Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa
File:                     3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa (raw, json)
Hash identifier:          4GOHHvX0exbW/jW3fUXIAUB9V7u96yNaYrfaa2+Dzvc=
Subject key identifier:   E9:72:A9:18:DD:39:BD:DC:C3:5C:BD:ED:B8:55:37:6D:DB:9C:B9:64
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       051C0E18C7B4F4B89E5D9DD2439DF983DDC7A1D2
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa
Signing time:             Tue 05 Mar 2024 17:57:19 +0000
ROA not before:           Tue 05 Mar 2024 17:52:19 +0000
ROA not after:            Tue 04 Mar 2025 17:57:19 +0000
asID:                     270055
IP address blocks:        189.90.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1c:0e:18:c7:b4:f4:b8:9e:5d:9d:d2:43:9d:f9:83:dd:c7:a1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Mar  5 17:52:19 2024 GMT
            Not After : Mar  4 17:57:19 2025 GMT
        Subject: CN=E972A918DD39BDDCC35CBDEDB855376DDB9CB964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:97:48:ba:7f:2b:08:ae:37:10:c1:69:da:
                    a9:34:9c:49:5e:f9:1e:4c:6c:5d:ad:fd:2f:2e:c2:
                    eb:7b:74:ca:d7:ed:86:6e:b7:fc:99:79:2b:05:ac:
                    0d:b9:56:58:d1:c0:90:f8:bf:6f:7d:6d:2c:ed:d9:
                    b2:53:e5:31:ca:1a:96:53:3a:26:5f:61:8a:16:b6:
                    8e:57:24:06:04:21:b5:f8:cc:8c:b6:5b:98:cd:1f:
                    20:53:1d:b5:d7:84:60:1d:7a:03:2d:16:d9:e8:db:
                    c4:c8:e9:3d:43:4e:74:83:59:73:8f:53:57:bb:aa:
                    a9:c4:36:d0:06:bd:da:05:28:b0:cb:ee:ba:7a:f7:
                    25:cc:87:63:40:9a:e5:bd:ec:65:6b:91:e5:1a:c8:
                    52:04:a3:cd:a7:63:f2:44:c1:70:36:ef:02:b4:c0:
                    fb:aa:77:86:d7:48:00:f8:8e:fc:63:22:4a:e6:ec:
                    c2:cf:ef:1a:1e:d0:ac:6f:94:18:e7:f9:d1:4c:ad:
                    76:8b:b7:54:fb:82:4f:95:c6:ec:66:26:19:84:79:
                    6f:d7:ca:a0:01:a6:c4:cb:58:45:54:1e:f9:a6:cc:
                    c3:a2:e3:c2:65:c4:a1:15:56:59:3e:a4:cb:a0:39:
                    6d:5e:8d:cb:9b:c2:67:a1:d8:5f:cb:c7:9c:62:c2:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:A9:18:DD:39:BD:DC:C3:5C:BD:ED:B8:55:37:6D:DB:9C:B9:64
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:96:94:34:58:c9:f4:56:09:e8:6c:e4:03:c4:20:5a:87:66:
         7a:10:61:cc:93:c4:57:57:29:ba:c3:0c:65:2d:cc:95:58:52:
         e1:ea:e8:b9:d8:95:0b:95:a2:e0:62:04:be:3a:83:f7:d0:d7:
         40:f1:f1:3f:40:af:14:f8:ad:98:8f:a3:21:49:ed:ee:04:d8:
         5b:a4:de:e0:07:a7:33:fd:9a:3d:c0:59:91:8c:10:c3:a6:95:
         63:32:1b:4e:2d:b9:a2:a7:d4:51:a4:03:0b:5a:12:94:43:5c:
         6f:6f:be:c8:5f:e7:c3:8a:65:43:13:99:26:48:e2:e1:b9:9d:
         e5:58:e9:02:c1:97:82:fa:6e:12:69:75:fe:3f:09:96:bb:fb:
         47:6a:51:38:01:70:cc:66:41:32:01:c3:dc:7e:fc:df:cb:05:
         69:86:ca:9e:e3:0c:59:aa:f6:9b:41:94:66:32:90:eb:ef:b8:
         46:cd:07:f6:da:98:2c:11:5c:c8:eb:04:f1:8e:21:d0:97:c4:
         49:d8:48:e3:48:a0:99:a7:a3:c3:af:72:a8:f6:53:69:ef:83:
         50:7b:05:70:b1:b7:80:36:4a:b1:c6:57:67:d9:5e:67:22:60:
         eb:bc:9f:c6:a2:58:52:26:8a:eb:98:8a:cf:7d:f3:4d:40:9a:
         9c:9f:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org