Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e3135332e302e302f31372d3234203d3e203131353632.roa
File:                     3139302e3135332e302e302f31372d3234203d3e203131353632.roa (raw, json)
Hash identifier:          6M5xcs04nhWwG+bUebvaDeuvLvTNIAxaQN7wI8iDeb8=
Subject key identifier:   FF:D6:EC:BD:BD:E7:74:B1:F7:17:3D:2B:9E:D5:8B:C5:FC:A5:AB:33
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       7BFDB8BA701529618C9BAD9CFAF871B86B06BDD1
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e3135332e302e302f31372d3234203d3e203131353632.roa
Signing time:             Tue 05 Mar 2024 17:53:27 +0000
ROA not before:           Tue 05 Mar 2024 17:48:27 +0000
ROA not after:            Tue 04 Mar 2025 17:53:27 +0000
asID:                     11562
IP address blocks:        190.153.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fd:b8:ba:70:15:29:61:8c:9b:ad:9c:fa:f8:71:b8:6b:06:bd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Mar  5 17:48:27 2024 GMT
            Not After : Mar  4 17:53:27 2025 GMT
        Subject: CN=FFD6ECBDBDE774B1F7173D2B9ED58BC5FCA5AB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:31:67:fb:30:55:3c:d3:21:e0:cb:43:8b:
                    b8:39:86:50:d4:bb:c6:1b:14:03:42:cf:36:e9:47:
                    1b:2c:f9:49:55:59:56:bb:1d:e0:c1:f5:ea:25:84:
                    13:9d:0c:36:04:15:ba:db:53:7e:01:c3:93:ea:c2:
                    1f:ce:92:f7:d0:fb:9a:eb:ff:21:5b:0a:b3:d9:5b:
                    f5:6d:56:5b:8f:74:d0:ba:2f:b5:eb:18:38:5c:f6:
                    80:3d:dc:bd:4a:ae:6a:f1:dd:08:57:fa:b4:14:07:
                    bf:99:e9:65:b2:ef:77:04:3c:29:c0:31:b9:af:4e:
                    fe:f5:61:0e:92:3a:c6:38:d8:d2:03:42:d4:97:87:
                    81:43:19:23:6c:f4:bc:5d:30:47:6f:f3:a3:82:69:
                    a3:3f:3e:14:c3:43:9f:43:67:82:dc:87:dc:c0:18:
                    17:21:55:25:5c:2e:4c:eb:cc:1b:c4:d0:e6:ab:e5:
                    f0:24:e5:80:cc:54:c1:e4:09:69:cc:14:7a:25:0f:
                    ee:eb:ce:60:cf:ba:a0:1f:f6:72:fd:a5:e5:73:39:
                    ea:f4:e8:27:c0:ba:96:33:ab:2f:22:ab:bd:a8:87:
                    b2:b6:ab:17:19:d5:05:59:88:ce:7d:b9:97:04:48:
                    92:74:52:86:d6:a7:83:30:5b:81:e0:b2:ba:30:6f:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:EC:BD:BD:E7:74:B1:F7:17:3D:2B:9E:D5:8B:C5:FC:A5:AB:33
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e3135332e302e302f31372d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:ac:04:30:68:61:12:bb:16:71:cc:e0:1a:2c:13:a9:2e:
         83:32:52:95:12:42:4a:a1:88:b0:56:ad:1c:e0:af:ea:7e:f0:
         d8:13:f8:7a:e8:87:d7:3f:12:5e:4d:d7:44:68:24:3a:93:f3:
         98:6e:a7:3a:eb:b5:b6:d4:b9:9f:e6:ef:95:a1:48:a5:e8:3f:
         5b:42:12:4c:23:10:40:d8:c2:52:3f:03:5e:07:4d:05:d0:96:
         f1:9f:09:6f:f4:cd:7b:4a:a1:1d:65:e0:c6:54:11:58:9f:6e:
         99:cc:65:52:9a:32:71:ae:a2:67:fe:ff:8a:5b:30:25:76:f2:
         6a:55:32:cd:5f:1d:fe:f0:58:d6:dc:f9:16:d8:df:f3:7c:1e:
         5b:40:54:05:0c:00:97:3b:e6:76:92:76:7b:3b:36:53:8e:25:
         f3:9c:ad:48:2b:8b:b3:1e:d7:97:b5:d2:6d:e3:e1:15:a2:58:
         49:a3:74:bb:10:f7:c1:eb:0a:3d:bc:ab:2c:14:5b:a8:6d:d6:
         9f:57:00:6a:c0:fc:9c:2c:c6:70:8b:7f:e9:22:51:81:fc:1e:
         79:a6:de:84:c7:32:93:bc:c7:90:ab:02:15:8e:49:b5:bb:fc:
         25:56:0e:09:31:6c:a5:f0:72:77:a6:91:52:1e:cc:45:51:d2:
         b0:59:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org