Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3130302e302e302f31352d3234203d3e203232303437.roa
File:                     3139302e3130302e302e302f31352d3234203d3e203232303437.roa (raw, json)
Hash identifier:          1hYksLmSANmiP5GWAf3QzkmxDfGx6PGIvu1/hCMNLZ0=
Subject key identifier:   A3:0E:58:2D:0A:D6:3D:28:18:7D:0A:AC:A2:BB:23:7C:BA:BF:C6:EC
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       3CF908E015082A80C8B376D70433DA6316CEA706
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3130302e302e302f31352d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:21 +0000
ROA not before:           Tue 05 Mar 2024 18:04:21 +0000
ROA not after:            Tue 04 Mar 2025 18:09:21 +0000
asID:                     22047
IP address blocks:        190.100.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f9:08:e0:15:08:2a:80:c8:b3:76:d7:04:33:da:63:16:ce:a7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:21 2024 GMT
            Not After : Mar  4 18:09:21 2025 GMT
        Subject: CN=A30E582D0AD63D28187D0AACA2BB237CBABFC6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:76:b3:53:b2:5a:0c:9d:d1:35:79:fd:18:
                    78:61:0c:85:01:ff:77:77:30:73:ff:36:b1:ba:73:
                    1d:05:30:18:64:06:eb:2d:c5:15:d2:e7:9e:0c:65:
                    67:73:f0:c5:69:b0:6d:d4:b9:8c:be:76:2e:00:d6:
                    04:aa:d9:c9:fd:32:3e:60:33:6a:3d:a8:de:4c:16:
                    67:5a:f5:55:68:22:c8:50:19:bb:dd:29:36:e7:0d:
                    ee:44:a4:91:59:ae:69:f4:22:43:4f:f2:41:7a:dc:
                    e7:80:34:9d:80:10:3f:d8:4f:11:2c:2c:42:e9:c5:
                    2b:11:2b:cf:36:cb:9d:da:5e:ef:7b:d4:7f:2c:cc:
                    c5:3c:4b:31:b3:9b:e7:10:c8:34:73:4f:68:46:bb:
                    eb:a0:43:be:07:17:93:2b:8c:58:b1:1d:cd:02:cf:
                    ed:e1:50:4f:eb:64:9a:59:9c:00:6f:c9:cf:1e:eb:
                    ba:54:99:ad:ad:a7:f0:9d:4a:1f:4f:b3:5d:5c:33:
                    f1:1d:6c:28:53:4f:d5:d7:92:80:37:e4:bf:02:ce:
                    e1:17:db:ac:bc:ed:e5:39:0a:aa:b4:33:06:48:5e:
                    b1:0a:69:90:b5:87:1a:77:7b:24:86:62:83:eb:05:
                    e4:26:e6:00:cc:f2:1f:bf:3c:be:58:66:bb:cb:7e:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:58:2D:0A:D6:3D:28:18:7D:0A:AC:A2:BB:23:7C:BA:BF:C6:EC
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3130302e302e302f31352d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.100.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:88:45:3e:53:08:eb:b4:63:71:20:16:2a:b6:93:da:aa:
         b5:2a:9f:54:01:da:5d:6a:fd:58:b8:df:2f:73:a5:08:88:1f:
         5d:eb:06:e7:05:b3:d0:c1:4e:bd:78:ac:2d:73:45:bf:fe:d8:
         7a:c3:f2:e0:0e:1c:f5:cc:87:15:f0:61:ec:00:74:59:58:f4:
         49:ce:b8:1e:43:5a:f1:f6:93:a7:fb:ea:13:51:30:ca:f7:28:
         ee:57:a3:bf:32:47:15:e7:dd:9f:1b:6c:af:99:55:92:32:82:
         85:c0:b7:19:bc:bb:f8:c8:4e:d4:24:4b:a0:cb:3b:1c:05:37:
         5b:c5:5e:00:28:36:dc:9c:a4:c4:f7:92:60:3e:f2:6a:37:25:
         be:c4:aa:a7:b6:2e:8a:a9:38:33:c0:f5:82:35:59:80:1e:78:
         26:7c:e5:33:f3:14:1e:31:c7:fb:4a:17:ac:b0:13:d8:20:fa:
         4a:a2:8b:31:e5:c0:00:dc:ab:a4:eb:2f:22:e4:4d:47:84:f8:
         0e:69:e0:fb:de:66:12:b2:be:b4:fb:bf:12:d1:e8:c8:66:8e:
         84:db:cf:3e:e9:11:f5:1b:cf:3d:eb:e9:7c:bf:9c:3f:e4:c5:
         43:65:6f:6f:41:70:9d:cb:71:8f:4f:fb:4b:e1:68:55:57:50:
         ed:0d:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org