Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          RWRUEKKCRHEwPXbO+X1HuIp7MEpGAzNjxiTXEZmCv1k=
Subject key identifier:   CD:95:EE:7E:6A:7B:0C:2B:55:81:FE:AA:7B:6B:97:DC:7B:88:D6:58
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       4DE248C6E7FF9FF8E726AF3D8510E2B55E44C16B
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 05 Mar 2024 18:12:14 +0000
ROA not before:           Tue 05 Mar 2024 18:07:14 +0000
ROA not after:            Tue 04 Mar 2025 18:12:14 +0000
asID:                     264688
IP address blocks:        190.107.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e2:48:c6:e7:ff:9f:f8:e7:26:af:3d:85:10:e2:b5:5e:44:c1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Mar  5 18:07:14 2024 GMT
            Not After : Mar  4 18:12:14 2025 GMT
        Subject: CN=CD95EE7E6A7B0C2B5581FEAA7B6B97DC7B88D658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:c5:07:f9:10:8a:34:e6:89:e4:d9:bf:b3:
                    8d:d0:73:d2:d6:55:1e:00:a7:47:a2:df:05:93:07:
                    c1:bb:b2:a7:72:b3:bf:1d:51:8d:fa:7c:4f:0a:86:
                    9c:1a:fe:9b:63:a3:c7:cc:36:42:4b:2d:ab:69:87:
                    55:82:91:08:27:7f:bd:a0:4d:5e:36:f0:c1:ab:ac:
                    4f:4d:db:a6:86:cf:1e:50:b8:3d:33:07:6d:6d:e3:
                    1b:ad:75:09:11:be:8a:f8:ff:ca:2b:60:b1:1a:cf:
                    01:72:d4:01:75:88:2b:7b:88:38:e7:59:f8:b4:62:
                    27:06:14:96:69:ea:04:c9:1b:44:a5:dd:1f:af:fd:
                    69:38:fe:d3:69:ce:12:57:89:93:26:6c:a6:48:89:
                    56:f8:0a:1e:8e:83:85:25:cb:52:aa:43:05:26:36:
                    de:c4:c9:9b:10:30:6d:43:99:20:00:35:b5:b8:2c:
                    c1:6c:ce:fb:b3:8a:2e:0b:99:d1:a9:bf:d4:90:a6:
                    d3:af:53:e4:dc:47:3b:da:c8:2f:40:7c:fe:7d:ee:
                    a7:ac:32:8e:68:aa:48:d2:9e:f3:bc:a6:33:cf:be:
                    1f:38:35:11:24:91:89:b4:57:9a:2d:ad:9d:e4:d5:
                    94:df:5c:4a:7e:9b:c3:5d:1b:80:67:ce:2a:f3:1b:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:EE:7E:6A:7B:0C:2B:55:81:FE:AA:7B:6B:97:DC:7B:88:D6:58
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:1b:8d:cd:70:d0:20:9c:f6:d5:e5:ea:80:37:ee:80:d8:
         32:9d:e1:59:16:6d:11:99:01:00:53:69:dc:09:08:ba:24:31:
         c0:ec:4a:5e:23:31:78:be:3a:dd:47:3e:b3:93:a4:a9:45:b9:
         56:04:73:11:d9:78:12:5a:e4:9e:34:b3:d6:e1:c7:2c:13:96:
         e5:9d:6d:82:99:2d:a4:98:4b:54:98:77:62:4a:54:a2:4f:ea:
         a9:08:db:68:bf:36:b0:1a:f3:ba:2d:65:f0:4b:92:93:e0:28:
         03:7a:04:40:aa:29:f8:82:5f:00:ff:57:a8:27:7f:18:9e:63:
         b2:3d:1a:16:fc:0b:cc:a4:ea:bd:8f:70:a2:a5:51:9c:f2:91:
         c7:67:be:50:0a:07:75:59:a2:3b:c4:6f:9d:9e:03:a9:65:5e:
         dd:30:76:71:eb:9f:07:f8:80:64:f8:ab:6c:bc:06:e6:40:50:
         08:bd:63:c7:25:6c:64:c6:a8:a4:da:6a:23:d2:2b:07:97:ac:
         9a:70:28:8e:bb:9a:b6:80:57:e3:0c:84:c7:1e:4f:6a:dc:5d:
         92:b4:20:5d:4c:2e:32:97:a5:ad:5b:fe:32:b3:4d:34:4a:b6:
         12:c2:6c:e9:c2:98:3e:8d:15:24:09:10:45:97:5a:ee:23:c3:
         d5:6a:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org