Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa
File:                     3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa (raw, json)
Hash identifier:          VNhMidyCLTokS0zWWrdf2jlDE7PZjO41PiK0yLIcnic=
Subject key identifier:   81:73:E9:DB:59:8C:7D:7C:8D:60:BA:9A:33:7C:6A:EF:28:01:92:0E
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       6A3E9D4CC15FB702BDDC4F9D20AD5FA58008A9A5
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa
Signing time:             Tue 05 Mar 2024 17:57:19 +0000
ROA not before:           Tue 05 Mar 2024 17:52:19 +0000
ROA not after:            Tue 04 Mar 2025 17:57:19 +0000
asID:                     272030
IP address blocks:        189.90.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3e:9d:4c:c1:5f:b7:02:bd:dc:4f:9d:20:ad:5f:a5:80:08:a9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Mar  5 17:52:19 2024 GMT
            Not After : Mar  4 17:57:19 2025 GMT
        Subject: CN=8173E9DB598C7D7C8D60BA9A337C6AEF2801920E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:cc:95:06:2f:97:2f:a0:2f:c9:f3:6b:a7:
                    b3:1a:c7:ba:19:2b:2a:07:86:3f:df:31:05:b4:80:
                    07:e6:18:16:d9:df:88:cf:d7:0c:c8:69:5e:22:b0:
                    7a:43:58:a3:cd:7d:c1:87:97:06:05:6c:98:8e:63:
                    78:bb:f2:a8:06:46:e2:d1:f7:70:62:8d:95:9c:84:
                    39:80:ea:d2:8c:c1:6e:68:d4:09:cb:8a:f1:a2:9f:
                    32:0e:87:b2:5e:f1:10:3e:b0:b6:5c:58:7c:d1:69:
                    27:a4:39:90:7c:33:38:bc:eb:1e:17:db:ea:f7:e4:
                    99:3f:f0:26:b3:21:06:b2:d3:6a:41:05:5c:7f:57:
                    6b:98:6d:23:e6:66:fc:78:0d:c4:09:78:2a:44:52:
                    82:68:50:cb:07:d3:e3:7c:f8:02:84:ae:a0:8d:59:
                    89:af:93:45:72:fe:6a:af:15:6d:bc:da:89:01:1c:
                    c4:83:fa:78:d8:0e:e6:69:f8:7e:2d:4f:45:be:d3:
                    84:c7:77:a2:03:80:79:a6:64:7b:cc:c6:8c:58:25:
                    e5:6d:48:d9:05:cc:57:f6:b5:06:63:6a:9d:6c:ca:
                    bd:7e:fb:b1:fa:b2:0d:52:87:4a:ad:3e:36:50:be:
                    ea:b4:93:d7:2e:05:ae:8d:61:cc:28:ec:00:b7:02:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:E9:DB:59:8C:7D:7C:8D:60:BA:9A:33:7C:6A:EF:28:01:92:0E
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:39:c6:0d:8a:d2:b1:91:eb:f8:3a:8e:f1:b2:8a:8b:ba:0b:
         0f:19:3b:52:f5:98:40:70:97:a4:50:48:d8:30:4a:b9:d4:5b:
         f1:c5:da:d2:7b:59:25:97:28:df:ca:48:cf:08:75:d2:b3:2e:
         79:12:e5:c8:2b:26:38:44:45:f4:1d:02:dc:e2:0d:37:20:78:
         67:7c:53:db:b8:e5:43:08:f7:f8:e2:79:ec:cc:3b:a0:c3:43:
         cd:93:05:3b:54:bc:61:d7:8e:b2:87:ef:b1:22:c9:90:2b:e6:
         47:22:a2:4b:3a:fc:d2:ad:cf:ea:56:25:90:74:6b:00:26:01:
         0f:9f:cb:a0:c1:9a:a4:a0:84:7c:13:eb:17:e2:e8:a6:47:61:
         50:de:8d:12:32:70:be:ff:c2:06:a0:54:07:d4:99:7f:83:06:
         54:ba:2b:1a:41:c0:55:57:ad:24:68:2f:14:e2:ea:34:57:33:
         b4:42:cd:71:7d:3d:a7:28:ed:3b:aa:33:9d:ed:83:ab:8b:b5:
         73:f5:de:7b:4d:01:dd:21:aa:4d:5e:d7:b6:e4:55:f5:a6:5a:
         59:5b:3b:75:c3:0c:29:6b:60:90:63:b6:75:c8:c6:04:67:1f:
         da:63:77:15:6f:28:42:aa:be:e4:02:e3:84:00:d4:d2:27:b9:
         9c:a5:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org