Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa
File:                     3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa (raw, json)
Hash identifier:          TA5Q1mm5INo0mYwO1JcEYtntZ7B6IKLdqfbQhbhgz+A=
Subject key identifier:   2E:68:D9:36:C7:97:62:29:BD:8B:EC:01:1F:0B:3E:F4:CB:79:46:08
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       1C80B845BFA289F681E18030E1DAC088475C8913
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:37 +0000
ROA not before:           Tue 05 Mar 2024 18:13:37 +0000
ROA not after:            Tue 04 Mar 2025 18:18:37 +0000
asID:                     52253
IP address blocks:        190.108.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:80:b8:45:bf:a2:89:f6:81:e1:80:30:e1:da:c0:88:47:5c:89:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:37 2024 GMT
            Not After : Mar  4 18:18:37 2025 GMT
        Subject: CN=2E68D936C7976229BD8BEC011F0B3EF4CB794608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:1b:ac:4b:15:12:4e:ee:f4:ba:fe:5f:45:
                    56:31:22:e5:82:a7:85:60:79:d3:4d:e4:4d:35:cf:
                    eb:50:5c:fe:9d:ba:12:ae:9f:89:19:0d:3d:0e:9a:
                    d2:0f:20:de:b3:c6:e8:f2:b8:24:69:2a:07:f2:33:
                    f8:c6:10:4f:76:ad:cb:2b:31:90:ad:91:a1:ff:7a:
                    6d:fc:4a:35:56:38:56:28:ff:5c:2b:08:bd:3b:6e:
                    69:f1:86:5d:7d:f3:92:6d:8f:4a:1c:e4:ec:4f:61:
                    7b:09:01:a2:df:95:3d:a9:73:a2:db:dd:61:fc:2d:
                    4e:4a:4f:b7:59:73:71:3a:42:a2:a2:d2:95:59:86:
                    56:4b:59:bb:61:71:a0:5b:17:90:54:1a:04:96:06:
                    4e:f8:9f:a0:bd:d3:21:e1:6b:41:59:3b:3d:4e:05:
                    c3:ae:79:c4:33:a5:b9:d5:96:0f:cd:53:f7:27:38:
                    04:8e:35:6e:46:16:cf:4e:ba:8b:ab:6d:4f:b7:7f:
                    cb:92:78:b6:40:90:88:16:f9:e6:e2:d0:cb:a9:e5:
                    07:3e:f7:ef:84:74:c7:44:a7:c1:e6:08:a3:14:c1:
                    f5:1f:da:74:18:f7:04:20:56:db:4f:76:f5:13:15:
                    92:ae:a3:cb:bb:c8:df:a0:13:e0:81:25:6f:bf:de:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:68:D9:36:C7:97:62:29:BD:8B:EC:01:1F:0B:3E:F4:CB:79:46:08
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:8c:4f:20:c7:dd:e4:7a:d3:4c:59:29:b3:90:be:25:a8:
         40:02:9e:83:22:d0:ec:97:47:90:25:a3:d2:e0:0a:a0:ea:e0:
         16:5a:d1:dc:d6:63:7d:de:84:1a:ff:27:ab:94:65:48:b8:4d:
         a2:c4:1c:44:f9:73:c9:a3:ca:7e:6c:6f:4e:47:c2:89:9b:04:
         59:8c:8e:75:42:db:ea:4a:81:3d:09:34:24:a0:48:55:cc:28:
         8d:40:f1:5e:9a:f3:84:0f:89:56:d2:09:4e:19:ed:0d:b1:14:
         04:0c:06:7b:bb:e5:1f:71:45:b4:b3:e6:d6:87:f5:ee:26:ed:
         a9:0c:4e:22:4d:fc:dc:64:d0:1d:ac:ad:6a:12:15:3c:43:ad:
         f5:1c:4f:4f:2d:14:60:ba:95:93:9a:02:08:b0:7b:4c:a1:b6:
         58:0c:c7:8c:66:60:78:a1:5a:26:20:9b:43:63:71:f1:e4:92:
         05:28:b9:64:4f:c9:66:7f:64:7e:b4:d9:80:0f:43:27:e4:1c:
         b9:c8:0f:77:2b:3f:77:49:13:55:3c:c4:ad:d5:ed:1e:e0:07:
         33:79:7d:81:ca:a0:c4:38:56:12:a4:e9:67:48:ab:c7:e7:65:
         db:f9:de:c2:53:d4:9b:16:af:aa:2f:20:d1:16:e5:c0:e2:ea:
         fa:19:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org