Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BF624C25FB19047D2F44F355E7E99BF4B691CE90524A1C22A932162FAE26E32/0/3139302e3135312e3137362e302f32302d3235203d3e203237373038.roa
File:                     3139302e3135312e3137362e302f32302d3235203d3e203237373038.roa (raw, json)
Hash identifier:          8sJLBJqbxTDhbAP5xj67LKdlNSRS2s0ubn4Q7JBtrA4=
Subject key identifier:   FE:B4:E6:61:12:F4:59:02:60:E5:54:37:EC:83:B8:CB:3A:87:80:7D
Certificate issuer:       /CN=6FC84B33B5BCE2A0E1E486645AFD823E59E6531B
Certificate serial:       78F79139F204F7CA0353DEC57BBB790BD0064F15
Authority key identifier: 6F:C8:4B:33:B5:BC:E2:A0:E1:E4:86:64:5A:FD:82:3E:59:E6:53:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FC84B33B5BCE2A0E1E486645AFD823E59E6531B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BF624C25FB19047D2F44F355E7E99BF4B691CE90524A1C22A932162FAE26E32/0/3139302e3135312e3137362e302f32302d3235203d3e203237373038.roa
Signing time:             Tue 05 Mar 2024 17:42:08 +0000
ROA not before:           Tue 05 Mar 2024 17:37:08 +0000
ROA not after:            Tue 04 Mar 2025 17:42:08 +0000
asID:                     27708
IP address blocks:        190.151.176.0/20 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BF624C25FB19047D2F44F355E7E99BF4B691CE90524A1C22A932162FAE26E32/0/6FC84B33B5BCE2A0E1E486645AFD823E59E6531B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BF624C25FB19047D2F44F355E7E99BF4B691CE90524A1C22A932162FAE26E32/0/6FC84B33B5BCE2A0E1E486645AFD823E59E6531B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FC84B33B5BCE2A0E1E486645AFD823E59E6531B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:91:39:f2:04:f7:ca:03:53:de:c5:7b:bb:79:0b:d0:06:4f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC84B33B5BCE2A0E1E486645AFD823E59E6531B
        Validity
            Not Before: Mar  5 17:37:08 2024 GMT
            Not After : Mar  4 17:42:08 2025 GMT
        Subject: CN=FEB4E66112F4590260E55437EC83B8CB3A87807D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:db:53:0a:92:79:c5:0a:d4:51:78:8f:ae:
                    94:dc:70:22:11:2b:3e:9a:b7:fc:00:69:3f:83:e0:
                    66:cd:1c:3a:7b:2b:b2:f0:28:e8:25:7c:35:f9:b5:
                    bb:b2:ea:74:65:46:0b:ae:70:d9:b9:af:a0:25:3a:
                    f1:1a:44:68:f3:90:8b:27:08:c5:7a:fd:c6:25:ef:
                    b6:3b:aa:e1:f2:ea:8e:cc:cc:cc:12:74:44:cf:44:
                    53:a3:bb:a5:69:8c:d4:f4:fb:31:9f:77:79:11:32:
                    c0:a8:5d:b3:eb:0e:55:c0:52:a3:7b:03:d9:7c:5c:
                    8f:27:69:37:26:94:17:3e:c4:af:fb:25:39:a6:8f:
                    1c:b7:09:93:e0:29:18:d5:22:7f:15:60:7e:2f:70:
                    e9:c5:72:b5:2a:a9:90:92:de:73:bb:96:69:75:45:
                    28:0c:a2:e8:cf:5a:08:9f:20:b5:4e:d0:b6:e6:a9:
                    e5:be:5a:c5:ac:1e:7c:cf:21:67:dd:0b:5c:df:11:
                    48:98:5b:17:a2:7b:8e:2e:fc:17:26:c5:72:9d:48:
                    8f:51:12:bb:ab:ba:5a:cd:10:02:b0:b3:02:38:03:
                    07:dc:70:e8:b0:c1:69:22:b0:39:2d:32:b3:0a:c8:
                    44:02:d5:4b:0b:e6:f1:90:b8:c4:86:99:1a:5e:61:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:E6:61:12:F4:59:02:60:E5:54:37:EC:83:B8:CB:3A:87:80:7D
            X509v3 Authority Key Identifier:
                keyid:6F:C8:4B:33:B5:BC:E2:A0:E1:E4:86:64:5A:FD:82:3E:59:E6:53:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BF624C25FB19047D2F44F355E7E99BF4B691CE90524A1C22A932162FAE26E32/0/6FC84B33B5BCE2A0E1E486645AFD823E59E6531B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FC84B33B5BCE2A0E1E486645AFD823E59E6531B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BF624C25FB19047D2F44F355E7E99BF4B691CE90524A1C22A932162FAE26E32/0/3139302e3135312e3137362e302f32302d3235203d3e203237373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:a4:a7:c4:94:46:cd:94:20:f3:39:02:5b:67:4e:cb:f8:
         47:2c:ce:b4:67:06:51:f3:cf:27:b6:b9:f6:fe:71:15:b5:a6:
         34:19:31:b1:aa:52:f0:17:f2:da:c4:61:ca:cb:c4:f7:78:97:
         8b:6a:82:4e:f0:f8:2a:c8:3a:3f:dd:00:05:6a:6f:fb:1b:bd:
         76:fb:36:75:b5:2d:70:c4:06:64:ab:eb:c0:b5:cb:21:43:98:
         64:30:3e:77:0b:2f:90:e3:f8:14:15:15:e1:d2:7f:f3:99:d0:
         b2:7c:a9:a6:8f:7a:87:de:e4:74:7e:47:6e:c5:1f:26:7b:6b:
         5a:58:d6:4f:e1:76:b7:22:8c:ff:46:38:72:bd:48:0f:07:ba:
         b5:9b:34:5e:48:1f:45:a6:75:ef:c2:c8:b4:9a:1b:64:7e:cd:
         77:bf:c9:11:17:19:66:f5:47:c0:91:47:d1:af:9e:25:20:35:
         17:30:c0:d0:6b:7a:a8:ba:85:2e:52:b3:7c:c1:70:c4:ce:c3:
         cc:c2:42:8d:e2:52:f5:7d:70:29:f4:ab:59:33:92:7d:8a:09:
         b0:e8:8e:f2:ae:e1:86:e1:62:5e:f9:1f:db:8a:b4:2f:df:95:
         51:6d:1c:c2:4f:51:c7:bf:9e:b1:01:7f:74:2a:a6:f2:72:27:
         6f:18:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:41 2024 by rpki-client on console-ams.rpki-client.org