Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          7smZSw7gy3gIiADJ8LSCtVsQl/F1UcsIAHoqzxoVGHQ=
Subject key identifier:   DC:34:E8:58:15:56:C8:89:DA:E3:F8:9F:6D:4E:1E:B6:E0:0D:40:D0
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       5B0D880495FD073571A09238E3D228E96938AB5F
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:42 +0000
ROA not before:           Tue 05 Mar 2024 18:13:42 +0000
ROA not after:            Tue 04 Mar 2025 18:18:42 +0000
asID:                     52253
IP address blocks:        190.108.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0d:88:04:95:fd:07:35:71:a0:92:38:e3:d2:28:e9:69:38:ab:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:42 2024 GMT
            Not After : Mar  4 18:18:42 2025 GMT
        Subject: CN=DC34E8581556C889DAE3F89F6D4E1EB6E00D40D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:ba:c8:ef:15:67:af:a3:dd:6d:ab:f7:40:
                    d2:ba:3f:52:a1:8d:3a:65:96:2c:66:f8:89:73:b4:
                    50:c4:15:78:bc:da:a7:78:f4:d7:5c:a8:79:f4:48:
                    6f:ab:d5:b4:ed:5c:b0:c1:c8:41:4c:73:9a:65:72:
                    b4:c1:45:49:bd:01:a6:1b:fc:f9:65:47:21:d7:ca:
                    29:c4:c2:fa:50:c8:da:5b:96:ec:7d:b8:62:d3:29:
                    6d:7b:18:91:18:1c:44:89:5e:10:7d:be:ed:8f:d1:
                    55:93:d4:2a:66:cc:83:9d:e3:54:e7:39:11:b0:28:
                    52:80:f4:df:50:6d:3a:0f:0e:36:d3:0a:f8:62:87:
                    ed:93:a9:76:5e:c8:8a:f3:0b:d5:7e:d1:c8:b2:3a:
                    22:64:70:76:7e:19:d0:16:56:70:27:62:48:10:f6:
                    6f:98:47:e8:c5:9f:d6:1b:f8:4e:7a:e7:c0:88:22:
                    50:64:fc:ac:dd:eb:a5:6b:78:63:ac:3c:06:29:73:
                    79:58:b4:45:1b:20:c4:aa:4a:2e:c1:f7:72:0d:98:
                    be:ef:6d:3e:ac:22:15:8c:12:4b:20:e6:5e:01:32:
                    30:29:cd:76:a0:51:f1:d3:c9:90:f6:f3:07:bf:80:
                    d1:7e:71:d1:a7:b1:38:c6:fe:13:4f:da:13:5d:2f:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:34:E8:58:15:56:C8:89:DA:E3:F8:9F:6D:4E:1E:B6:E0:0D:40:D0
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:8d:30:0e:f7:ba:b5:6e:e6:80:a7:52:c4:a0:c1:6b:00:
         6b:76:06:52:9f:15:57:a7:27:94:ee:95:a4:68:35:1b:5d:15:
         40:07:4b:e4:df:90:cb:90:b9:8f:43:39:e6:a5:74:24:6c:f7:
         1d:6a:f0:9f:4e:74:2c:f6:d9:40:fe:ab:5f:c9:5f:b7:54:fd:
         60:9c:24:b4:9b:40:0d:bc:b1:3e:7c:77:c1:2c:cb:2a:ba:db:
         9f:e3:95:d6:f6:9d:44:6e:73:3a:7d:94:c9:ce:3a:fd:f5:63:
         bc:38:68:05:8e:37:9b:2e:75:1b:33:d6:09:87:11:8a:70:9b:
         c0:14:dd:eb:27:8b:89:64:03:a7:83:9f:48:53:dd:29:cc:54:
         52:ec:86:be:6c:7c:fe:7c:ac:a9:7f:18:d0:00:f3:98:96:ca:
         79:e8:2a:e0:5d:8d:5e:77:1f:ee:23:02:93:66:95:cb:a6:5b:
         0b:21:fa:f9:b6:cf:78:56:3e:bc:d0:3a:81:68:14:21:c2:97:
         d0:99:d0:4b:95:af:e1:08:70:66:5f:4c:8f:1a:af:e8:6b:16:
         e6:52:d6:2f:3c:d4:c5:c8:8e:9a:e6:e8:d1:51:26:fe:07:f2:
         41:98:dd:de:4c:1b:a7:5e:9f:50:c9:ca:30:e5:9d:f0:78:ff:
         dc:47:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org