Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/3139302e3131322e3231362e302f32322d3234203d3e203532343635.roa
File:                     3139302e3131322e3231362e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          iU+O/D0f9zcABfH9mVoTfe+7P2v5KH9eboXS+NGkfss=
Subject key identifier:   09:A6:EB:88:D9:EC:36:2A:19:0F:A2:1F:AB:D2:A9:A0:23:08:8C:BE
Certificate issuer:       /CN=F11671E8AD1F6827AB7D45E8CB857EE1C49499AF
Certificate serial:       1825C4441BD6665E6850980EE9287953A1F9FAE3
Authority key identifier: F1:16:71:E8:AD:1F:68:27:AB:7D:45:E8:CB:85:7E:E1:C4:94:99:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/3139302e3131322e3231362e302f32322d3234203d3e203532343635.roa
Signing time:             Tue 05 Mar 2024 17:52:55 +0000
ROA not before:           Tue 05 Mar 2024 17:47:55 +0000
ROA not after:            Tue 04 Mar 2025 17:52:55 +0000
asID:                     52465
IP address blocks:        190.112.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:25:c4:44:1b:d6:66:5e:68:50:98:0e:e9:28:79:53:a1:f9:fa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11671E8AD1F6827AB7D45E8CB857EE1C49499AF
        Validity
            Not Before: Mar  5 17:47:55 2024 GMT
            Not After : Mar  4 17:52:55 2025 GMT
        Subject: CN=09A6EB88D9EC362A190FA21FABD2A9A023088CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:1c:e9:4e:a9:6b:0a:50:43:09:86:37:ce:
                    6e:87:80:b8:9e:23:42:81:69:e0:ac:9d:e5:c1:06:
                    16:dd:74:45:45:3d:46:32:8d:2e:df:39:c5:03:6c:
                    0e:1a:62:fd:2c:c6:6a:53:9d:f8:34:31:c1:6d:24:
                    37:ca:40:eb:db:88:09:5c:7f:3e:fa:38:3f:19:5f:
                    7a:31:b8:9e:3b:04:8c:56:98:f1:e0:a9:33:72:79:
                    ca:b7:d2:d0:22:a1:7b:ed:ae:e0:0a:c9:00:f2:9a:
                    13:53:8c:4f:72:75:95:98:21:24:56:42:eb:cc:ba:
                    40:b3:12:1a:88:ef:5c:fd:28:99:c5:97:b6:28:96:
                    47:38:4a:af:a6:0c:48:fc:af:78:63:27:67:3f:07:
                    5f:54:72:90:b5:6b:76:93:dc:f6:72:1a:85:fd:40:
                    1d:a5:82:76:ec:c9:98:04:b7:ea:2c:42:b0:14:e4:
                    2d:86:7c:7d:35:d1:96:22:16:51:29:b3:78:a0:a0:
                    f8:f5:d0:7e:ad:25:10:fa:d2:c6:b9:1c:09:20:32:
                    09:d9:16:d4:c6:ac:9f:b5:85:ea:15:1e:d5:a2:12:
                    35:c9:6a:37:26:e9:8d:7c:56:34:37:46:7e:40:e8:
                    6e:d1:39:76:c3:30:4e:1e:db:8f:be:6b:fc:1b:a4:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:EB:88:D9:EC:36:2A:19:0F:A2:1F:AB:D2:A9:A0:23:08:8C:BE
            X509v3 Authority Key Identifier:
                keyid:F1:16:71:E8:AD:1F:68:27:AB:7D:45:E8:CB:85:7E:E1:C4:94:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F11671E8AD1F6827AB7D45E8CB857EE1C49499AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8417D57E06C4F99B8AA5C98B4406E320D9C0C4A511ACC1C930FBDE8341B2DF8E/0/3139302e3131322e3231362e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:0f:04:f5:2d:57:cb:b4:d0:82:58:17:c3:15:8e:df:07:
         99:7b:40:4d:a0:b6:e4:00:97:1b:41:d4:8a:67:1f:49:ba:2d:
         e4:93:55:95:64:99:93:4c:f1:47:90:c8:b2:6a:ba:3d:b9:36:
         5e:2d:31:14:a5:70:0d:ad:ce:c2:69:fa:f4:4c:dd:d1:db:05:
         85:bf:5f:83:80:48:31:da:46:62:5a:32:59:59:0e:48:60:6c:
         ae:9c:4e:3f:09:7d:88:70:73:49:97:2e:67:0c:41:f6:5c:a6:
         12:f3:9e:ed:fb:b3:9e:72:be:7f:f2:33:05:c3:fc:3d:91:c0:
         74:01:a0:a4:73:cd:50:8e:1e:6e:27:ab:78:1e:a1:84:58:46:
         68:8f:f1:6b:e8:19:e8:23:4e:ef:28:8d:af:9a:c1:2e:05:fe:
         81:15:9f:dc:54:fb:16:9a:6a:37:41:6e:62:7c:09:f8:b7:a9:
         5f:73:86:f8:72:e5:6f:bc:be:cd:9d:09:dc:8f:10:aa:47:a8:
         c0:da:61:b7:e0:3b:20:c2:99:e3:b5:b5:69:4e:3d:e3:19:9e:
         b8:ae:08:b9:70:82:f0:25:86:ea:c2:8f:7d:1f:5f:e3:ae:7b:
         7a:33:4a:1e:48:4a:88:44:23:27:f3:91:6f:93:96:95:a4:74:
         56:cc:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org