Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37342e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37342e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          kFU6OXm17W17uPlyAVhzjJGhGuTLKY1YOJNodmASnj8=
Subject key identifier:   30:AF:B3:03:0A:6A:8A:2B:17:59:6E:0C:47:3C:99:DB:C6:88:82:6C
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       11B41E70FCD53171D9B2E048D8CADB31756192ED
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37342e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:26 +0000
ROA not before:           Tue 05 Mar 2024 17:39:26 +0000
ROA not after:            Tue 04 Mar 2025 17:44:26 +0000
asID:                     52328
IP address blocks:        190.211.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b4:1e:70:fc:d5:31:71:d9:b2:e0:48:d8:ca:db:31:75:61:92:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:26 2024 GMT
            Not After : Mar  4 17:44:26 2025 GMT
        Subject: CN=30AFB3030A6A8A2B17596E0C473C99DBC688826C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:f9:72:c8:72:76:3e:00:bb:6d:6a:34:fe:
                    41:f7:46:68:5b:cf:3c:d7:3d:a1:99:2b:ef:9d:59:
                    eb:d4:34:b1:37:28:45:e8:a4:4a:d8:95:d1:90:3e:
                    43:81:f5:5f:11:a7:ea:9b:56:dc:66:4b:1d:e4:ad:
                    15:aa:de:ab:77:bf:9b:93:48:f1:1e:81:ea:54:3f:
                    a1:8f:88:20:f7:41:ed:8d:8e:7c:b4:e2:50:c9:8b:
                    b8:d2:5c:e0:95:6c:52:e0:2c:57:c6:4e:be:8d:49:
                    a0:b9:e5:f4:8d:55:74:c4:75:45:35:b6:a9:05:e7:
                    f7:ef:39:9d:cc:0c:56:f7:f0:5a:4d:b5:a1:9e:2a:
                    9f:8c:83:74:d8:1f:de:67:36:c0:0c:0b:a6:37:48:
                    24:1b:93:5e:1f:a9:da:db:ee:81:f9:e9:c0:6b:a5:
                    d4:81:fc:db:89:12:cb:0d:b5:d8:95:d2:7e:47:ac:
                    55:28:38:99:0f:51:aa:3d:a3:bb:c2:00:3a:c6:70:
                    87:a9:1e:50:6c:6e:7d:fa:4e:18:79:a4:93:dc:cf:
                    cf:f0:cc:6e:4c:68:08:ab:9c:d1:e0:fb:4c:af:4c:
                    7a:cb:6b:17:ce:90:32:5b:c6:75:bc:82:06:59:10:
                    3a:86:50:72:9c:82:e9:e4:ac:54:48:e8:a2:1c:fa:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AF:B3:03:0A:6A:8A:2B:17:59:6E:0C:47:3C:99:DB:C6:88:82:6C
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37342e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:d2:71:53:6c:82:cb:0d:d9:8d:75:04:d8:9e:fd:9d:85:37:
         ba:c7:18:af:7b:82:91:5f:03:73:39:6d:0c:48:bb:53:17:44:
         eb:53:e0:fa:62:3c:e3:4f:7f:0f:b1:88:04:fc:fd:4b:08:47:
         01:9b:7e:90:0b:85:89:4e:59:0e:fd:e3:16:2f:4d:59:29:34:
         fe:33:e0:a4:fa:2b:56:13:1d:83:96:3b:cb:87:3c:f0:6e:54:
         f4:5f:82:54:6a:21:5a:34:3c:6e:35:58:26:75:62:d9:12:16:
         d0:cd:2b:7f:ee:16:9f:3d:3e:38:55:01:74:3f:43:e8:86:82:
         e8:a7:ae:3b:d5:3d:42:12:5b:90:a5:78:6d:35:fe:d6:15:f7:
         33:a9:7d:85:ee:41:e3:99:ce:d8:79:ac:b8:1b:e3:7c:f3:ad:
         47:7d:43:a9:3d:b6:e0:ec:59:05:71:e3:ef:67:82:6c:57:ac:
         a4:a8:aa:93:50:cf:60:0a:a5:65:3c:cd:f1:b4:97:3f:0b:c4:
         4a:09:ee:80:f4:86:aa:4e:4c:97:25:19:d8:d4:4c:ca:cc:3c:
         ce:b8:ca:f1:46:7c:6f:b8:d0:79:3c:01:39:b0:33:fc:67:e6:
         ea:b3:b2:03:d8:cd:8b:a3:f5:2c:94:2a:2c:c8:f8:86:16:16:
         ba:ac:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org