Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37382e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          /+9wv4aqHFOACAtW5fpUSszhFDYZkxn7qGj3m+fD6Oc=
Subject key identifier:   2F:2C:33:7E:D6:44:33:B7:22:D8:12:BF:F6:38:ED:48:78:1B:1B:4E
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       6621880FE4E8C8EB6D8C38F73291CCEA63FD193B
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:26 +0000
ROA not before:           Tue 05 Mar 2024 17:39:26 +0000
ROA not after:            Tue 04 Mar 2025 17:44:26 +0000
asID:                     52328
IP address blocks:        190.211.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:21:88:0f:e4:e8:c8:eb:6d:8c:38:f7:32:91:cc:ea:63:fd:19:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:26 2024 GMT
            Not After : Mar  4 17:44:26 2025 GMT
        Subject: CN=2F2C337ED64433B722D812BFF638ED48781B1B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:13:bc:7c:29:75:21:67:e5:21:1c:89:92:
                    de:c9:b9:06:e0:a3:db:3d:d5:13:97:46:b2:3b:ea:
                    d8:58:96:c5:e8:e9:1d:af:27:fb:da:d3:12:8e:8d:
                    c1:4c:9b:25:ad:0b:33:b3:d7:1b:21:ed:8d:5d:fd:
                    97:21:b8:66:f0:60:d7:6c:c3:d6:28:ec:34:11:de:
                    f6:26:e5:8b:84:50:e1:78:b6:eb:77:98:72:0c:53:
                    a0:15:2c:1f:4b:2e:0a:3b:0b:f0:a9:d4:12:ac:ae:
                    47:39:37:96:a7:26:77:57:14:04:cd:cb:66:48:09:
                    fb:7c:c3:33:6b:1c:e7:0c:91:41:be:49:c0:bd:d8:
                    e1:2d:bf:cf:38:2c:f5:e2:16:33:b1:21:b5:3e:8d:
                    b9:b1:37:d8:2c:23:2c:08:c7:cc:e4:6d:85:19:02:
                    38:6b:b0:8d:39:32:aa:48:ae:de:fd:f1:23:57:4b:
                    6d:ff:53:9e:e5:05:5b:84:d6:93:47:6b:25:70:10:
                    a7:dc:4e:5e:49:9b:26:e6:58:73:bc:f1:99:5e:eb:
                    49:28:3b:bb:b4:7f:08:a5:92:cb:72:f0:3c:6a:8a:
                    ad:b8:60:45:8f:9f:d3:ba:e9:a0:40:9c:04:a6:9b:
                    0b:2a:a0:46:08:45:a2:18:97:65:62:02:b2:85:35:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2C:33:7E:D6:44:33:B7:22:D8:12:BF:F6:38:ED:48:78:1B:1B:4E
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:d9:d4:e8:10:ac:42:80:50:18:fe:49:e8:13:6f:b8:98:
         62:0c:68:7d:32:5c:ee:c8:01:ed:b9:9b:c1:6f:51:6a:44:ed:
         b5:3f:83:42:80:26:12:7c:8b:c6:5d:47:28:2e:f0:0a:64:3c:
         63:cd:8e:71:b2:9f:a4:73:47:4e:bf:dd:54:72:43:67:9f:10:
         35:0d:2b:7f:3f:e4:ac:9d:09:12:c0:07:79:15:ba:65:b1:61:
         62:41:3e:33:fe:f2:e8:04:56:30:bf:a6:61:98:9f:35:0f:61:
         8e:42:c3:44:26:a8:00:cd:0a:73:a4:ed:48:84:39:3f:79:2a:
         58:57:62:12:c5:48:c8:ee:04:fb:c5:7a:ac:12:9a:b8:21:f6:
         24:0a:8b:98:f9:bd:c6:37:c8:84:90:a3:e6:92:c6:b7:18:08:
         4c:c3:20:8d:bf:ae:15:8c:a9:1e:ba:cb:d7:93:74:07:10:e7:
         83:fa:50:b8:a4:78:8d:aa:93:9a:43:36:cc:b8:22:c5:42:5f:
         7b:e9:94:8b:10:dc:f5:fe:52:f9:ec:8d:dc:47:30:d3:db:88:
         81:5f:e3:11:b8:6a:55:83:a8:eb:17:17:5a:b1:42:88:50:87:
         c0:d6:a2:b2:fc:e7:d0:95:92:8f:d1:a3:55:05:98:17:7e:83:
         1d:52:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org