Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36352e302f32342d3234203d3e20323632313931.roa
File:                     3139302e352e36352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          ohGpBju6FnVT8QYROvEd3BeCP6NXnFN7ynWE11siJGw=
Subject key identifier:   57:AE:B3:19:F1:62:E8:7C:C8:87:C2:3C:AE:7C:E9:02:58:79:6D:CE
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       2364E0DD8181684D55AB04C1228BA2EDFB10602A
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36352e302f32342d3234203d3e20323632313931.roa
Signing time:             Sat 04 May 2024 10:55:00 +0000
ROA not before:           Sat 04 May 2024 10:50:00 +0000
ROA not after:            Sat 03 May 2025 10:55:00 +0000
asID:                     262191
IP address blocks:        190.5.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:e0:dd:81:81:68:4d:55:ab:04:c1:22:8b:a2:ed:fb:10:60:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: May  4 10:50:00 2024 GMT
            Not After : May  3 10:55:00 2025 GMT
        Subject: CN=57AEB319F162E87CC887C23CAE7CE90258796DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:78:36:66:f3:df:8f:b1:31:bd:03:98:6f:
                    9f:ce:b5:fb:4f:1a:32:20:b9:fa:c2:aa:03:ce:da:
                    9b:0d:b8:b6:41:cc:7d:2b:33:ab:a4:d8:d4:d2:41:
                    66:3a:5b:b5:98:84:7e:96:82:55:fc:86:43:7b:1f:
                    ed:95:b8:b0:2c:f5:83:f3:18:10:59:0b:92:86:7a:
                    01:8a:43:54:72:3c:ee:89:86:47:0e:b8:dd:2e:e2:
                    53:65:d4:d9:5b:c7:ec:24:17:cc:ea:78:10:b9:9e:
                    1c:24:a5:e4:94:29:ab:30:71:7f:5b:5a:53:51:e6:
                    c9:23:e1:53:b0:45:a9:ec:3e:c6:66:47:d1:99:1a:
                    2e:b4:7a:86:7f:74:78:2b:80:28:6f:1f:1b:b3:b9:
                    af:f2:d7:b7:ae:00:97:38:5a:cb:08:95:8f:76:96:
                    3f:f7:b0:3b:95:ad:bf:55:84:c7:76:64:2f:14:a6:
                    50:1e:85:34:be:28:e3:43:92:08:4c:3d:d5:d7:16:
                    2c:e6:14:53:4b:80:0e:17:c4:6d:64:14:14:f3:59:
                    62:28:4b:dd:ff:ea:16:70:c9:02:9e:00:13:f1:0c:
                    ff:3a:f4:b9:e8:3c:ed:6a:7a:87:3d:11:f1:e1:af:
                    75:49:bf:24:ee:21:ce:2a:42:ae:5c:d4:2c:73:c8:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:B3:19:F1:62:E8:7C:C8:87:C2:3C:AE:7C:E9:02:58:79:6D:CE
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:ad:83:f3:3f:2d:a7:bb:72:0c:df:74:1b:5f:96:55:5d:
         9e:5e:21:57:1b:6d:af:55:13:2d:81:85:ff:c7:d9:47:6d:cf:
         3f:73:26:e7:23:2e:01:cd:45:ac:ab:9a:e4:c9:d1:94:e4:9f:
         a0:95:38:be:75:df:39:84:69:e4:cd:70:88:cf:81:d4:4e:06:
         81:45:bb:87:cd:b0:95:d9:35:d5:79:f7:cc:c5:dd:f2:f4:61:
         bf:41:d8:d1:13:1c:f0:0c:a9:8e:c8:15:d3:e8:4e:5f:19:70:
         8b:1e:d1:a8:46:8e:21:b1:69:33:e9:b9:19:2f:78:7a:ec:2e:
         a9:64:cf:79:f9:0f:73:89:e1:cc:c2:ea:bf:b6:74:a1:a8:07:
         ce:cb:ab:62:49:56:b2:b7:6c:44:9b:be:dc:e6:4b:54:59:63:
         94:f2:7b:d1:06:83:22:61:b1:37:f5:a5:48:ff:07:02:a4:6c:
         ac:b5:ab:86:cb:93:77:7e:4e:c4:e3:2b:b2:a6:a0:b6:21:35:
         74:30:b5:15:bf:2c:4d:f1:a8:68:dc:d2:82:c8:bf:ba:77:15:
         8f:3d:91:5d:c0:ee:c9:d4:d2:e6:7c:29:48:6a:b3:2a:d0:84:
         7c:d5:c3:3e:a3:94:01:ad:72:0a:fb:c9:b1:db:e0:2f:4f:5c:
         ba:b5:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org