Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          voLDsNM29F5O8jo+v1wiuNS46vxtvK7/nADGUThM3g0=
Subject key identifier:   AB:98:5B:9F:CE:63:43:2B:9B:8E:DF:CB:DD:7F:50:16:19:9F:75:8C
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       51BB1524EECCD208A31AB7C8EB2A54565E33BE71
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     263245
IP address blocks:        190.107.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bb:15:24:ee:cc:d2:08:a3:1a:b7:c8:eb:2a:54:56:5e:33:be:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=AB985B9FCE63432B9B8EDFCBDD7F5016199F758C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:51:05:7a:94:31:0a:77:bb:91:1a:7c:b0:
                    c8:7a:d6:79:34:c0:03:83:cf:ba:bc:f0:16:ed:7b:
                    f6:81:f8:a0:62:68:3d:0e:7e:4d:7b:95:f0:48:bb:
                    e6:11:ac:32:4e:c3:76:4f:b3:da:c1:8e:df:23:a8:
                    77:af:00:c8:c3:f9:c6:21:9c:48:d6:9d:e7:86:23:
                    71:b2:83:dc:0b:e1:83:b1:c5:37:76:28:32:d4:92:
                    b0:3e:db:9a:f5:5d:73:b7:12:50:15:a4:31:d9:05:
                    8a:c5:6a:d3:d0:94:c0:03:d7:f5:c6:2d:b4:68:d7:
                    ed:9f:71:38:15:e2:7f:a5:77:94:e3:f1:ac:ce:d3:
                    38:ee:53:c0:03:d0:bf:50:9b:9a:72:bb:b5:13:b5:
                    e9:5d:bb:f4:f7:32:44:7d:4b:2a:62:ee:e1:10:d9:
                    4a:c2:db:7e:c6:a0:95:9f:22:48:7f:1b:aa:6c:71:
                    50:bf:8f:57:90:4d:19:e1:4c:c4:c0:c3:e4:78:4e:
                    12:26:58:34:ce:f3:22:af:4c:2a:7d:40:c5:88:c7:
                    ff:94:d1:b4:dd:99:8e:33:97:61:3f:d8:20:62:5e:
                    ce:15:0c:90:23:5a:ce:ef:0e:91:6b:c6:fa:22:fa:
                    5f:7a:7d:a9:25:39:ba:b5:2a:d5:17:9e:74:e7:32:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:98:5B:9F:CE:63:43:2B:9B:8E:DF:CB:DD:7F:50:16:19:9F:75:8C
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:01:1d:9b:9c:9c:1e:e5:c6:f3:28:bc:1b:b4:9f:3d:af:39:
         73:12:bd:b1:f3:b4:41:9a:e6:00:9b:84:d5:97:94:cc:1e:37:
         c8:4d:b9:a8:3e:b9:e0:17:5b:eb:b1:4e:15:10:d7:79:e1:8b:
         22:fa:57:58:0d:cd:3f:a7:d7:1d:6b:fa:dd:e6:44:70:ba:52:
         19:9e:b5:91:19:b2:d6:c5:e4:ef:21:6e:b2:63:aa:70:63:b3:
         a7:38:09:62:b9:7c:87:68:7f:16:d9:5b:cd:ad:a8:98:b0:ee:
         e3:ca:0c:e7:c8:f9:87:e6:23:97:50:6d:b6:11:69:35:3d:6b:
         7e:e2:6a:52:48:6f:d6:ba:54:7f:00:da:47:e0:d5:40:e5:de:
         38:4c:7b:22:cf:47:f0:62:a2:8d:3f:13:d5:16:97:54:7e:06:
         48:4d:68:04:d2:0c:16:2d:c1:fb:48:b1:67:97:41:38:d9:e0:
         0d:93:85:6c:ea:c5:bf:6d:db:87:8a:96:e9:99:de:4c:ca:06:
         b0:27:2b:d7:e3:bd:66:6e:3a:e4:7f:d7:9c:a2:35:df:01:18:
         14:1a:28:b3:32:a0:06:31:3a:36:f7:66:25:f4:f4:a8:c9:88:
         66:09:ce:9c:a2:44:16:f3:44:32:92:d0:61:0c:16:7f:f2:00:
         1d:57:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:44:42 2024 by rpki-client on console-ams.rpki-client.org