Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa
File:                     3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa (raw, json)
Hash identifier:          8b63YJBPNqC/MM604Et3g7aYls1jXB4Rgu1xbX2AEys=
Subject key identifier:   A3:6D:05:C7:8C:09:97:4F:27:0E:91:04:FE:FB:FA:27:6A:07:FF:A5
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       3D828E6C40345C7381A8F2868B9BD0AA59745DA8
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa
Signing time:             Thu 07 Nov 2024 19:45:01 +0000
ROA not before:           Thu 07 Nov 2024 19:40:01 +0000
ROA not after:            Thu 06 Nov 2025 19:45:01 +0000
asID:                     264688
IP address blocks:        190.196.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:82:8e:6c:40:34:5c:73:81:a8:f2:86:8b:9b:d0:aa:59:74:5d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Nov  7 19:40:01 2024 GMT
            Not After : Nov  6 19:45:01 2025 GMT
        Subject: CN=A36D05C78C09974F270E9104FEFBFA276A07FFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:4a:0c:b5:4f:19:04:9f:87:03:03:2b:1f:
                    90:b8:76:43:8b:3f:ad:0f:8d:91:f4:e4:d0:e0:f0:
                    2f:a8:50:68:79:72:ea:15:a0:99:33:bc:42:10:69:
                    06:76:a6:44:40:fd:06:be:90:61:e3:d0:80:69:e9:
                    1b:71:dd:02:03:0b:12:94:45:dd:76:df:59:d7:01:
                    37:71:e6:db:18:99:ac:c1:3b:2f:41:b0:39:e0:7f:
                    7a:66:92:41:5e:38:8b:d4:a4:ff:1b:70:17:49:5f:
                    a5:5a:21:b5:dc:84:6c:e9:12:53:ac:13:25:e0:c0:
                    4e:69:7e:a7:91:7d:58:36:b4:ec:28:f4:78:d0:7d:
                    7a:9f:aa:14:5c:85:9e:c9:0a:c0:d8:37:d5:3c:99:
                    9d:16:b9:d2:36:82:a6:60:ab:ac:39:a0:6a:a0:21:
                    bd:1b:19:7f:7f:9a:2a:b2:9a:44:39:88:fe:dd:4f:
                    d8:a2:c3:8a:b2:ce:6d:33:09:0a:92:17:d6:7a:54:
                    c4:ae:e6:d1:87:e2:0c:2d:df:fb:1d:9b:73:56:6e:
                    21:27:bf:ba:5b:46:f6:bd:18:d5:ef:cb:60:78:c9:
                    5b:1d:9e:73:1b:f3:a9:15:05:d1:6b:61:a9:0f:69:
                    67:c8:11:61:c5:c9:a3:07:5f:ef:0e:3e:c7:f8:05:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6D:05:C7:8C:09:97:4F:27:0E:91:04:FE:FB:FA:27:6A:07:FF:A5
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:91:84:e1:cf:68:3e:c5:a8:8e:69:31:a8:74:c1:92:ae:
         fe:df:b2:08:6f:4e:ae:12:3b:ca:ed:c7:89:c1:57:da:78:3f:
         fc:a9:eb:34:0d:57:04:31:e7:3f:0c:36:ae:fd:56:b7:43:15:
         0f:93:b6:2a:13:dc:2e:88:56:ff:43:3d:fc:7e:a0:f5:c5:9b:
         de:31:75:05:32:f1:de:61:22:a9:84:90:d2:d4:4a:41:ce:0a:
         84:67:3e:a9:e4:fc:ab:0a:ae:f6:48:b1:83:79:e2:29:3e:4b:
         dd:7a:b0:33:44:4f:19:c0:22:b1:61:cd:c2:a6:90:63:08:ff:
         74:3f:74:8e:e4:27:ac:a1:8a:3f:ff:ee:7b:22:b7:1b:6d:19:
         d4:dd:9d:65:06:e8:77:af:f9:c2:08:3e:07:48:f8:9f:12:6e:
         71:e1:78:4d:63:e3:79:e2:fb:9e:80:d1:86:a7:0a:72:dc:86:
         43:6d:02:ff:6d:1b:49:86:8b:a1:b7:3e:cb:09:59:df:0b:00:
         eb:f8:d9:c0:f7:bc:be:b6:88:b4:d4:b3:6b:1f:9d:05:f1:26:
         a5:d7:74:3e:46:26:10:2d:be:75:d0:07:ab:09:41:f4:7d:ee:
         f5:17:9a:70:88:73:49:be:56:57:26:f8:42:05:ac:24:96:4e:
         23:98:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org