Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          6g0lL8mQ4h6/xbWonnIhSRLZrkxwVyU6vIn79KZHr2Y=
Subject key identifier:   FB:16:63:49:AA:3D:F8:F5:45:CF:1E:75:30:49:8D:BD:42:CE:F9:59
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       74B273101186693222894C16FAA01267ABA79538
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:09 +0000
ROA not before:           Tue 05 Mar 2024 17:51:09 +0000
ROA not after:            Tue 04 Mar 2025 17:56:09 +0000
asID:                     23243
IP address blocks:        190.106.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b2:73:10:11:86:69:32:22:89:4c:16:fa:a0:12:67:ab:a7:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:09 2024 GMT
            Not After : Mar  4 17:56:09 2025 GMT
        Subject: CN=FB166349AA3DF8F545CF1E7530498DBD42CEF959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:6b:77:3d:b4:77:ec:62:8f:7a:ba:03:7b:
                    fd:ac:2f:6f:ff:e5:ca:6f:4f:15:50:aa:dd:04:c6:
                    ee:88:b2:42:c6:32:77:8f:7d:d6:c0:b0:fc:c2:78:
                    71:b1:e8:60:cc:9a:a2:46:3b:24:df:03:f8:7a:ac:
                    93:79:c7:6c:f2:d1:a9:64:d9:d5:49:64:84:85:c3:
                    2e:83:2b:49:b4:83:2a:5f:ab:58:18:93:b9:33:ec:
                    3d:e9:31:52:f1:a1:45:3c:d5:00:bb:e0:b6:84:3f:
                    8b:65:46:32:85:99:3a:58:df:3f:4b:75:0e:79:1c:
                    47:08:d0:7b:4b:cb:97:47:9b:98:d6:9e:bc:bc:af:
                    03:80:ec:84:c9:32:73:48:99:7a:ca:d0:d3:e3:3b:
                    30:36:0b:83:c8:7f:b0:1f:08:ac:da:44:54:ea:b2:
                    34:68:7f:7a:f0:53:58:32:e0:f0:fb:90:44:dc:00:
                    11:6b:7f:12:a5:4a:c6:42:a8:9d:c3:d6:40:02:e1:
                    ad:6f:10:f5:96:d2:84:f4:2a:51:26:02:0a:e9:b1:
                    88:26:c8:7f:20:bc:09:1d:70:6f:5d:f4:00:be:19:
                    dc:6e:9d:e9:2c:4c:f5:ad:96:97:5a:39:bc:df:8e:
                    88:66:3d:a1:15:72:0f:8b:6b:3a:1b:81:2e:7d:fd:
                    e6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:63:49:AA:3D:F8:F5:45:CF:1E:75:30:49:8D:BD:42:CE:F9:59
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:03:12:80:6c:d3:bd:fd:8d:7b:61:86:b3:d0:86:99:71:b9:
         6f:23:80:43:ef:5f:a7:70:75:2a:9e:73:8f:78:83:be:7b:ab:
         8c:6c:36:2f:70:98:56:1c:ce:17:71:26:b9:2d:ff:28:d1:b1:
         80:8c:8c:d7:37:8a:8d:c0:f4:3f:a3:6b:90:d7:68:74:34:db:
         7c:bc:5a:b8:69:3c:3c:4f:8b:4a:55:33:cb:4d:fa:3f:dc:04:
         60:0a:6d:15:5b:91:85:9f:25:36:38:66:8f:b9:ac:89:55:27:
         3c:f9:ca:9c:84:ba:a0:66:09:36:8e:47:3e:db:d5:53:de:87:
         c7:2d:6b:8c:ec:41:9f:a7:ab:d0:8d:17:91:59:bb:43:0d:52:
         87:e0:01:27:89:17:b5:12:94:f9:5d:d5:2a:62:03:b5:e7:3a:
         7b:fe:a8:c3:99:83:57:ce:93:25:eb:67:27:da:83:be:86:26:
         29:dd:2e:40:c4:7b:e7:b0:b5:37:27:c0:13:1b:80:ab:5f:55:
         be:56:5e:1f:b2:69:08:07:70:6c:3d:b3:b0:ad:81:54:cd:aa:
         12:a0:1f:cc:3c:70:3d:96:db:9f:16:e9:b4:5f:c7:5b:b6:a7:
         5b:af:d7:92:80:8c:b8:b4:f8:3e:17:12:72:21:77:5d:20:35:
         6b:22:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org