Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e36342e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          iG6on37xdUrZPBSJTLLD/4E9mfN1aCpBiFnchyB5JAE=
Subject key identifier:   04:E5:E0:13:9A:65:C8:84:5A:E6:28:CE:31:C4:51:0E:A9:ED:62:73
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       4E0E346596FFFD8E6858500416856AC4550D4C19
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:21 +0000
ROA not before:           Tue 05 Mar 2024 17:39:21 +0000
ROA not after:            Tue 04 Mar 2025 17:44:21 +0000
asID:                     52328
IP address blocks:        190.211.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0e:34:65:96:ff:fd:8e:68:58:50:04:16:85:6a:c4:55:0d:4c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:21 2024 GMT
            Not After : Mar  4 17:44:21 2025 GMT
        Subject: CN=04E5E0139A65C8845AE628CE31C4510EA9ED6273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:15:5d:01:33:e3:74:6c:b9:27:0f:b0:bd:
                    33:1b:9a:0a:0c:c6:6c:fa:b1:30:84:dc:4f:85:3c:
                    d9:8a:56:ec:8f:0c:81:40:b4:0e:10:1d:92:c8:5b:
                    c9:f7:c7:d5:92:21:b3:b7:df:9a:52:85:60:08:ce:
                    6c:b9:d2:1f:dc:45:54:7b:6f:51:97:39:15:3e:ea:
                    3e:15:0e:3d:c1:c4:49:ea:b1:e1:b1:23:ca:a5:73:
                    fe:64:c9:6d:32:df:c2:8d:3a:d0:2b:1a:c9:b9:22:
                    5f:4b:b1:62:2b:8a:89:e7:3f:99:20:8e:c9:f3:f6:
                    41:74:21:6e:8d:41:36:a6:8a:fa:1c:3c:39:fb:b0:
                    b1:be:78:1e:8d:df:0f:09:5b:e9:0e:43:ef:1d:10:
                    b5:ec:3d:06:cf:a3:65:04:9c:aa:c3:eb:6b:8e:c7:
                    a4:80:df:93:63:ce:07:a6:8c:bc:dc:0d:9d:cd:1c:
                    ca:9e:39:67:ea:91:8a:ee:91:2b:d8:29:2e:32:cc:
                    c0:40:73:53:c7:f0:85:b3:e9:3e:ef:77:e1:c5:2e:
                    e3:56:50:7f:20:11:5d:11:09:85:76:cb:2e:20:49:
                    3e:34:4e:5d:f3:34:02:cc:9f:04:dd:bd:76:29:3c:
                    32:5c:78:1d:10:8e:42:78:85:15:a7:02:55:60:30:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:E0:13:9A:65:C8:84:5A:E6:28:CE:31:C4:51:0E:A9:ED:62:73
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36342e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:c4:b1:f8:bb:94:bb:50:73:84:03:02:80:24:6c:41:52:
         46:bb:6b:e5:35:b1:7b:9b:57:67:00:e9:20:24:74:dc:cc:a3:
         f7:2e:35:5e:fe:c6:97:be:7d:1d:f9:e5:b0:d7:3d:fd:f6:7c:
         74:2e:7b:3f:e2:cf:c8:6d:06:38:e9:6b:3c:ef:60:80:82:4b:
         79:8e:b3:db:43:3b:1b:fa:9b:99:55:6f:b0:7b:c0:c8:ce:70:
         04:b7:b5:c0:b5:bb:b3:2d:89:4f:d2:83:d1:1f:77:48:1c:30:
         6b:2f:f5:0a:2e:0a:a3:7b:c2:55:10:2c:58:aa:30:33:a2:e6:
         b9:bd:99:7b:0e:7f:0c:1c:7c:a6:2c:b2:a3:99:04:f6:b5:fc:
         b2:24:97:30:87:06:d3:f6:80:89:4e:bc:1d:9b:be:88:2f:da:
         57:7b:f5:8c:c6:ee:d3:4c:c2:dc:b3:8a:22:4b:1f:d0:18:80:
         5e:12:08:76:f0:54:d8:58:da:bc:f2:1f:f7:d9:27:8b:f5:ed:
         f2:8e:e9:c8:58:b9:6a:80:f4:46:c9:a4:1d:9f:a4:bf:7a:19:
         e9:5f:f1:b6:bf:a5:47:36:5d:75:99:f9:04:3e:4c:1b:6c:3d:
         89:48:69:02:9d:31:07:dc:01:36:09:b2:6f:f7:44:df:76:03:
         6a:6a:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org