Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36362e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e36362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          /vNoJ9LQzhGpelxNHZpFJVeLzeZJlLKLcFVBWiMKc8A=
Subject key identifier:   B6:1E:FA:8A:5D:25:28:18:46:01:E1:8F:7E:49:07:32:53:46:20:5F
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       09EEBF688D59362619148D42E1D454B4E28F771A
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:22 +0000
ROA not before:           Tue 05 Mar 2024 17:39:22 +0000
ROA not after:            Tue 04 Mar 2025 17:44:22 +0000
asID:                     52328
IP address blocks:        190.211.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ee:bf:68:8d:59:36:26:19:14:8d:42:e1:d4:54:b4:e2:8f:77:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=B61EFA8A5D2528184601E18F7E4907325346205F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:fa:b8:d0:b3:03:34:ed:2e:26:48:6e:5c:
                    4d:6a:f4:af:94:04:7d:25:20:fb:38:c9:33:59:98:
                    c1:a4:2d:ca:b3:ea:f2:06:6b:33:6c:07:76:a5:8f:
                    b9:68:f3:ed:a9:ef:70:f7:ce:37:74:2a:50:1e:39:
                    41:cc:67:86:d7:02:7e:79:69:e8:cc:65:c8:17:90:
                    2a:1e:a3:9f:aa:7d:c4:4c:47:5b:cb:c6:3d:ea:78:
                    33:09:c9:4e:53:f6:3a:38:39:55:98:3a:31:01:28:
                    2c:08:51:6e:cc:2d:00:cc:74:b9:b5:9f:c2:38:75:
                    22:fb:9b:e7:fc:df:fc:59:68:b1:af:11:26:ec:db:
                    08:3e:be:95:81:6c:68:f9:6d:3e:1c:3a:16:a3:f5:
                    59:59:2d:e6:a9:b7:05:40:3a:3e:b9:55:8e:cf:77:
                    fb:d1:c8:b5:c5:7d:24:10:2c:9c:b1:87:85:61:80:
                    91:89:10:d1:51:a7:83:0e:1a:9f:4f:74:d5:cd:22:
                    43:ce:74:86:cc:c0:53:d1:ba:3e:87:cc:c7:0f:b7:
                    b7:ec:fb:83:34:28:a2:37:2e:95:cd:83:4e:88:e8:
                    a6:12:3c:52:e6:a1:75:bc:62:c7:ae:08:6c:c3:15:
                    ac:ae:f8:e8:e6:d5:cf:52:73:46:a6:d0:02:2f:83:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:FA:8A:5D:25:28:18:46:01:E1:8F:7E:49:07:32:53:46:20:5F
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:e7:22:80:f3:62:ea:72:6a:77:b8:7b:88:3e:78:b5:c3:
         76:ab:68:33:76:7b:8b:2c:97:5a:ed:64:26:f9:96:ca:b4:09:
         99:a6:70:19:15:5d:bb:fb:4f:a0:69:93:6b:e1:c3:1a:4a:e2:
         0a:05:e3:8f:b6:08:ce:ce:9f:a1:2f:b5:fd:b7:bc:67:30:7d:
         cf:d7:6f:0b:6b:e6:38:4b:ba:98:f9:9a:c6:17:36:12:e1:15:
         dc:07:15:de:69:6c:06:9a:27:7e:bc:2e:a3:9a:aa:bd:29:80:
         86:1a:fb:2b:f2:5e:1d:c2:ca:ff:2c:e4:a5:b1:13:1c:3f:e4:
         f1:ee:68:c3:4a:3c:a0:ad:7d:3e:94:d3:19:09:b0:49:9d:e7:
         48:e4:7e:7d:4d:c8:24:03:fa:8d:9c:91:88:7e:91:88:7b:c0:
         9c:94:1e:f7:01:10:1f:8d:40:e6:d4:b4:68:cc:71:83:eb:ac:
         5b:df:7d:6e:fe:4a:d3:29:51:3f:82:cc:23:0b:72:7d:73:cb:
         7c:54:8b:be:6a:79:62:e3:56:26:31:46:ae:c7:b7:e4:53:51:
         82:2b:b9:93:99:ec:c1:8c:70:4f:63:5b:b7:e8:f0:f0:05:da:
         87:86:a3:43:1e:e5:18:bb:b7:d7:1a:5f:1a:ca:fb:16:55:96:
         ea:45:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org