Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e36342e302f31382d3234203d3e203237393834.roa
File:                     3139302e3130352e36342e302f31382d3234203d3e203237393834.roa (raw, json)
Hash identifier:          j8/ssaSjzyKXDMg/rIMQkkhvPCboq+Wcwj6CUoctIyM=
Subject key identifier:   22:C3:46:D0:67:49:36:DE:ED:1E:02:C1:D3:0B:D7:CA:DB:9F:FD:48
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       26E11135ACCF63AA798C72D05272C17602C9280A
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e36342e302f31382d3234203d3e203237393834.roa
Signing time:             Tue 05 Mar 2024 17:43:53 +0000
ROA not before:           Tue 05 Mar 2024 17:38:53 +0000
ROA not after:            Tue 04 Mar 2025 17:43:53 +0000
asID:                     27984
IP address blocks:        190.105.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e1:11:35:ac:cf:63:aa:79:8c:72:d0:52:72:c1:76:02:c9:28:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Mar  5 17:38:53 2024 GMT
            Not After : Mar  4 17:43:53 2025 GMT
        Subject: CN=22C346D0674936DEED1E02C1D30BD7CADB9FFD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:e0:b1:89:9f:92:00:57:85:c9:fb:41:23:
                    77:70:92:4a:21:d7:70:ae:82:71:d6:b7:aa:16:9b:
                    90:7f:33:55:14:cb:b7:6e:ec:c2:05:d1:40:de:ca:
                    05:f7:be:c8:51:1b:d1:c8:f7:95:94:7d:46:76:6c:
                    3f:43:00:29:40:df:8a:b0:e4:da:58:e0:3e:40:86:
                    94:18:88:7a:33:4e:e1:61:c3:6c:9a:dc:25:05:be:
                    8f:af:88:2b:f5:ec:6b:69:bb:30:45:f5:0f:94:73:
                    5e:b2:1b:4a:c6:9e:ae:e0:6d:60:e3:39:00:a0:60:
                    1f:53:dc:7f:1c:3c:3f:81:76:57:81:b3:63:1e:ff:
                    70:fb:3c:43:d5:42:15:2e:17:d6:4f:5a:40:2f:d1:
                    fb:5b:f1:72:a7:6c:a6:e1:a1:1b:03:ad:c3:a2:af:
                    b3:38:57:36:c7:ec:c6:f3:8b:27:70:ea:11:51:9c:
                    37:dc:f5:6e:9a:3c:b0:6f:a6:1f:8f:85:21:2b:3f:
                    09:e5:9c:7c:d3:7a:5c:9a:ef:82:a8:6c:b6:0d:e7:
                    1b:71:05:42:e5:87:e4:83:db:39:dc:2d:a4:88:df:
                    4d:d5:84:89:db:89:15:64:ae:a6:61:05:53:0d:52:
                    b7:60:03:b8:3d:44:af:b6:28:e4:22:42:63:30:ea:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:46:D0:67:49:36:DE:ED:1E:02:C1:D3:0B:D7:CA:DB:9F:FD:48
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3139302e3130352e36342e302f31382d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:c9:9c:0b:01:9b:f3:c8:53:cd:a5:dc:4a:b7:93:21:9c:
         63:8f:bb:d2:92:87:b6:a3:96:3b:c7:da:d2:45:6d:1d:61:83:
         9e:0e:7c:bb:c2:be:d5:b4:be:ee:a5:53:bb:36:81:7e:14:7d:
         8c:8b:47:52:36:7c:14:5b:06:24:bd:e4:61:03:4d:55:0e:c3:
         47:37:f7:34:d3:a7:94:19:ea:1c:b2:ce:98:40:de:b8:19:c3:
         71:e3:80:dd:e5:0c:9d:ff:0b:21:bd:81:2f:66:4b:72:cb:4c:
         1b:94:f3:af:4b:ab:05:f7:50:7c:c8:7f:3a:3d:49:53:d8:c2:
         de:68:35:64:07:0a:d3:12:34:53:98:40:a1:03:46:9f:ad:4e:
         e8:fc:44:a2:85:45:3e:ad:20:82:68:e0:de:bc:b5:ae:5c:2e:
         e8:47:6a:6e:17:e0:cd:dd:07:8e:60:7d:fd:d6:4e:bf:74:f1:
         b1:34:97:d7:87:3f:64:4a:65:74:63:ec:10:b2:08:ba:83:62:
         4c:99:61:8d:1e:21:61:ae:e7:bf:18:41:48:e7:8f:b8:4b:95:
         c5:76:4e:e8:b8:3e:36:80:10:ec:66:0a:a0:10:7a:0b:65:12:
         2c:d4:93:94:d6:28:ed:19:d0:28:7e:91:fe:55:43:80:a6:96:
         4e:67:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org