Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231382e302f32332d3234203d3e203532333632.roa
File:                     3139302e3130362e3231382e302f32332d3234203d3e203532333632.roa (raw, json)
Hash identifier:          bf8j/EIHwSVTotivKpCN3R/BiflwrwSola7iXDlfHDQ=
Subject key identifier:   54:FA:40:FD:F6:AE:CF:D9:42:30:0A:CA:05:43:93:1E:4E:93:0E:EC
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       1EE92138040F8084FF105D8CD0F930AEA28B28E2
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231382e302f32332d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:00 +0000
ROA not before:           Tue 05 Mar 2024 17:51:00 +0000
ROA not after:            Tue 04 Mar 2025 17:56:00 +0000
asID:                     52362
IP address blocks:        190.106.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e9:21:38:04:0f:80:84:ff:10:5d:8c:d0:f9:30:ae:a2:8b:28:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:00 2024 GMT
            Not After : Mar  4 17:56:00 2025 GMT
        Subject: CN=54FA40FDF6AECFD942300ACA0543931E4E930EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:98:17:e1:c6:5c:0f:27:13:03:fd:4d:b0:
                    11:32:aa:e2:6d:33:23:81:d2:5b:e7:12:bf:6a:3b:
                    50:b9:47:8b:8e:bf:67:5e:94:a4:86:9e:04:d3:2a:
                    41:90:65:8a:02:11:32:54:ca:99:fa:e6:61:87:84:
                    d6:36:9f:4f:b2:52:75:16:1a:1c:94:d4:32:98:ad:
                    73:80:10:ae:2d:05:6b:a0:9d:2c:a3:eb:b5:89:b4:
                    69:14:91:4b:de:9e:c6:7f:71:ed:38:e6:14:ca:8f:
                    e5:16:82:06:a7:df:a7:22:12:fd:06:91:ec:bd:81:
                    7f:08:62:d1:42:f4:1e:99:76:17:b8:89:08:a9:b4:
                    74:9c:a1:d4:de:3c:98:8e:94:cb:65:f9:cc:7b:e7:
                    68:da:e3:61:1d:dc:c4:cc:73:9f:66:cd:be:65:98:
                    b6:03:fc:2f:44:d5:9e:ff:de:05:0f:e6:15:73:cd:
                    14:42:60:8f:21:dc:e6:86:c6:f0:06:29:7e:71:bb:
                    8e:db:7f:59:5a:f1:d9:b7:10:a7:34:53:6f:3b:ec:
                    67:73:36:fa:74:64:74:fd:e9:5f:60:e4:a2:81:f7:
                    51:fb:65:aa:ae:90:07:d2:34:97:64:e9:95:58:5b:
                    a2:d8:a7:f0:0f:a3:49:b5:e5:d3:cb:01:3a:73:74:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FA:40:FD:F6:AE:CF:D9:42:30:0A:CA:05:43:93:1E:4E:93:0E:EC
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231382e302f32332d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:26:e6:7d:f9:fa:f0:b1:81:38:4e:e2:91:d5:3a:e3:4c:
         c0:ea:5c:31:9a:5d:f4:c2:26:19:00:3c:c6:ce:43:e8:90:b4:
         34:34:b3:e3:cd:9d:2e:4b:d1:f7:dc:1a:7d:3d:c0:74:9a:92:
         59:08:20:14:45:95:94:fa:22:06:08:2d:7f:02:89:50:ae:dd:
         f2:9a:65:bd:7d:4d:96:ea:c5:db:64:95:f9:35:b1:c2:52:c6:
         eb:ed:b8:1b:7f:9d:06:de:3c:e5:94:62:80:28:08:f3:7a:d6:
         78:34:3e:8e:a4:05:89:ed:43:b6:ce:0d:65:c8:50:71:e8:1d:
         ce:10:b4:a3:c5:e2:1f:ed:3d:35:ae:41:24:3c:8d:b4:8f:1f:
         22:cc:f9:e2:1e:2f:7d:9f:b1:f2:f2:d1:07:cb:b7:75:40:ff:
         94:82:06:c7:7f:fa:f6:0b:c1:06:f4:2b:74:75:7e:83:87:63:
         2e:60:9f:ae:49:9d:c8:86:3d:29:f3:07:40:52:19:26:92:45:
         79:87:a1:7b:c0:ff:54:7e:40:a8:1a:41:77:e9:76:27:25:28:
         16:87:ce:43:94:dc:fd:5c:7a:65:04:d1:cf:5d:11:49:5d:e5:
         72:7c:86:5b:23:dc:ea:8d:d3:6e:67:89:60:ff:bf:ae:78:66:
         54:4e:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org