Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/3139302e3131352e3230342e302f32322d3232203d3e20323635383136.roa
File:                     3139302e3131352e3230342e302f32322d3232203d3e20323635383136.roa (raw, json)
Hash identifier:          wTZRZmiJRY6EzyAP7q4zcbAvseyiVrN+ERWKYKi0GAQ=
Subject key identifier:   21:CC:5F:68:75:B5:3C:BF:8E:5A:30:F9:C4:AB:8B:30:0F:AE:6D:A4
Certificate issuer:       /CN=EC27C662D29EC132420DF1988BEEFB42A76E37D2
Certificate serial:       2CA587BFCF3075C268D74DA3DF9CC0B394076947
Authority key identifier: EC:27:C6:62:D2:9E:C1:32:42:0D:F1:98:8B:EE:FB:42:A7:6E:37:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/3139302e3131352e3230342e302f32322d3232203d3e20323635383136.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     265816
IP address blocks:        190.115.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a5:87:bf:cf:30:75:c2:68:d7:4d:a3:df:9c:c0:b3:94:07:69:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC27C662D29EC132420DF1988BEEFB42A76E37D2
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=21CC5F6875B53CBF8E5A30F9C4AB8B300FAE6DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:51:e4:ab:b2:ff:e1:8d:27:e1:c9:08:df:
                    5f:a5:a2:61:e0:9b:a0:61:fd:c5:f4:9c:7c:91:ca:
                    7a:fe:fb:c7:9c:72:a1:18:30:a2:2f:41:09:f8:1c:
                    92:93:5b:e5:e7:f0:0b:b6:7b:be:80:3b:4f:97:50:
                    b6:a4:a9:dd:d6:31:03:0f:83:07:ea:db:a8:22:9e:
                    61:ea:95:03:76:ba:70:2c:37:d3:db:a0:12:15:e1:
                    36:74:fa:43:4f:66:34:74:6b:82:4f:7f:8d:62:ac:
                    9d:ea:20:61:ad:9f:6a:c3:76:e8:e1:48:5d:dd:6d:
                    b1:a1:ab:bc:01:66:6d:0a:4e:94:09:46:df:c8:cc:
                    bf:21:5d:3f:97:91:aa:c8:12:f6:10:b4:36:ca:2b:
                    20:05:f6:28:77:bd:70:a9:a2:06:7a:89:91:6d:6f:
                    f7:ce:05:d4:64:e2:e5:60:bd:ca:4a:d7:71:e4:13:
                    83:5e:57:54:7b:04:da:98:c9:be:a0:95:28:ad:5a:
                    c9:0f:d9:23:4d:2c:84:5a:37:b9:67:ba:a0:3c:c4:
                    27:9a:92:63:96:49:40:fe:1d:ca:e5:07:81:1e:44:
                    2d:6a:25:c5:61:30:40:42:63:53:2f:46:3f:f1:5e:
                    7c:6b:3c:01:9e:2c:88:0d:ac:c6:12:b8:1a:bc:df:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CC:5F:68:75:B5:3C:BF:8E:5A:30:F9:C4:AB:8B:30:0F:AE:6D:A4
            X509v3 Authority Key Identifier:
                keyid:EC:27:C6:62:D2:9E:C1:32:42:0D:F1:98:8B:EE:FB:42:A7:6E:37:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/3139302e3131352e3230342e302f32322d3232203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:c3:aa:82:3f:7c:44:3e:b2:cb:49:46:70:f9:ab:e1:5b:
         1c:2d:e0:58:c8:cd:2f:7d:cb:e5:04:14:e4:63:99:ce:d6:cc:
         92:cb:40:50:22:3c:b6:92:fd:e0:61:52:ef:b4:92:5b:f8:9c:
         0e:28:73:66:90:c4:02:32:dd:f3:34:2b:30:01:13:48:9e:71:
         80:31:ae:5f:27:a6:a6:4e:f3:b6:d8:af:d4:14:f0:a8:70:e2:
         53:7f:ab:a9:6b:9f:1d:e1:7b:83:d3:e1:1a:18:64:35:20:0f:
         e9:84:46:34:dd:dc:d6:a9:63:37:fc:54:99:91:d9:ba:8d:80:
         30:e2:6e:0f:3c:70:9e:1a:4f:1b:00:1d:4c:e2:46:0e:6d:1f:
         91:e5:18:e5:37:d2:9f:47:37:6e:d9:6a:88:06:bb:e2:a5:ac:
         70:38:88:58:8d:5c:70:02:59:97:bb:b8:f6:8d:c1:f6:71:e3:
         f8:18:1b:86:17:83:e7:87:25:f0:29:b6:24:7d:18:4f:32:40:
         8f:ee:a1:5c:4d:68:0a:56:51:93:0c:e0:6e:e0:59:88:e7:39:
         44:a5:ba:06:0c:19:24:40:63:73:87:0d:27:81:f4:ea:bb:63:
         f7:33:20:b3:79:f5:bc:5b:99:74:53:04:51:97:7b:78:d7:0e:
         bb:74:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org