Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e302e302f32302d3234203d3e203532323333.roa
File:                     3139302e38382e302e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          +nzPH8oXvVkrf3eBqmdk1u7dUsc4Ub/t1tZCbOBBFZ0=
Subject key identifier:   76:EE:B0:6A:07:F4:48:2A:BC:A0:34:58:7A:04:26:0A:5F:13:C9:F4
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       032BE065C2C6539F974727ABB67A0C965348BC6E
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e302e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:04 +0000
ROA not before:           Tue 05 Mar 2024 17:37:04 +0000
ROA not after:            Tue 04 Mar 2025 17:42:04 +0000
asID:                     52233
IP address blocks:        190.88.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2b:e0:65:c2:c6:53:9f:97:47:27:ab:b6:7a:0c:96:53:48:bc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:04 2024 GMT
            Not After : Mar  4 17:42:04 2025 GMT
        Subject: CN=76EEB06A07F4482ABCA034587A04260A5F13C9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:47:43:76:4f:c6:d6:2b:c7:48:b5:24:98:
                    b4:4a:3e:89:36:0f:4d:e3:ec:81:c8:e0:6c:1c:a0:
                    48:f8:51:5f:1e:e2:ce:6a:71:f2:27:15:cf:be:88:
                    e2:ef:23:2a:55:12:00:f3:d0:cc:6e:c5:7a:af:25:
                    ea:ad:11:37:3a:d5:fe:8e:f5:59:41:5a:1f:b3:92:
                    8f:fc:4a:b7:97:72:75:1d:a8:2f:e1:a0:53:c5:a4:
                    ab:35:8e:18:26:a1:63:5f:78:ea:af:cc:b1:62:45:
                    24:86:00:c0:59:4c:cd:e5:d2:f4:33:42:7c:86:24:
                    34:54:76:d0:d1:80:b4:e6:1c:50:d6:01:69:b7:0b:
                    e1:4c:5d:72:df:17:81:7e:be:35:97:e5:97:5c:dc:
                    ce:6c:de:e9:0d:ab:68:7d:08:f1:4b:eb:92:19:b6:
                    50:5d:75:31:39:05:ae:38:3f:5f:e3:38:a2:28:f6:
                    13:6b:8b:7a:d4:4a:2e:dd:5b:c6:53:4a:31:8e:98:
                    d5:2f:bc:fa:32:32:4c:93:13:98:4a:ee:6f:8b:cf:
                    61:d5:a3:3b:0c:97:43:24:43:7b:9c:ce:b2:71:02:
                    94:2e:cb:59:56:62:ef:0d:95:22:da:84:f1:65:02:
                    7e:11:07:61:5b:d2:15:8f:fc:db:79:68:56:88:fa:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EE:B0:6A:07:F4:48:2A:BC:A0:34:58:7A:04:26:0A:5F:13:C9:F4
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e302e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:d1:fc:de:c7:dd:85:7c:53:e7:78:0b:2f:80:09:37:d8:
         83:6d:1a:49:57:3e:1c:c1:1f:44:ce:45:e8:e5:32:ab:2a:62:
         59:82:00:d3:e5:a4:ce:7f:24:ca:d6:ce:9e:ea:60:57:7c:1e:
         57:6d:77:51:d0:7a:ac:b5:00:43:1d:fb:fa:a1:61:0e:4e:31:
         db:21:54:e1:7d:4e:a8:fc:c6:7e:54:23:13:e9:29:34:21:6c:
         f6:e6:f6:b0:c9:86:a6:ad:06:fd:20:4a:d2:f1:01:5b:a7:de:
         1f:99:08:21:cf:9b:8d:92:20:0b:22:fe:93:ba:26:82:31:0b:
         9d:68:06:7d:e6:38:30:1d:b5:4e:16:2b:90:3a:cc:e5:f1:91:
         38:f5:ae:a7:61:e3:40:97:42:82:80:c4:15:bf:f2:8c:bc:61:
         88:89:fe:88:fe:d9:29:c6:e4:23:a3:bf:28:e8:85:3a:24:a8:
         7f:a8:53:e6:f0:a8:35:83:bd:6e:f5:a6:61:d6:44:d4:a2:69:
         b4:a5:e4:ac:26:7b:82:f2:e0:23:8c:fc:9d:46:2c:86:05:f1:
         f9:0c:29:7d:6e:3f:dd:1c:fd:5c:3d:25:57:12:83:69:09:97:
         3e:55:2f:71:67:e4:56:4b:ab:53:e4:26:fd:4e:57:f1:91:23:
         3a:09:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:31 2024 by rpki-client on console-ams.rpki-client.org