Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          2DrsI1MC3CICsDlXzrbk0Fau2iHZgsChEf4BmsPTyYc=
Subject key identifier:   A9:69:A4:FE:91:6B:17:72:14:FA:01:50:61:B7:01:14:A4:F6:3F:49
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       7EE7FCCACB1C984D447708241591C751EF0A8F17
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:13 +0000
ROA not before:           Tue 05 Mar 2024 18:07:13 +0000
ROA not after:            Tue 04 Mar 2025 18:12:13 +0000
asID:                     264688
IP address blocks:        190.107.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e7:fc:ca:cb:1c:98:4d:44:77:08:24:15:91:c7:51:ef:0a:8f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:13 2024 GMT
            Not After : Mar  4 18:12:13 2025 GMT
        Subject: CN=A969A4FE916B177214FA015061B70114A4F63F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:8a:9e:e8:79:0d:35:9d:51:0b:33:19:e9:
                    96:73:1c:06:09:6c:5e:25:3a:4e:9a:6f:8b:f6:aa:
                    d2:fa:d5:d7:ac:bc:44:f5:ee:7d:86:83:c7:8b:0d:
                    54:7d:c3:9f:56:b7:48:e4:f9:85:f0:c6:06:68:4e:
                    1a:3d:b8:55:d5:da:75:7e:fd:63:bd:4e:64:b4:32:
                    5c:45:48:83:f9:74:8d:ce:03:8a:c5:eb:fb:5f:5d:
                    81:a8:ed:1a:db:37:59:07:32:eb:d7:57:fa:02:49:
                    3b:c9:4d:03:4f:67:72:e4:27:4d:cd:54:ea:74:e1:
                    12:bb:a5:75:f4:05:0b:2a:fc:28:d0:55:b7:66:c4:
                    5b:ba:53:58:17:3f:e9:b1:de:b4:c6:83:06:86:87:
                    b8:44:22:f8:9d:f4:f6:56:bc:a6:ec:e7:01:57:fc:
                    5a:32:c8:8a:62:6b:91:c2:a7:3c:d3:5c:fc:ae:65:
                    16:2e:27:7b:47:09:1a:65:8b:4c:bd:85:d0:f5:b4:
                    44:7b:57:62:42:6b:6e:c4:2a:01:b4:3f:48:9b:eb:
                    87:68:71:cc:47:56:64:be:e5:ea:57:98:6c:0f:3a:
                    74:91:c0:89:c5:17:4e:e2:f0:2a:ab:ea:80:5a:71:
                    e8:cb:d8:97:c4:a9:4a:76:20:d4:a7:06:d7:12:cb:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:A4:FE:91:6B:17:72:14:FA:01:50:61:B7:01:14:A4:F6:3F:49
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:07:65:47:2b:77:95:ff:75:22:e5:97:09:7a:10:c5:80:
         a6:1c:81:15:bb:4b:b1:25:0b:c0:48:20:e1:88:91:de:11:9b:
         02:1a:35:20:62:3f:8b:fb:8d:4b:5b:79:9d:36:b5:4e:92:2c:
         9c:f9:74:a3:2e:3e:66:35:f7:e5:62:41:39:69:16:11:e9:cf:
         01:fa:2c:6c:ce:43:09:66:69:c1:29:be:27:f0:4a:62:3c:88:
         f7:57:19:48:4a:ed:db:be:b3:56:85:c5:3e:dc:31:eb:d4:55:
         21:b5:d2:26:04:72:94:6d:2d:cd:a1:cb:a5:80:d8:bc:66:83:
         45:7e:49:fc:78:51:a3:ec:2a:c5:84:c5:23:e8:9f:71:97:f8:
         c3:aa:eb:51:e4:3d:9f:4b:a4:07:df:76:be:07:39:6b:30:27:
         52:36:c8:8f:4d:0f:52:70:6e:1c:fb:8b:f7:d4:0a:42:33:07:
         b4:78:d1:13:c6:91:92:8f:db:b8:81:d4:08:b5:29:35:8c:f2:
         20:ba:2a:28:85:2a:98:6c:c7:8a:a0:9f:6f:e0:51:88:d2:75:
         23:13:c1:da:d8:2c:78:12:63:e2:4a:5a:df:5b:84:3d:c1:67:
         8d:4d:c7:e2:4c:c8:5b:a3:74:43:7a:db:41:a4:b4:f1:48:ff:
         b1:bd:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org