:a7:ab:44:eb:79:55:44:1e:de:e4:9f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Mar  5 17:54:11 2024 GMT
            Not After : Mar  4 17:59:11 2025 GMT
        Subject: CN=2D4C153C56BAA39B385A605BE314C926DB8F6037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:92:72:2e:aa:0d:d4:00:10:ca:89:36:21:
                    ec:ab:b7:fa:5f:8c:07:8b:d1:d9:87:b4:33:1d:ab:
                    20:f0:11:5a:3f:56:43:7f:b5:2f:9c:3b:e7:85:83:
                    c4:73:bc:d5:c5:f6:33:7f:fd:cd:11:2c:2f:f7:3d:
                    d1:51:6c:8a:40:df:e2:33:49:85:57:ac:10:00:25:
                    ee:08:04:ea:16:41:69:8d:b1:93:d8:ea:b3:21:77:
                    c1:4a:d7:0d:4e:b4:b1:18:e1:24:9b:9d:1b:d5:ac:
                    5f:e4:44:0a:c5:6b:e7:c9:4b:c1:85:e4:4e:f2:8a:
                    01:60:4e:51:ac:c0:cc:05:fd:87:52:ad:e8:95:30:
                    ab:47:16:d2:4f:c2:5a:f3:39:92:9a:13:69:a4:d6:
                    4d:ff:be:c5:89:09:b3:3e:2f:5c:9f:17:bb:8b:18:
                    e9:2c:a3:f0:60:ac:32:4a:ee:dd:0b:49:3c:89:e1:
                    d0:b0:1b:49:cf:fe:cc:6f:a6:5f:c4:be:68:b6:e9:
                    de:ce:3c:95:67:1b:8c:57:08:ee:e3:0d:67:23:e1:
                    b7:74:c6:c1:19:6d:28:01:97:68:85:d3:ed:1a:3f:
                    5a:57:a4:4f:d8:19:9e:45:cb:08:d4:29:ae:f9:6d:
                    b5:e4:ac:e3:aa:03:e3:f8:e0:a8:43:2f:8e:a2:b1:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4C:15:3C:56:BA:A3:9B:38:5A:60:5B:E3:14:C9:26:DB:8F:60:37
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:80:60:1c:06:29:a1:2d:4f:ba:38:8b:41:aa:0d:69:45:d8:
         5a:9c:96:e9:d9:ce:ab:06:e5:1f:27:c2:52:68:d7:27:dd:d0:
         16:64:52:ca:58:b0:22:bb:a5:77:00:98:ad:6b:c9:f8:c2:19:
         0c:08:9b:86:1b:08:5d:53:9d:5b:8c:57:bb:fb:4f:ca:40:86:
         0b:f0:30:0d:6b:f3:4b:68:f4:27:93:0d:50:03:4e:c9:5e:94:
         dc:51:7b:41:9e:ed:d0:c2:9c:42:40:70:78:cb:ee:19:9c:2b:
         c8:81:88:ae:5c:26:86:b3:7f:54:84:5f:ce:25:9e:31:d1:ae:
         00:7d:72:44:04:b6:70:0e:55:b8:95:67:34:d0:b4:85:8f:77:
         c8:3f:3e:e7:33:0d:94:5d:04:0a:af:31:49:86:37:44:86:22:
         58:4c:eb:f5:6f:f3:a4:a4:0e:c5:41:d9:88:71:17:25:e0:42:
         c7:10:12:1b:96:c8:5a:9c:3d:89:a5:53:3e:fe:dd:04:12:26:
         1d:ad:b0:0d:09:23:a4:3e:c2:43:41:fe:1f:df:91:b6:3d:4b:
         3b:6d:f6:5e:5c:c4:13:6b:51:88:0f:35:b5:58:3f:90:06:e1:
         72:7c:78:6f:d2:f7:6c:a1:38:03:d6:b5:57:1b:1c:47:a2:04:
         f9:bd:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org