Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          NTJPrpdFux00GuiacrG0ZirNHxpdng5har0Oa6ZF8Oc=
Subject key identifier:   65:4B:56:B2:EF:69:ED:16:BA:BA:36:23:35:50:6F:3A:5D:28:90:2F
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       6D87B6B4D8B0F5FD98F8DC97A6922DE8995215F3
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:58 +0000
ROA not before:           Tue 05 Mar 2024 17:35:58 +0000
ROA not after:            Tue 04 Mar 2025 17:40:58 +0000
asID:                     262171
IP address blocks:        190.93.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:87:b6:b4:d8:b0:f5:fd:98:f8:dc:97:a6:92:2d:e8:99:52:15:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:58 2024 GMT
            Not After : Mar  4 17:40:58 2025 GMT
        Subject: CN=654B56B2EF69ED16BABA362335506F3A5D28902F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:8a:61:9b:5a:3b:60:15:2e:b0:00:37:aa:
                    f4:11:f9:4d:cc:cd:3b:b7:a3:3a:9e:5b:b7:d8:53:
                    71:dd:be:67:c0:b9:2e:41:f3:82:72:8c:e5:d6:d1:
                    e0:3c:d7:3c:40:33:5a:06:70:f4:42:a9:bf:2b:88:
                    bb:5f:5d:84:dc:bc:77:07:ce:82:bf:a2:a1:bf:5e:
                    06:e5:77:87:4d:d0:61:64:c7:49:74:6b:f3:32:3d:
                    89:af:ce:cf:68:45:9f:ad:11:ea:7d:cf:b7:94:41:
                    b0:b6:6a:3e:9d:b2:6d:7f:83:67:eb:25:6c:ed:ed:
                    1d:4d:ad:20:e2:25:31:99:fc:65:ae:9b:e2:25:64:
                    b4:40:f2:e9:64:ec:82:c0:e0:d4:5f:6e:b6:91:f4:
                    fe:a1:61:a8:3b:86:ae:e9:f9:ce:ce:0c:4b:a6:77:
                    ae:51:47:ca:24:eb:96:9b:b7:8c:5e:84:ee:2a:72:
                    65:96:f7:42:1d:79:f2:fc:5d:8c:a5:f2:50:d0:f6:
                    9a:11:d7:4f:61:01:71:4e:c2:49:6d:7e:3b:29:76:
                    13:1b:f1:87:03:b8:c4:44:89:c6:4e:b7:1f:33:38:
                    e4:c0:35:76:eb:c6:82:89:02:9a:46:b5:fd:7b:ab:
                    bd:ba:f1:71:ef:e6:82:9d:1d:2d:f3:32:c2:5f:b2:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:56:B2:EF:69:ED:16:BA:BA:36:23:35:50:6F:3A:5D:28:90:2F
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:7d:d7:74:c8:3b:ce:50:0c:8f:d2:5b:19:f9:1b:3d:dd:
         d2:d9:9b:9e:3b:91:db:af:0c:90:7a:d4:07:dd:c0:6b:77:d9:
         12:ad:ef:b8:d2:8e:7c:72:93:ce:6a:9a:61:35:bc:15:18:26:
         2b:67:9e:b0:74:5c:3b:63:cd:3a:9a:af:a7:7f:b9:f0:7c:55:
         be:3a:5a:aa:5f:80:ee:66:f7:2e:bd:cb:e2:85:80:42:1e:53:
         a8:1e:9d:b7:8c:96:28:04:9a:9a:97:c5:fa:88:48:d9:1f:12:
         d7:46:71:6c:02:03:cf:30:14:12:0a:b0:07:97:38:8b:e0:ee:
         c3:c3:c3:b3:57:b7:80:cf:f2:66:a9:2f:8a:d1:01:43:7d:79:
         96:f1:42:e5:25:a3:95:7f:e0:2e:c0:9b:44:48:3f:6c:90:19:
         a1:6a:9d:f7:b0:60:1d:6a:ac:bd:cf:66:51:d7:16:0d:42:2d:
         08:aa:d1:70:b2:0d:f1:d1:56:c9:cf:2a:de:3c:8e:f8:65:fa:
         a8:bb:2c:1d:ed:6e:cd:5b:5c:f4:13:54:01:7a:a2:62:64:07:
         6d:09:f0:c2:3b:52:f8:dc:03:19:01:bf:bf:63:a9:9b:a9:89:
         85:62:bb:ff:51:88:64:48:58:9e:19:c5:de:59:14:e4:9b:fc:
         d8:26:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:05:34 2024 by rpki-client on console-fra.rpki-client.org