Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234342e302f32342d3234203d3e203138363738.roa
File:                     3139302e302e3234342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          QpCqzIkuFNOTA55Vhaf0yJugDOvGYKL2VMQUPCE9oC4=
Subject key identifier:   10:53:3E:BB:45:D4:E9:49:3F:A7:3C:AB:38:EC:20:8D:84:54:E3:26
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       26E63959CAE6240DCFD04948B85037EA68EBDFA1
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234342e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:02:46 +0000
ROA not before:           Tue 05 Mar 2024 17:57:46 +0000
ROA not after:            Tue 04 Mar 2025 18:02:46 +0000
asID:                     18678
IP address blocks:        190.0.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:39:59:ca:e6:24:0d:cf:d0:49:48:b8:50:37:ea:68:eb:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:46 2024 GMT
            Not After : Mar  4 18:02:46 2025 GMT
        Subject: CN=10533EBB45D4E9493FA73CAB38EC208D8454E326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:cf:dc:83:d6:7f:ed:99:e2:4d:f2:47:65:
                    a7:16:c1:b4:f1:c8:53:15:63:fc:94:3f:4e:da:73:
                    a8:49:b3:3f:82:c0:9f:7a:22:73:2d:04:9a:f3:22:
                    9c:ac:94:be:0a:3b:63:6b:44:e2:ce:a3:cd:ff:69:
                    ba:27:cf:23:04:18:61:b6:f4:98:66:fd:70:a9:c4:
                    c3:c9:42:99:3d:c5:cd:29:b6:b7:7a:d5:23:2d:00:
                    4b:6e:33:48:bd:45:be:f8:95:6d:66:f2:92:2f:c0:
                    1d:95:0c:ff:e2:f4:07:8f:38:ef:66:1d:9b:0b:62:
                    03:74:10:b8:87:9e:94:99:0e:5e:29:28:54:e4:14:
                    8b:d3:ff:01:c2:81:2c:28:e4:99:ef:4b:61:81:7c:
                    3e:bf:16:7a:95:7d:3f:af:be:bb:bb:53:7f:fd:00:
                    18:4b:93:cf:36:1f:68:09:19:75:e9:f4:3c:53:95:
                    f6:a0:fe:81:dd:7a:03:bd:f9:b4:d1:1b:08:45:d3:
                    6a:f1:d0:4b:be:f0:5e:65:2e:89:42:6f:00:a3:de:
                    61:a9:7e:a8:fb:72:53:cc:0e:a4:c3:43:61:e4:ad:
                    6c:7f:91:a0:03:ea:42:45:63:9f:85:71:15:21:64:
                    2a:43:70:02:46:46:be:d0:de:be:92:eb:1f:78:b3:
                    26:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:53:3E:BB:45:D4:E9:49:3F:A7:3C:AB:38:EC:20:8D:84:54:E3:26
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e302e3234342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:56:e6:10:51:9c:ca:0b:57:e4:52:3d:46:84:64:bd:47:ea:
         11:cd:c7:96:01:cb:b1:cb:86:dd:f2:98:04:64:f2:ff:c7:fa:
         f2:b1:aa:a7:0c:65:6c:94:86:f7:81:ef:f0:2d:f2:f2:67:e6:
         72:59:c0:36:35:e4:51:e4:35:32:52:16:91:09:38:76:74:b9:
         47:1f:11:cd:84:94:a9:ed:31:24:a0:2a:74:58:7c:7b:e8:a5:
         31:aa:2c:49:2e:a0:0e:94:ce:17:26:02:0b:e8:00:28:c8:10:
         b9:56:99:a5:14:56:2e:51:6c:6f:b5:ca:5c:69:fc:cc:17:df:
         95:a0:69:f1:fc:b3:50:f2:52:f0:71:dc:e0:48:89:33:8c:26:
         42:dd:16:75:ce:7a:a4:c1:8e:8e:63:91:67:a1:3e:b6:69:8f:
         3c:5c:5b:8f:23:ea:c0:37:63:b2:94:f3:62:15:52:98:09:a8:
         a7:bd:9b:19:a9:0e:cc:f4:08:fc:d9:e0:f3:5a:bf:13:dc:72:
         e3:89:ef:67:70:1c:9d:02:23:36:a7:85:81:99:04:ed:0b:b1:
         ba:67:56:1d:32:4c:fc:c1:a1:32:c6:67:ce:e2:2d:79:a6:c7:
         44:d0:fb:dc:ca:65:d0:a9:70:01:5a:ff:85:6a:54:fb:33:87:
         a5:1b:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:31 2024 by rpki-client on console-ams.rpki-client.org