Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e39372e302e302f31382d3234203d3e203237383333.roa
File:                     3139302e39372e302e302f31382d3234203d3e203237383333.roa (raw, json)
Hash identifier:          JGD9WmpA+oaIhi9LWF976jViMYESv/eBpkQGFgqiPvc=
Subject key identifier:   37:8E:7A:EC:2B:5A:84:70:32:83:D4:81:50:EC:6F:82:85:0C:16:59
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       5AE87325A07C254B123F5EBEE6D163ADB9BE6782
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e39372e302e302f31382d3234203d3e203237383333.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     27833
IP address blocks:        190.97.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e8:73:25:a0:7c:25:4b:12:3f:5e:be:e6:d1:63:ad:b9:be:67:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=378E7AEC2B5A84703283D48150EC6F82850C1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:35:18:59:46:2b:2e:e8:d7:57:b1:d2:87:
                    38:45:ef:ee:43:d0:47:2a:21:37:b3:a8:8e:6c:e2:
                    92:a8:c4:5c:66:a5:43:ec:18:4b:25:1d:fe:26:be:
                    2e:ec:be:51:5a:b0:28:5d:ee:31:25:6e:a5:8b:f0:
                    ca:37:5f:63:1e:f4:f1:02:ea:83:a4:77:33:44:9c:
                    c6:0b:2f:68:b9:66:47:f3:ba:7f:6a:7b:43:9d:53:
                    e0:a8:e2:cd:9c:1f:01:7a:bc:9a:e2:29:91:e8:69:
                    5b:1e:c6:8a:e5:45:8a:a5:a9:8e:cf:d9:6f:c8:56:
                    c7:7a:2a:63:97:62:db:cf:cd:6c:d3:26:8f:54:09:
                    6d:bd:6c:48:6b:1a:29:1f:6f:02:5d:b2:4c:8a:e5:
                    83:f0:a2:4c:06:e0:16:38:db:76:75:e1:87:bd:11:
                    0d:49:5d:57:92:28:29:8d:52:65:8f:af:56:30:9e:
                    d2:84:2e:41:fa:77:ff:79:fe:4b:1d:d6:cc:54:c8:
                    d6:37:86:4b:07:d5:23:07:36:87:4c:5a:76:b8:b9:
                    93:d3:29:c7:1b:ea:22:6a:3b:17:23:d1:e5:a2:be:
                    93:cf:62:84:61:b5:3f:9d:92:74:3d:7f:96:43:f5:
                    6d:f0:56:f6:09:6e:3f:4e:af:5b:b5:32:57:ae:32:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:7A:EC:2B:5A:84:70:32:83:D4:81:50:EC:6F:82:85:0C:16:59
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3139302e39372e302e302f31382d3234203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:33:19:7b:48:10:c6:73:25:47:a9:f9:0b:2a:6b:89:fd:26:
         3d:13:9c:3f:25:5c:d6:25:b6:d7:89:c0:e9:39:bd:60:bb:42:
         32:6d:20:d5:2c:02:67:7b:7e:88:0d:36:eb:9f:a3:a7:a8:f9:
         ab:99:71:57:4c:4c:dc:a1:83:df:38:a2:21:30:c1:2e:fc:20:
         02:96:98:a9:0e:9e:c5:c8:6a:c6:31:6c:b5:0e:b3:81:d0:f7:
         d9:fa:32:0a:4f:a5:94:94:c2:a9:ec:72:e1:29:1d:25:e1:32:
         ac:f6:5b:27:84:2e:5b:8f:b3:bf:e9:f3:78:fa:94:2e:ea:bc:
         8b:00:ec:31:78:10:bb:37:48:fa:9c:92:79:41:6e:18:bb:c4:
         3c:d0:ee:34:7d:b6:48:9e:f0:57:48:ec:00:b1:4b:5f:d7:a1:
         60:69:03:32:e0:82:35:12:9f:32:7f:ec:6c:ba:4e:51:67:fc:
         ae:a7:91:b6:6e:e4:1d:0d:b7:71:5a:d1:64:20:ed:fe:c7:24:
         1f:68:b6:26:e6:f3:2e:bf:8f:71:eb:33:d7:f8:21:ea:5c:56:
         23:e5:b0:f1:e8:8b:37:73:98:23:25:5e:b2:49:17:30:70:2d:
         6d:96:db:b4:f0:8c:59:61:ff:3d:ae:8e:f5:82:b8:e9:c3:83:
         90:4c:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org