Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e203434393437.roa
File:                     3139302e39332e39332e302f32342d3234203d3e203434393437.roa (raw, json)
Hash identifier:          fM5WiRADvo3zh6mC7r6UEVdZrbwQztEca8ehZkCKybc=
Subject key identifier:   08:B2:4B:9E:E9:72:4F:78:AF:D3:64:14:8D:4C:AF:78:A6:4C:1C:41
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       274E772C1840A53F337DE1B8AFE777748C4E72C5
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e203434393437.roa
Signing time:             Mon 30 Sep 2024 15:00:00 +0000
ROA not before:           Mon 30 Sep 2024 14:55:00 +0000
ROA not after:            Mon 29 Sep 2025 15:00:00 +0000
asID:                     44947
IP address blocks:        190.93.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4e:77:2c:18:40:a5:3f:33:7d:e1:b8:af:e7:77:74:8c:4e:72:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 30 14:55:00 2024 GMT
            Not After : Sep 29 15:00:00 2025 GMT
        Subject: CN=08B24B9EE9724F78AFD364148D4CAF78A64C1C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:83:da:f4:ae:37:cb:ee:0e:80:66:18:10:e7:
                    8e:76:db:5b:fa:b0:ef:4a:3e:10:c5:df:a6:4d:cd:
                    77:15:93:73:c5:1c:ea:f3:ae:24:78:77:45:4b:a1:
                    b9:61:09:69:bf:4a:87:f8:20:d6:9d:11:bb:17:e1:
                    9f:0f:a6:2a:14:40:40:b7:fb:94:04:99:20:54:6e:
                    d3:54:41:a1:ab:7e:15:7e:b5:78:04:a8:54:9c:9b:
                    18:d0:18:74:b5:dc:e6:0b:52:da:34:a2:51:35:4b:
                    52:24:89:73:e0:1c:84:7c:b1:6f:c2:d3:f3:75:94:
                    16:0f:8e:d1:35:58:ec:09:70:04:c9:67:d5:96:ea:
                    a3:73:3d:39:f1:bf:4f:f8:16:9e:b5:c3:8f:cf:55:
                    1c:78:79:3a:7f:47:e4:3a:b2:a5:81:83:75:ee:26:
                    bf:69:43:81:dc:98:6c:a3:3d:83:29:e3:a7:1f:d5:
                    5c:c6:f0:06:93:cb:12:11:bd:84:ae:69:ee:1d:4a:
                    4c:46:db:53:d6:2b:76:a5:ba:ae:15:e9:5c:f6:9c:
                    10:d9:d1:4b:b2:44:dc:3a:c3:f5:28:93:61:90:07:
                    6b:ec:85:4a:58:4f:2d:04:f5:60:be:42:0e:8c:df:
                    ad:d1:e1:ed:67:3d:58:70:5a:e9:e5:ec:69:40:69:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B2:4B:9E:E9:72:4F:78:AF:D3:64:14:8D:4C:AF:78:A6:4C:1C:41
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39332e302f32342d3234203d3e203434393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8f:82:5f:c6:51:1f:f5:07:07:69:cb:0b:54:e0:fd:bc:29:
         ca:af:bf:52:a8:4d:ca:f9:ff:d0:c2:89:18:ef:c9:c2:66:f1:
         c8:46:0f:a6:33:b9:de:6d:6d:6b:d3:95:03:b6:29:5c:13:0a:
         5e:f3:fa:e4:d7:11:8c:83:51:60:11:36:8e:56:09:9b:ef:cb:
         8b:34:69:ea:13:d3:8b:49:d9:21:89:9d:f3:4b:ec:1c:a5:5b:
         09:b5:89:a0:c9:a3:e6:f1:51:7e:8b:5e:2b:aa:6b:96:86:de:
         53:99:85:6d:92:b3:48:94:e0:4e:f2:ff:64:83:ce:cc:13:ff:
         94:02:06:3b:cd:75:c0:41:32:60:b2:9d:f5:5b:09:a5:1f:9f:
         e3:4e:b7:97:ad:a3:12:76:85:cc:bb:1f:3e:a5:0a:1c:31:58:
         38:bf:10:2a:e4:6c:3c:7f:51:8d:4d:d8:2d:99:a7:fa:f4:62:
         b2:44:1d:78:7f:11:81:b8:36:24:76:23:49:42:d4:34:25:59:
         b0:ad:f3:a0:dd:b5:c4:8c:94:dd:ff:37:e8:3c:fd:cc:9c:9d:
         d3:e9:b2:3f:82:63:a9:4f:b8:ce:f3:ce:54:c7:f6:53:fb:f8:
         67:9e:40:4c:2e:17:bc:21:d6:80:20:8f:ec:05:4f:52:09:67:
         5c:53:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org