Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234322e302f32342d3234203d3e203138363738.roa
File:                     3139302e302e3234322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          sITZAcuTfsPg+qYOJSCUev+A9mEIBpxtbglmbItUQ/4=
Subject key identifier:   90:75:E9:72:9E:6F:F3:07:80:40:D2:0C:51:25:7F:F1:80:AC:5F:93
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       642C32485C47A2E3EC7FA390AF7F8E2FA2D0C80D
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234322e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:02:49 +0000
ROA not before:           Tue 05 Mar 2024 17:57:49 +0000
ROA not after:            Tue 04 Mar 2025 18:02:49 +0000
asID:                     18678
IP address blocks:        190.0.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2c:32:48:5c:47:a2:e3:ec:7f:a3:90:af:7f:8e:2f:a2:d0:c8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:49 2024 GMT
            Not After : Mar  4 18:02:49 2025 GMT
        Subject: CN=9075E9729E6FF3078040D20C51257FF180AC5F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:0c:bf:98:b1:cd:3f:f0:13:a9:12:bb:eb:
                    3a:90:95:af:aa:fc:7f:1f:df:f4:ce:89:3c:6d:40:
                    8b:77:f0:8c:6d:91:97:ec:34:64:cf:4f:61:30:79:
                    68:1b:c5:44:1c:03:2f:a8:f4:39:81:78:4c:76:1a:
                    88:a9:b6:3e:5f:c2:25:77:b8:d9:60:a2:b3:45:95:
                    a3:ad:74:5e:70:b2:78:43:1e:5f:56:2f:85:9f:6d:
                    68:fa:0a:91:26:ee:6b:86:2d:aa:21:46:81:f5:a7:
                    20:71:38:78:18:63:13:c9:61:4f:00:a3:66:8a:8b:
                    90:c7:b1:f9:d3:84:56:50:cc:aa:6f:d5:43:37:4f:
                    1b:c3:00:86:56:b5:f4:81:c1:c0:cc:aa:9e:ca:3c:
                    0c:5d:11:6a:52:4e:b2:59:c0:64:87:c4:0e:3e:fd:
                    b9:d3:da:07:1d:06:c4:a9:89:a9:d1:9b:17:59:8a:
                    9a:dd:27:85:0c:e8:fd:73:d5:10:a4:c9:6b:24:9d:
                    05:ab:b0:92:81:3c:f3:71:7e:8c:bb:a6:d0:4a:59:
                    92:3e:9c:9a:47:ad:14:33:88:b3:c5:a6:8f:60:1f:
                    e9:63:7c:98:52:e9:26:b4:69:05:d0:ff:f3:cc:32:
                    8c:93:35:da:73:3c:fa:6a:5b:1c:d1:bc:6d:a2:b1:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:E9:72:9E:6F:F3:07:80:40:D2:0C:51:25:7F:F1:80:AC:5F:93
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:bb:f5:8c:77:cc:f5:97:22:23:13:f3:70:f9:bc:7b:f1:
         e2:66:4a:90:b3:4c:b4:91:8b:a3:88:80:0f:b9:e4:42:4f:9b:
         5e:2b:79:ba:62:25:c9:12:7d:59:d3:dd:2c:fd:c4:58:c1:35:
         08:cb:98:8e:e3:32:bd:c7:59:ad:c0:65:43:59:db:eb:25:98:
         34:6f:04:36:ef:3c:7e:af:d3:ec:c9:19:5b:4d:05:36:6f:6d:
         2f:91:e4:16:42:73:f7:32:6c:e4:f7:06:c9:95:ba:59:89:77:
         6f:46:ae:f2:13:86:d1:d2:fb:c1:5f:95:49:23:30:d0:41:18:
         04:73:31:44:f7:2e:84:31:89:fb:ea:e0:b0:ec:d6:4c:8e:63:
         b0:0c:60:a3:44:82:f0:c4:b7:13:02:01:b8:3c:b3:f9:e5:8e:
         5e:4d:77:c9:02:27:81:50:28:b9:c4:04:fd:26:69:91:82:bb:
         5a:3d:b4:14:3e:8e:50:72:f2:4d:d0:d5:71:f4:15:da:4f:53:
         91:47:7d:f8:25:9e:d9:75:ae:50:55:c5:93:49:8a:bd:d0:57:
         23:72:22:72:dd:dc:b8:e1:61:40:7c:8a:e8:d5:c5:f1:a0:ff:
         87:7b:05:15:d0:e0:09:3f:ee:ce:a7:52:8d:1e:91:23:ae:c2:
         d7:cf:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org