Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37362e302f32342d3234203d3e20323132333834.roa
File:                     3139302e39332e37362e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          i6pmWZhwv2Fs/hIVmw0zImsCjwoUDBQpzNuMqVAWaj8=
Subject key identifier:   3F:AB:7E:02:8D:C3:69:9C:E5:D2:A8:72:CE:ED:48:75:3F:D1:B7:17
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       24AF20AB462F809E5F2DC6C80C4543A8A5061E6D
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37362e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 05 Mar 2024 18:18:27 +0000
ROA not before:           Tue 05 Mar 2024 18:13:27 +0000
ROA not after:            Tue 04 Mar 2025 18:18:27 +0000
asID:                     212384
IP address blocks:        190.93.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:af:20:ab:46:2f:80:9e:5f:2d:c6:c8:0c:45:43:a8:a5:06:1e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:27 2024 GMT
            Not After : Mar  4 18:18:27 2025 GMT
        Subject: CN=3FAB7E028DC3699CE5D2A872CEED48753FD1B717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:17:66:d8:82:d9:72:a2:1b:fb:98:a8:26:
                    6f:17:e7:be:97:66:2a:2a:10:96:e4:a6:08:40:eb:
                    65:67:c9:09:0a:00:27:2a:6c:c2:34:85:37:db:df:
                    bc:7e:a7:ee:46:e9:96:00:65:ef:0c:60:6f:61:07:
                    f7:59:02:ab:7f:6a:97:79:a4:61:8c:92:43:1a:f2:
                    18:24:ee:61:2d:98:27:0f:73:58:1b:7e:a3:41:d7:
                    48:95:68:9f:56:da:ff:8c:86:55:d5:4b:3b:f9:74:
                    90:c5:93:f4:83:72:b5:37:5d:7f:98:f6:5e:09:53:
                    54:fe:6c:2e:c9:71:d9:24:6e:b3:83:65:1f:f6:13:
                    ee:6d:2a:93:b8:ad:a4:f5:e4:43:10:8e:0e:fc:ee:
                    1f:a4:19:79:b9:ef:a7:54:36:eb:1c:e3:49:49:da:
                    c6:f7:07:d9:b3:62:cd:c8:d9:94:5c:92:57:cf:bb:
                    14:99:d4:c7:e6:56:87:b8:78:7f:ce:8d:6b:99:ed:
                    85:25:21:1e:0e:fb:28:22:f2:d2:0b:50:a8:0c:78:
                    2d:14:b1:a6:d1:6a:7f:17:4d:e0:ec:42:71:db:62:
                    f8:a5:5c:d1:d3:25:8a:c1:c0:0b:f9:23:86:c4:1d:
                    76:c2:f8:a1:4c:c7:5a:a9:d5:00:c0:3c:0a:12:6d:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:7E:02:8D:C3:69:9C:E5:D2:A8:72:CE:ED:48:75:3F:D1:B7:17
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37362e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:27:46:35:7c:83:6e:2e:f5:71:53:40:8e:b4:40:54:8a:
         fa:1b:62:d7:ae:cb:4b:11:33:3f:4b:dd:db:9e:11:de:1a:99:
         cb:c5:8b:8f:35:e2:b2:25:cb:32:0d:ba:3d:d2:02:9f:f3:b9:
         12:76:9f:57:f7:d0:d3:0d:9f:7e:6f:fa:be:75:ee:47:38:ff:
         a9:af:74:c5:4c:69:7a:3f:d5:87:d6:60:67:f0:07:ea:7e:25:
         dc:03:4b:44:de:42:e7:84:bd:13:5f:75:ac:1e:f0:f2:80:1a:
         36:33:ad:fc:5b:e9:bb:d3:80:c3:b8:66:6b:c6:b6:dd:98:9f:
         f0:b7:2b:a3:8e:58:1e:f5:ad:df:29:10:cd:9e:ca:73:68:9b:
         d8:8b:56:d4:ab:42:13:f7:d1:b1:c3:1e:ed:c3:18:f9:8f:cc:
         db:d3:a8:cc:87:5a:ca:8b:61:b6:b9:33:a8:8c:b4:df:8e:50:
         6a:16:31:7b:dc:f3:4a:e8:93:1f:4a:aa:4a:cd:02:b2:92:3b:
         65:53:be:4f:69:d0:ee:e8:34:ba:4f:fc:35:bf:79:d3:5d:81:
         22:9a:e0:0f:6b:f5:30:94:b0:c5:4b:a3:d7:ee:19:a8:c9:bf:
         e6:88:a8:bc:2c:d8:c1:c5:bf:6b:a1:d0:c5:74:2a:50:6a:4d:
         af:87:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:03 2024 by rpki-client on console-ams.rpki-client.org