Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3132382e302f31382d3234203d3e203232373234.roa
File:                     3139302e35372e3132382e302f31382d3234203d3e203232373234.roa (raw, json)
Hash identifier:          evh7qgS4SAt1Uxb5v6Bkx3EEUFOwnpqU89U0UF8z9kI=
Subject key identifier:   B3:8F:20:E7:50:7A:F5:43:50:B3:D3:C3:74:61:38:E9:7F:67:AD:A8
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       7553E551F0DFEF0148F817B48C412A0AAD4B15B3
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3132382e302f31382d3234203d3e203232373234.roa
Signing time:             Tue 05 Mar 2024 18:16:33 +0000
ROA not before:           Tue 05 Mar 2024 18:11:33 +0000
ROA not after:            Tue 04 Mar 2025 18:16:33 +0000
asID:                     22724
IP address blocks:        190.57.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:e5:51:f0:df:ef:01:48:f8:17:b4:8c:41:2a:0a:ad:4b:15:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Mar  5 18:11:33 2024 GMT
            Not After : Mar  4 18:16:33 2025 GMT
        Subject: CN=B38F20E7507AF54350B3D3C3746138E97F67ADA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:f8:31:45:e8:e5:af:4e:fb:69:0e:ee:67:
                    88:12:47:07:55:0f:2c:38:ba:9f:68:91:49:ee:ff:
                    e9:39:c6:76:22:7c:3f:1a:71:14:ee:45:42:af:f2:
                    bd:fe:e3:21:e7:80:12:a7:70:13:3d:74:ce:73:ee:
                    12:f7:e4:3d:53:cd:7a:72:29:e3:71:cf:05:64:64:
                    cf:9c:f2:fe:ca:8f:60:12:81:b2:9c:8d:6a:4f:22:
                    68:2f:ae:f1:1c:6c:0e:32:7e:42:7c:2c:e8:35:78:
                    a4:93:8c:c1:1c:01:08:98:60:dc:b2:ed:37:ff:2e:
                    06:a6:a5:e0:3d:89:3b:db:3c:43:82:2a:db:f6:d7:
                    6a:5b:bb:b2:37:2f:bb:20:73:7f:c2:53:50:99:b1:
                    c5:56:44:bd:5b:ba:d7:1c:c4:b2:a4:e6:4e:3c:bf:
                    d5:2b:41:bb:0f:43:85:80:4c:15:8f:66:b0:51:88:
                    0f:21:59:a0:a0:5e:6c:7b:27:f8:83:ff:0f:02:0a:
                    e6:6f:c3:83:18:5f:05:62:00:a2:d1:ab:37:61:e7:
                    be:0a:cf:8d:ad:3b:9e:6c:c0:41:87:b2:90:74:3c:
                    5a:4e:4b:90:af:35:a2:c7:af:17:63:0c:3f:66:cb:
                    71:2b:db:23:30:7f:1a:91:d4:55:e8:65:15:c6:30:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8F:20:E7:50:7A:F5:43:50:B3:D3:C3:74:61:38:E9:7F:67:AD:A8
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3132382e302f31382d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:6b:ee:ca:3d:16:8a:a4:d2:e5:55:9d:30:bd:c7:14:25:
         3f:49:7d:73:74:ba:01:18:7d:40:ae:c4:eb:37:74:09:40:b7:
         c5:4e:15:06:04:8a:4a:67:d0:ad:70:87:b2:9a:48:6a:0c:9c:
         2c:1b:7d:43:84:00:1d:f5:b1:3d:5f:35:df:72:c9:a5:60:4a:
         c2:4a:32:ea:35:65:9c:ec:43:f9:a3:8a:74:1a:3d:b3:79:87:
         42:61:88:e1:32:63:9e:be:36:a6:34:45:f3:9e:da:23:e6:32:
         0f:8f:b5:44:4c:3e:f4:81:98:93:40:4d:f7:3e:72:2e:75:02:
         8f:79:97:81:73:5e:ba:2f:cb:57:5e:86:6c:a8:e6:ae:0f:8c:
         20:5f:39:46:91:1b:e0:ce:0f:cf:15:fa:66:1b:e6:62:70:d0:
         fe:fe:41:e1:5c:fd:5f:b6:87:2e:0f:bc:df:e6:e5:1b:4e:b3:
         ab:56:b9:44:c6:29:12:98:74:b5:de:ec:e5:b8:c1:16:9e:b5:
         f5:09:de:48:6b:1b:3a:07:d3:1f:1c:67:4d:19:1b:b5:fe:e4:
         59:4d:c3:ef:70:6a:ea:de:e9:2b:ff:bb:0c:94:b2:c9:84:e9:
         78:dd:e9:80:02:85:e4:bf:45:eb:db:9c:5e:bb:34:f1:ca:09:
         89:6b:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:57 2024 by rpki-client on console-ams.rpki-client.org