Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa
File:                     3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa (raw, json)
Hash identifier:          3vWDN6zTIr9Q4L8LZUXDPLrqy36ZxVbsiY8J+AU1Svo=
Subject key identifier:   F9:E6:61:9E:0D:55:E9:1C:53:89:36:42:F5:89:36:64:30:16:04:65
Certificate issuer:       /CN=C75798560649F727F4B8EEB5DE65CE896EF27A0F
Certificate serial:       4A6676047A93F16ECFFBF6C175115382F3FC9BDC
Authority key identifier: C7:57:98:56:06:49:F7:27:F4:B8:EE:B5:DE:65:CE:89:6E:F2:7A:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa
Signing time:             Tue 05 Mar 2024 18:06:46 +0000
ROA not before:           Tue 05 Mar 2024 18:01:46 +0000
ROA not after:            Tue 04 Mar 2025 18:06:46 +0000
asID:                     270151
IP address blocks:        190.102.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:66:76:04:7a:93:f1:6e:cf:fb:f6:c1:75:11:53:82:f3:fc:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75798560649F727F4B8EEB5DE65CE896EF27A0F
        Validity
            Not Before: Mar  5 18:01:46 2024 GMT
            Not After : Mar  4 18:06:46 2025 GMT
        Subject: CN=F9E6619E0D55E91C53893642F589366430160465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:1f:b3:7f:11:ee:48:4c:75:31:c5:f9:ca:
                    9e:50:f8:06:bd:ee:48:51:85:cd:7e:93:9f:8c:82:
                    a4:4e:6d:99:8d:02:32:a6:10:1a:d4:6d:97:ed:80:
                    73:80:90:b9:6a:14:50:ad:a0:a4:d5:e6:67:19:72:
                    ec:d4:a8:e4:aa:38:f6:03:24:df:03:60:a6:7e:76:
                    0e:82:0d:1f:fa:de:b5:04:d5:df:25:b3:c0:c8:59:
                    5e:07:5e:c4:ef:18:87:30:d7:13:aa:04:53:8e:87:
                    01:85:34:89:5e:c9:74:cf:ce:d5:47:03:e9:80:b6:
                    07:ba:03:f3:bb:a2:9b:e2:52:09:aa:72:4b:d9:9c:
                    03:b8:26:85:da:9e:03:04:b6:a0:85:d7:fd:7d:6a:
                    35:f8:82:ae:89:37:2e:93:a3:ae:c3:7d:53:98:4f:
                    05:5c:93:a6:80:2e:cf:47:c7:2c:1b:c7:bf:94:c4:
                    2c:bd:ba:b3:fe:43:81:04:33:61:0f:ac:50:7b:77:
                    22:10:1f:52:c6:43:c7:d7:b1:23:e6:2b:2f:fb:e5:
                    92:fa:01:c4:4a:67:98:42:08:8c:cc:fb:b4:fd:c1:
                    aa:89:38:d4:22:50:c0:82:ce:22:67:6c:20:0f:c0:
                    be:96:d0:ac:26:96:01:03:5a:f1:31:15:65:04:80:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:61:9E:0D:55:E9:1C:53:89:36:42:F5:89:36:64:30:16:04:65
            X509v3 Authority Key Identifier:
                keyid:C7:57:98:56:06:49:F7:27:F4:B8:EE:B5:DE:65:CE:89:6E:F2:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:e8:b4:ec:42:09:9b:a9:42:67:22:cd:87:af:13:a3:19:eb:
         66:ef:4e:c7:f2:83:ad:78:41:78:e0:cd:0a:52:c8:36:e6:be:
         75:fd:b1:0c:6b:7d:7c:b4:ca:65:10:fe:fb:cb:7f:d6:ee:06:
         c1:12:ce:80:4b:22:20:94:f1:af:58:d8:9b:3b:5a:27:99:b7:
         70:ee:ae:30:00:5d:1b:e5:72:e5:28:ff:fe:51:9d:0c:4f:fd:
         c3:09:e4:b4:97:9b:2e:7b:a7:88:16:5e:28:5a:51:8a:42:da:
         6d:19:80:e1:ab:e6:ee:e0:76:e4:5c:51:b4:02:f0:d3:72:65:
         86:0b:74:4b:f3:5d:e2:a9:8a:ff:09:bf:5e:0b:c4:e3:3c:e1:
         df:40:da:43:a7:2c:2d:b9:ef:94:a7:28:24:20:9d:c9:38:fe:
         54:b0:10:bb:36:9c:62:aa:7f:65:eb:f1:23:1b:bd:dd:96:0e:
         c3:ec:c3:42:61:6d:da:65:4f:75:8c:3f:50:a6:0f:ad:4c:95:
         82:d0:3b:89:54:a7:0b:eb:aa:34:88:2e:0b:fc:b5:98:7e:71:
         bb:71:94:71:18:7e:7a:f5:0a:f3:4d:64:0e:39:5d:99:7e:22:
         c8:a3:48:3e:b8:f3:97:e1:04:91:01:70:24:3e:b0:c6:99:11:
         d3:f0:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org