Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS11830.roa
File:                     AS11830.roa (raw, json)
Hash identifier:          ce6DmiDWSo5c3wTuLJSe8oAd4GtJYSE916ljyiB/aBI=
Subject key identifier:   BD:73:CF:A8:D6:AF:DE:7E:75:5E:6D:67:3A:B2:FD:71:57:54:D8:DB
Certificate issuer:       /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial:       402663F2FA64BE4BAE0ABC0F89FA61679D60A482
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS11830.roa
Signing time:             Wed 12 Jun 2024 23:45:00 +0000
ROA not before:           Wed 12 Jun 2024 23:40:00 +0000
ROA not after:            Wed 11 Jun 2025 23:45:00 +0000
asID:                     11830
IP address blocks:        190.10.18.0/24 maxlen: 24
                          190.10.24.0/24 maxlen: 24
                          190.10.36.0/22 maxlen: 24
                          190.10.40.0/21 maxlen: 24
                          190.10.48.0/20 maxlen: 24
                          190.10.72.0/22 maxlen: 24
                          190.10.80.0/20 maxlen: 24
                          190.10.96.0/20 maxlen: 24
                          190.10.112.0/21 maxlen: 24
                          190.10.120.0/24 maxlen: 24
                          190.10.124.0/22 maxlen: 24
                          190.171.1.0/24 maxlen: 24
                          190.171.2.0/24 maxlen: 24
                          190.171.10.0/23 maxlen: 24
                          190.171.12.0/22 maxlen: 24
                          190.171.20.0/23 maxlen: 24
                          190.171.29.0/24 maxlen: 24
                          190.171.30.0/23 maxlen: 24
                          190.241.7.0/24 maxlen: 24
                          190.241.10.0/24 maxlen: 24
                          190.241.16.0/24 maxlen: 24
                          190.241.31.0/24 maxlen: 24
                          190.241.73.0/24 maxlen: 24
                          190.241.74.0/23 maxlen: 24
                          190.241.76.0/24 maxlen: 24
                          190.241.117.0/24 maxlen: 24
                          190.241.118.0/24 maxlen: 24
                          190.241.120.0/24 maxlen: 24
                          190.241.124.0/23 maxlen: 24
                          190.241.129.0/24 maxlen: 24
                          190.241.130.0/24 maxlen: 24
                          190.241.133.0/24 maxlen: 24
                          190.241.134.0/24 maxlen: 24
                          190.241.136.0/22 maxlen: 24
                          190.241.140.0/23 maxlen: 24
                          190.241.198.0/24 maxlen: 24
                          190.241.201.0/24 maxlen: 24
                          190.241.207.0/24 maxlen: 24
                          196.40.32.0/23 maxlen: 24
                          196.40.48.0/24 maxlen: 24
                          196.40.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:26:63:f2:fa:64:be:4b:ae:0a:bc:0f:89:fa:61:67:9d:60:a4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
        Validity
            Not Before: Jun 12 23:40:00 2024 GMT
            Not After : Jun 11 23:45:00 2025 GMT
        Subject: CN=BD73CFA8D6AFDE7E755E6D673AB2FD715754D8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:d9:9c:15:1c:4a:6e:b9:c3:4e:d5:19:06:
                    ae:db:2a:04:fb:b7:f6:2a:a0:1f:02:7b:33:9c:d6:
                    c5:27:fd:1c:cf:d4:9c:a4:73:e6:59:66:ae:ff:98:
                    41:d6:80:85:55:db:d2:2c:e4:c9:98:98:79:f3:4b:
                    00:c4:84:06:78:df:a2:4a:ac:aa:be:43:c1:35:66:
                    69:ed:b9:e3:31:df:63:c5:33:d1:c5:97:0c:bd:b2:
                    d2:fb:31:1f:45:07:65:4e:cc:87:ab:5d:98:8f:ec:
                    43:f9:8a:5e:25:46:1d:ee:a8:ae:2f:44:df:46:43:
                    05:3f:df:7f:35:8d:96:3c:52:b5:93:ad:bf:32:4d:
                    5b:d6:26:66:ac:5a:b3:10:4b:ee:eb:85:e5:4b:f1:
                    ee:43:3c:03:1f:b1:44:ea:6e:38:e8:53:11:15:e9:
                    c1:d8:d5:e0:7b:fc:05:80:7f:15:a0:e0:58:de:91:
                    47:eb:5c:80:fa:74:dd:91:cf:23:29:75:79:b6:e7:
                    b5:05:12:7f:2d:76:ad:fe:2b:bc:43:e0:92:8d:67:
                    d7:74:a9:b7:39:76:39:60:f0:d7:55:09:eb:8e:58:
                    37:2d:d4:9f:35:e0:c5:b2:b0:b5:7e:bd:1e:ab:d4:
                    f7:a1:04:3b:3f:2c:9c:36:86:f6:9b:83:3e:52:4e:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:73:CF:A8:D6:AF:DE:7E:75:5E:6D:67:3A:B2:FD:71:57:54:D8:DB
            X509v3 Authority Key Identifier:
                keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS11830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.18.0/24
                  190.10.24.0/24
                  190.10.36.0-190.10.63.255
                  190.10.72.0/22
                  190.10.80.0-190.10.120.255
                  190.10.124.0/22
                  190.171.1.0-190.171.2.255
                  190.171.10.0-190.171.15.255
                  190.171.20.0/23
                  190.171.29.0-190.171.31.255
                  190.241.7.0/24
                  190.241.10.0/24
                  190.241.16.0/24
                  190.241.31.0/24
                  190.241.73.0-190.241.76.255
                  190.241.117.0-190.241.118.255
                  190.241.120.0/24
                  190.241.124.0/23
                  190.241.129.0-190.241.130.255
                  190.241.133.0-190.241.134.255
                  190.241.136.0-190.241.141.255
                  190.241.198.0/24
                  190.241.201.0/24
                  190.241.207.0/24
                  196.40.32.0/23
                  196.40.48.0/24
                  196.40.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:24:90:1e:aa:d9:42:00:bc:e8:68:37:77:46:30:9a:30:
         24:6b:eb:c9:6f:8c:15:4d:4d:fd:a3:18:e3:2b:d2:58:46:5d:
         f5:56:84:67:01:85:86:8f:5d:61:11:11:f0:19:27:6b:d2:3a:
         45:c8:19:52:65:34:82:20:87:a4:7a:40:c9:e8:c9:ad:08:8e:
         29:7d:f7:06:06:62:9e:74:6e:47:f2:36:73:c2:f9:b3:d9:35:
         ff:55:fb:2f:78:31:e9:fa:37:93:5f:e9:15:1d:d7:96:db:77:
         ca:62:c8:16:13:4f:b1:94:66:e9:00:84:f2:62:94:6a:8b:76:
         89:73:89:69:b4:87:a0:27:e4:d0:20:28:5d:24:7b:79:e8:c8:
         f0:6c:2a:39:a4:9a:ae:a9:58:78:3e:e2:ce:35:22:df:b6:ab:
         07:71:51:47:3b:53:d7:b5:e7:78:24:d2:c8:8e:06:e8:18:a2:
         03:a1:ab:78:53:a1:d4:ef:1f:78:08:2f:0e:ab:0f:e7:61:83:
         f0:d1:8b:0a:4a:91:be:07:a1:d3:70:b5:aa:1b:62:48:03:10:
         67:5a:d4:f4:02:3f:c2:a5:ce:9a:66:11:12:5f:7c:93:15:5d:
         1e:aa:ff:3a:38:d4:b2:52:84:7c:fd:58:2e:47:bb:68:b6:96:
         d1:f4:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:54 2024 by rpki-client on console-ams.rpki-client.org