Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3139302e3133322e302e302f31342d3234203d3e2036303537.roa
File:                     3139302e3133322e302e302f31342d3234203d3e2036303537.roa (raw, json)
Hash identifier:          1aogUioTrloaVJGWDWYfdRJZcV4zVBjhxt4lv8ax08M=
Subject key identifier:   14:C5:9F:16:57:78:94:D5:E6:1C:2D:9C:6F:1B:27:43:0D:E8:61:AF
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       575F9C0FA2538CD276E2D5C8D32ED19F3CE2E949
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3139302e3133322e302e302f31342d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:03 +0000
ROA not before:           Tue 05 Mar 2024 18:15:03 +0000
ROA not after:            Tue 04 Mar 2025 18:20:03 +0000
asID:                     6057
IP address blocks:        190.132.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5f:9c:0f:a2:53:8c:d2:76:e2:d5:c8:d3:2e:d1:9f:3c:e2:e9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:03 2024 GMT
            Not After : Mar  4 18:20:03 2025 GMT
        Subject: CN=14C59F16577894D5E61C2D9C6F1B27430DE861AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:eb:1c:b5:78:16:a9:7c:0b:63:2d:bb:23:
                    4d:c7:23:64:d1:15:aa:77:8c:ae:f2:4d:fc:48:74:
                    0b:23:aa:d6:87:82:80:05:68:00:2b:1e:6d:2b:bd:
                    5b:52:a2:c1:ed:cd:fd:3f:1d:3f:2b:67:20:15:45:
                    b1:2e:eb:94:f3:59:4a:5a:43:ed:38:04:2c:da:57:
                    cb:d1:63:02:87:0c:da:0c:66:3c:90:63:24:e7:29:
                    66:fd:f7:fd:ef:31:33:e0:f4:5e:78:c0:0c:8d:f7:
                    22:38:7e:2d:f2:c9:50:62:3b:8c:3e:8c:3e:17:24:
                    67:63:21:33:8e:b6:45:e5:34:2e:d6:43:9e:d0:ff:
                    b9:9a:0d:2b:13:e5:5c:9a:fe:b7:a2:7c:f8:5d:a9:
                    01:a2:46:89:74:28:0a:95:f9:71:fa:1d:b2:38:ca:
                    03:21:d2:b6:63:e0:05:74:68:31:c3:73:d4:47:b8:
                    05:7a:6c:04:f6:da:39:e8:f3:dc:e2:93:e4:43:3b:
                    62:e8:52:93:0b:07:d9:98:d7:ed:40:5d:b3:a0:f9:
                    c0:2b:c0:85:69:83:0f:92:14:9f:03:8d:e9:62:4f:
                    c6:4a:20:f5:a7:42:2a:85:24:94:40:12:3d:db:95:
                    1d:57:7a:b3:b9:d6:8f:04:22:16:6e:3d:8e:80:34:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C5:9F:16:57:78:94:D5:E6:1C:2D:9C:6F:1B:27:43:0D:E8:61:AF
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3139302e3133322e302e302f31342d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b7:e0:24:16:29:e6:40:c8:be:63:8d:93:bb:b2:8a:90:43:aa:
         04:bd:e7:20:60:a9:e0:71:39:ff:09:2d:c6:00:a1:48:fb:3e:
         57:c8:30:67:a1:94:15:be:54:10:77:9e:45:de:b7:e1:00:69:
         d1:d2:2e:37:e6:41:c3:22:3b:a1:d7:63:9f:02:6f:d5:84:d3:
         82:e6:2b:f7:e1:90:50:30:93:db:f8:71:de:02:b1:c0:9b:2e:
         26:3a:71:20:54:cd:55:0f:e0:7a:f3:72:d3:aa:70:d7:b1:31:
         6c:8f:63:35:79:06:b8:45:08:0d:d2:02:f3:8c:bb:f2:c9:79:
         ca:42:b5:00:4f:fc:49:2d:1d:f4:74:14:26:bf:f5:48:ee:19:
         99:e8:21:19:8e:55:ed:ce:84:41:da:7c:e2:2f:f6:5c:b5:7c:
         e6:0c:fe:9b:6b:46:d3:59:66:8a:07:08:97:16:81:f8:7f:83:
         0a:c1:fc:e1:03:48:bb:0c:a3:52:0b:d7:8e:29:ce:da:5a:50:
         29:4c:18:82:00:e2:99:9f:b6:e2:f5:60:51:1f:31:2f:58:96:
         9f:be:e4:46:7b:cb:1d:15:05:48:16:ad:a7:be:e9:f3:df:2d:
         66:d2:eb:be:7d:d7:ee:98:b6:b2:07:83:2d:89:06:39:b1:85:
         7a:2d:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org