Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203532333632.roa
File:                     3139302e3130362e3230392e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          rSZkzBo8EyFgEG1X4xiyUeR2g+gLr22JgrOUzQr7KYo=
Subject key identifier:   4E:40:73:D9:F4:51:B9:34:61:C4:03:1B:8D:A9:62:15:5D:00:E6:A2
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       381F4483B75FE7AF81E82B129E9BB9E68CE8CB8A
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:02 +0000
ROA not before:           Tue 05 Mar 2024 17:51:02 +0000
ROA not after:            Tue 04 Mar 2025 17:56:02 +0000
asID:                     52362
IP address blocks:        190.106.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1f:44:83:b7:5f:e7:af:81:e8:2b:12:9e:9b:b9:e6:8c:e8:cb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:02 2024 GMT
            Not After : Mar  4 17:56:02 2025 GMT
        Subject: CN=4E4073D9F451B93461C4031B8DA962155D00E6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f5:bf:8c:89:66:b8:84:d4:eb:bc:48:d7:65:
                    11:8c:30:04:f4:f5:9a:44:ef:7b:0e:c5:89:cb:8c:
                    0f:14:0f:5f:41:e7:28:ba:cf:71:c5:65:76:be:99:
                    a4:4c:25:e1:31:07:fa:cf:a3:3d:03:5f:46:c5:50:
                    96:43:04:56:9b:7c:1b:50:98:c3:17:32:c0:80:6c:
                    52:bc:30:06:f7:03:6b:51:52:99:ef:03:1b:83:bd:
                    91:d8:81:0b:a5:c5:35:b6:21:ac:bc:37:11:3e:98:
                    6f:f8:f3:b4:44:13:39:b4:91:35:70:8b:fc:85:5d:
                    30:8e:b3:2c:0a:4c:a5:40:6c:5b:6a:a3:fe:42:da:
                    9b:49:6a:66:76:a7:44:26:a3:b6:dd:5d:6e:6c:8b:
                    6a:66:6d:78:35:e5:f8:a1:05:c0:a1:94:0b:da:4b:
                    cd:f3:2a:ac:30:7f:2d:c3:22:9e:2e:22:5c:6e:19:
                    ba:aa:e7:f7:94:f0:af:ab:18:44:cd:bf:25:2a:f6:
                    d0:9e:87:0d:ac:c5:4a:61:9e:f8:5d:bf:5a:5c:36:
                    43:7c:0a:8d:7d:e3:4a:81:ec:ab:96:f7:ba:43:a1:
                    e3:5e:83:2b:a1:9f:5c:fb:b5:05:83:18:a8:b3:51:
                    1a:89:41:1b:c3:e5:bd:a3:9a:d7:29:60:3c:1b:cf:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:73:D9:F4:51:B9:34:61:C4:03:1B:8D:A9:62:15:5D:00:E6:A2
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230392e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:84:c4:2b:84:50:95:ac:93:7e:b0:bd:59:8a:07:16:3c:12:
         ae:6b:87:1f:10:11:ef:50:18:84:6e:74:e9:de:9d:a5:a7:c7:
         7c:b3:ee:0d:35:eb:e7:c2:47:47:6c:50:7a:a8:1c:f2:8e:2a:
         30:8b:42:ca:d7:b3:12:14:1d:08:dc:a4:34:38:7e:de:ce:a7:
         a6:76:ce:f7:a1:ec:61:bc:20:c8:f5:16:79:52:ee:ec:65:6b:
         36:b1:fa:a8:cb:c2:94:24:52:03:fd:68:3e:8d:d2:64:c4:cf:
         be:7e:db:04:97:87:34:c4:86:ef:4a:27:34:8b:13:e3:cc:94:
         f8:e1:41:6b:03:dc:f9:30:30:82:79:97:fe:0f:9c:b3:3e:3c:
         50:02:d0:ef:74:8d:cc:87:ba:56:01:7c:91:56:8e:35:36:b4:
         9f:41:46:9b:92:6d:be:69:1a:43:c6:84:d6:bd:a5:fb:61:e7:
         6b:cd:c1:62:90:57:f2:5e:c7:79:d3:4f:5c:16:7e:28:7a:69:
         4c:ea:03:6a:af:dc:65:b2:41:b9:23:d9:3c:17:22:c3:28:0d:
         da:97:45:d4:08:03:09:e4:ff:f9:29:ff:9c:be:e0:dc:fa:45:
         dc:d5:d6:a1:bd:29:cb:87:2a:d8:19:8e:31:f3:e9:57:f4:27:
         23:ad:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:03 2024 by rpki-client on console-fra.rpki-client.org