Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3131302e302f32342d3234203d3e203532343235.roa
File:                     3139302e39322e3131302e302f32342d3234203d3e203532343235.roa (raw, json)
Hash identifier:          3PdNe/snP1Zl4586SeEVGe1xb8METZg2+CmpexcyqS0=
Subject key identifier:   CB:AC:6F:30:9D:56:5F:E3:13:E5:BB:87:CE:9E:B9:48:57:C9:E9:5B
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       27E43761594369CA2DB30DF2C0BC2BA9A61ACC06
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3131302e302f32342d3234203d3e203532343235.roa
Signing time:             Tue 05 Mar 2024 17:45:00 +0000
ROA not before:           Tue 05 Mar 2024 17:40:00 +0000
ROA not after:            Tue 04 Mar 2025 17:45:00 +0000
asID:                     52425
IP address blocks:        190.92.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:37:61:59:43:69:ca:2d:b3:0d:f2:c0:bc:2b:a9:a6:1a:cc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Mar  5 17:40:00 2024 GMT
            Not After : Mar  4 17:45:00 2025 GMT
        Subject: CN=CBAC6F309D565FE313E5BB87CE9EB94857C9E95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:71:fb:ed:cd:af:e2:30:44:c5:e5:15:da:
                    5f:3b:ac:fa:c8:e3:73:4e:0e:37:9b:dc:81:e3:d0:
                    6e:70:dd:d9:b3:62:f5:12:f1:90:24:50:9f:c1:70:
                    fb:7b:11:9c:ce:af:fd:d3:8f:1a:f6:a6:ef:60:83:
                    02:9c:95:9d:60:fa:d0:77:59:d2:02:cc:ae:97:bc:
                    31:ca:cc:59:71:50:7e:e2:4f:dc:20:38:42:9d:3b:
                    cb:69:41:73:75:c7:a6:9e:f7:4d:45:68:b3:b6:41:
                    ff:58:9b:ed:4a:52:94:18:0b:3e:1a:b6:8d:71:1e:
                    c8:af:e5:d9:05:aa:cb:8a:e1:b0:24:38:fc:e9:7a:
                    9e:40:44:f0:5d:70:db:46:93:a0:c8:c6:b7:7e:a8:
                    98:92:af:88:cc:ed:05:5d:f5:1b:e2:31:b0:92:b7:
                    9b:24:52:9f:4c:b0:08:2e:16:35:58:d8:b9:72:b9:
                    d9:b2:8e:88:e2:e2:1f:68:17:d0:cb:1b:e9:00:3e:
                    65:f3:70:ec:4b:37:d3:7f:e3:15:81:ca:55:da:1a:
                    78:7d:13:7a:3c:24:c9:9e:4a:10:42:de:d7:1e:da:
                    87:02:1c:09:dc:06:fe:94:26:c5:27:72:c9:77:e0:
                    48:54:6c:a7:be:0e:64:31:66:67:da:89:42:ba:bb:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:6F:30:9D:56:5F:E3:13:E5:BB:87:CE:9E:B9:48:57:C9:E9:5B
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3131302e302f32342d3234203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:b1:fc:22:6c:00:7f:6f:a2:8f:5d:13:27:c2:00:93:d3:
         4a:31:8e:9c:3d:90:e2:43:d5:06:43:69:ff:fd:ba:01:80:2a:
         9a:03:c0:05:1b:fb:90:7c:10:1e:a8:82:33:99:3b:64:3a:4b:
         cb:50:89:07:ad:d9:26:75:d0:f1:18:df:af:57:4a:8f:e8:4f:
         b5:34:53:8a:0c:54:c6:f6:82:aa:6e:66:4d:a0:39:da:8e:93:
         87:17:f7:29:6b:61:ad:e2:e6:fb:a4:00:c3:8c:35:ea:85:4a:
         2a:5b:b7:51:00:16:87:c0:40:c5:67:af:8b:ea:d6:0e:1d:cd:
         3f:5f:91:a8:e6:ca:4f:2b:67:b3:c8:1a:26:8a:98:9c:58:3c:
         42:d8:0c:bc:89:44:42:6e:96:da:e5:44:36:96:a7:4c:e9:e4:
         3b:3e:62:eb:ce:70:e9:1a:42:e9:75:81:e7:96:1b:c4:a5:18:
         e7:e4:ac:0b:97:21:cd:c1:af:3d:77:de:28:a3:fe:ee:06:05:
         c2:d4:db:35:5b:3f:b8:45:07:76:d7:96:c1:b9:0b:8e:4f:6e:
         f3:92:c0:d3:ca:c9:9f:4e:81:7e:c2:b3:1b:52:0d:f4:24:03:
         a9:74:95:3d:e3:d4:ba:ca:3e:fa:b3:9c:c0:94:7e:5a:cc:0c:
         be:e0:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org