Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa
File:                     AS28094.roa (raw, json)
Hash identifier:          aBk27eSY+d6M/p91a99dwR2wm8sayJVZi/bqg6qmK54=
Subject key identifier:   89:51:BD:3E:9D:27:64:5E:C5:A1:72:9C:6D:95:7A:DD:1D:39:99:5C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       09CE05A6E9F44E3CABC8DD6B1654A1F3E2684DA7
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa
Signing time:             Tue 30 Jul 2024 17:10:03 +0000
ROA not before:           Tue 30 Jul 2024 17:05:03 +0000
ROA not after:            Tue 29 Jul 2025 17:10:03 +0000
asID:                     28094
IP address blocks:        190.242.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:05:a6:e9:f4:4e:3c:ab:c8:dd:6b:16:54:a1:f3:e2:68:4d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jul 30 17:05:03 2024 GMT
            Not After : Jul 29 17:10:03 2025 GMT
        Subject: CN=8951BD3E9D27645EC5A1729C6D957ADD1D39995C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:ec:c1:c3:f1:81:16:23:e9:fd:b4:9e:3b:
                    a8:59:8d:28:5e:56:fa:57:56:8d:8b:2a:46:03:b3:
                    36:34:1a:d4:31:47:34:52:04:af:94:81:86:c3:52:
                    cb:1a:38:99:54:2b:11:3b:59:a8:91:54:ff:98:70:
                    0b:16:5c:aa:84:df:06:6d:02:dd:06:c5:df:51:32:
                    35:32:24:b7:76:14:44:72:b5:82:35:df:e4:05:3f:
                    b5:4a:9d:e8:46:18:0a:53:61:30:d9:5f:81:ce:a5:
                    39:5c:81:3d:5b:c4:ab:eb:3d:bb:59:f6:0d:c6:64:
                    30:6e:ba:6d:8d:a3:95:9a:c8:d3:da:87:19:ab:18:
                    11:27:a5:26:ca:14:25:03:c5:03:50:54:34:69:d7:
                    e9:93:95:93:5a:c7:2d:06:47:52:90:5f:16:6e:6d:
                    df:4c:c8:bd:3e:a0:98:04:02:66:e7:9c:f3:76:52:
                    fd:b3:cb:99:61:90:c5:24:0b:65:28:22:d8:50:3a:
                    dd:ad:59:9e:8b:ea:f9:e0:8d:bf:dc:88:b2:75:c7:
                    ba:54:a6:f8:55:35:a7:bd:13:18:85:78:3a:b6:2d:
                    87:f5:b0:b4:f8:2b:f8:70:99:de:52:33:09:c1:ea:
                    3c:7d:1a:2d:15:cc:bd:ad:12:42:55:44:d8:82:f0:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:51:BD:3E:9D:27:64:5E:C5:A1:72:9C:6D:95:7A:DD:1D:39:99:5C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/AS28094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:03:8a:6b:c6:22:5c:95:a5:95:fc:a1:16:93:eb:0b:48:19:
         00:ab:a3:08:47:01:08:c2:6c:b0:b8:be:99:09:97:e3:54:58:
         9d:1a:9e:b9:fc:ee:67:98:e8:5e:33:67:20:b2:c6:5d:05:be:
         4e:5b:97:14:69:db:08:a5:f5:c8:35:f5:10:c2:ab:29:5c:22:
         29:cd:72:5f:ba:43:c6:88:58:ce:f3:05:fc:16:e5:85:83:28:
         9d:8f:66:a1:86:dd:4e:1a:e0:19:bc:6b:6f:2a:00:6b:12:72:
         31:d4:7b:6a:9e:fc:ef:e5:b4:5c:41:df:3f:49:a0:04:b8:49:
         41:43:ab:79:d2:85:72:e0:86:6e:fe:ac:67:38:f6:41:ba:d1:
         4d:f8:18:8c:80:ab:95:fc:8a:60:3d:a5:8b:bb:a8:41:83:7c:
         52:6e:aa:c5:68:5e:a0:e6:c0:02:77:ef:fa:e8:48:a9:2a:45:
         4e:58:c1:80:37:91:89:f7:a6:6b:c6:e7:cb:d9:9a:57:59:ac:
         62:44:8c:9d:c0:11:d4:5c:43:79:16:9c:5e:c7:c4:3f:87:eb:
         f5:fc:f8:b5:bc:b4:12:3c:b5:dc:5b:8c:53:0f:6d:c9:43:64:
         f5:2d:c2:a5:57:f7:d9:99:e9:5d:19:3a:ec:22:e4:4f:44:4e:
         42:fb:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org