Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132342e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3132342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          gzDFPFClLT4/0+ZlX0mocRFGd5haEUIK3OL7jDiex3w=
Subject key identifier:   4D:8F:FB:EF:15:DA:DB:E3:D3:6E:0D:54:2D:0D:BD:10:1E:3E:17:97
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       08662107B24908F00614403297F82EA0C39B6593
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132342e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:02 +0000
ROA not before:           Tue 10 Sep 2024 13:05:02 +0000
ROA not after:            Tue 09 Sep 2025 13:10:02 +0000
asID:                     174
IP address blocks:        190.93.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:66:21:07:b2:49:08:f0:06:14:40:32:97:f8:2e:a0:c3:9b:65:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:02 2024 GMT
            Not After : Sep  9 13:10:02 2025 GMT
        Subject: CN=4D8FFBEF15DADBE3D36E0D542D0DBD101E3E1797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:7b:64:e9:b4:48:60:6f:19:fa:9e:fc:74:6a:
                    3e:b1:cd:ba:14:fd:c5:5b:75:3d:e5:81:c8:89:8a:
                    f5:7c:63:db:ad:81:40:76:9d:b8:91:08:43:0f:13:
                    b3:2b:07:79:00:76:ea:8f:46:bd:2a:a7:d2:71:b1:
                    62:62:90:86:e4:c1:97:c8:f8:d2:d6:8a:44:33:18:
                    be:a7:35:9a:db:52:13:19:f5:ef:65:ff:17:27:15:
                    aa:ae:ab:66:03:04:e8:54:63:5b:17:df:b3:7f:75:
                    f4:77:05:9c:d3:5f:4e:1d:b5:4e:36:55:25:49:97:
                    c2:29:df:12:3b:62:21:1b:b5:34:e3:a1:20:3f:4f:
                    0c:cb:9d:23:8b:22:c4:fe:49:d1:dc:63:3c:d4:32:
                    87:fd:00:00:2f:27:90:11:65:c7:f8:da:08:cc:30:
                    1d:d6:60:70:47:58:f0:79:0b:f0:1e:70:3c:c6:60:
                    bc:a2:e9:be:12:0e:db:5d:c9:fa:7f:a0:65:bd:f8:
                    7c:f8:ff:6b:05:2c:81:13:0a:c5:59:a0:e1:e5:cb:
                    89:b9:b7:92:07:a1:12:3a:6a:89:45:cb:b4:5d:06:
                    70:c8:a2:18:28:a0:53:34:c1:78:a6:94:cc:20:e2:
                    97:c9:49:e6:24:00:25:e5:20:dd:58:5b:e4:20:5c:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:FB:EF:15:DA:DB:E3:D3:6E:0D:54:2D:0D:BD:10:1E:3E:17:97
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132342e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:2e:37:4a:8e:b1:6a:8a:c8:0d:5a:18:97:a8:a9:1b:0c:
         51:ac:8b:3b:a0:35:2e:92:f7:bd:81:f4:1e:0a:45:9d:2f:5b:
         ad:38:13:c0:27:b3:e8:d0:3c:66:f8:2c:c8:1c:0e:7d:86:af:
         d8:37:2e:b6:df:57:30:ce:17:2b:e8:38:0a:f4:2b:12:bb:04:
         fa:1d:13:39:83:ca:cd:b1:f9:9a:77:31:54:ee:7d:40:da:e1:
         60:7d:48:0e:59:1d:55:05:9d:fe:4e:2f:1f:be:0f:5d:08:0a:
         5a:19:f3:5f:c2:17:5e:b4:f0:73:74:fb:aa:b2:1e:63:4f:2f:
         6b:58:e1:42:2d:65:0a:a4:3d:36:73:6f:2c:8a:74:cf:fa:4d:
         7d:e3:c6:89:90:d8:5d:b4:d2:2a:6a:97:73:b1:75:b0:56:88:
         2d:7e:b0:cd:26:54:73:a9:4c:10:4f:ef:dd:09:f3:c4:dd:41:
         3b:ce:d1:2c:41:68:b2:b4:9a:ba:80:42:62:30:ba:04:d6:d2:
         5b:d6:1b:10:fb:c1:d0:ad:30:57:57:45:5a:2b:ab:c2:6e:7d:
         b8:b1:90:90:9b:11:f3:bc:65:3e:a7:03:ec:36:5f:7d:03:ae:
         1b:79:c7:9a:f0:36:18:f2:f7:65:cd:8d:64:1e:7a:0d:d1:0e:
         bc:1f:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org