Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa
File:                     3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa (raw, json)
Hash identifier:          OHT6oz7ZEvufhDlA6HeHjSrKUUTcij0ERNiRXE8a77Y=
Subject key identifier:   5E:E3:93:33:9B:8E:B1:C7:75:E6:EC:9C:58:D0:FA:E6:2C:A1:74:4B
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       76E6F3D9A32F418704B2A006C2A39B1A404E857F
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa
Signing time:             Tue 05 Mar 2024 17:58:20 +0000
ROA not before:           Tue 05 Mar 2024 17:53:20 +0000
ROA not after:            Tue 04 Mar 2025 17:58:20 +0000
asID:                     28103
IP address blocks:        190.110.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e6:f3:d9:a3:2f:41:87:04:b2:a0:06:c2:a3:9b:1a:40:4e:85:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Mar  5 17:53:20 2024 GMT
            Not After : Mar  4 17:58:20 2025 GMT
        Subject: CN=5EE393339B8EB1C775E6EC9C58D0FAE62CA1744B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:a1:01:af:16:fd:3a:77:ed:e0:9e:2d:06:
                    38:bc:2d:b4:23:d0:d8:af:1e:f6:98:ce:14:c8:17:
                    83:5c:1d:48:46:b1:f5:b6:ca:d0:1a:dc:35:3c:19:
                    5b:67:08:2f:be:f8:e6:0f:3e:ab:ab:57:a5:80:90:
                    ee:88:e6:81:41:23:47:c7:c1:18:9e:ba:d3:ab:d1:
                    de:ac:cb:da:e9:bd:70:ad:26:c1:5d:45:2e:48:bf:
                    e4:4d:d5:2b:d4:0a:b8:05:c5:8a:21:e4:3d:9a:1e:
                    a6:62:c2:9b:58:d2:ae:9d:5b:84:7e:dd:29:94:cf:
                    40:95:18:42:bf:40:72:0f:c8:05:ab:cf:1e:91:2f:
                    8d:2f:8e:82:0f:a7:8b:10:06:55:38:09:17:c8:07:
                    0f:16:06:53:6d:6f:35:68:16:54:eb:f6:84:9b:aa:
                    bc:75:e0:12:ff:37:a4:ee:ed:63:f3:7e:f1:0e:a3:
                    d5:aa:65:fa:31:21:bb:48:8a:05:e5:1e:50:a0:f0:
                    4f:67:4a:13:b5:0b:4e:7b:04:3f:c1:c5:af:cd:d8:
                    5d:45:5c:56:a6:8c:d1:45:a8:1e:ad:a5:07:34:a6:
                    64:d1:50:d7:53:03:56:a6:f6:d3:d0:f4:5e:55:79:
                    22:cc:a4:22:ac:81:4a:dc:cd:12:92:8f:78:67:77:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:93:33:9B:8E:B1:C7:75:E6:EC:9C:58:D0:FA:E6:2C:A1:74:4B
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3232362e302f32332d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:af:da:40:dc:b3:63:86:53:3d:88:08:a5:1e:50:e5:a9:55:
         d4:da:f0:75:10:53:e6:cd:eb:94:a2:43:e7:d0:c5:29:40:3a:
         4a:26:19:7f:4b:97:14:23:22:6e:07:d3:4c:6c:df:94:86:d5:
         34:d3:43:e5:9d:65:b1:87:d2:d9:12:08:49:3b:75:dc:94:39:
         55:ac:e2:f3:3f:da:3b:a4:2f:0c:9b:ce:99:dc:e4:ab:1c:3f:
         a5:b3:7f:87:cd:f9:92:cf:b3:50:03:b5:c4:5f:f6:5a:df:84:
         4d:7c:8c:2b:88:23:13:de:a9:7f:e4:53:af:21:36:71:ea:3f:
         b1:fe:3d:7b:53:a6:1d:b6:61:17:34:de:6d:1c:cf:8f:29:74:
         18:d0:24:26:94:28:55:e9:50:cf:80:7e:d9:a7:c1:9e:54:76:
         d4:88:a1:63:62:ac:54:55:c3:10:4e:5e:46:ed:8b:49:9f:c8:
         33:51:06:07:bb:58:d8:64:78:8a:ab:d9:10:4e:56:95:e8:16:
         30:33:ed:ae:17:12:06:49:18:48:9b:50:9b:9c:dc:c2:fd:b4:
         af:70:75:ad:b9:14:f0:b8:74:b7:e7:c2:b7:34:fc:38:01:9f:
         a1:0c:40:07:5b:08:79:99:20:66:dc:df:5b:75:a1:fd:17:24:
         d1:6c:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 14:04:59 2024 by rpki-client on console-ams.rpki-client.org