Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa
File:                     3139302e3134322e302e302f31362d3234203d3e203231383236.roa (raw, json)
Hash identifier:          SqS3iq8yJST26y/eGpR4nBkPoE5k2R3kOLNEDFF0GEU=
Subject key identifier:   BC:AC:5F:69:ED:7A:F7:EB:1E:0E:E6:1B:6E:1E:F3:8A:49:67:7D:2C
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       07C7971823C70673AB96D24749A3D8D3FE18263B
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa
Signing time:             Tue 05 Mar 2024 17:49:44 +0000
ROA not before:           Tue 05 Mar 2024 17:44:44 +0000
ROA not after:            Tue 04 Mar 2025 17:49:44 +0000
asID:                     21826
IP address blocks:        190.142.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c7:97:18:23:c7:06:73:ab:96:d2:47:49:a3:d8:d3:fe:18:26:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Mar  5 17:44:44 2024 GMT
            Not After : Mar  4 17:49:44 2025 GMT
        Subject: CN=BCAC5F69ED7AF7EB1E0EE61B6E1EF38A49677D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:78:27:cb:81:79:b7:8f:66:00:08:ea:94:
                    9c:2b:d0:2e:f2:d2:a5:c3:c0:32:db:90:f9:28:a6:
                    c8:64:cd:b6:eb:ce:22:50:75:0a:fe:b8:4b:b0:1a:
                    1f:3f:dd:17:42:b3:68:7c:53:5a:ef:26:bd:f2:cc:
                    74:99:ee:57:22:38:7d:e9:2c:85:5a:92:03:53:6b:
                    f2:31:6b:60:bb:4f:d0:31:4d:fb:54:ce:ac:f5:fd:
                    36:b7:37:94:61:c8:78:87:6e:a0:ad:24:a8:b9:6e:
                    ac:a0:01:67:46:3f:a4:d4:90:fd:1e:0c:27:26:48:
                    66:a4:32:d7:39:72:f5:1b:df:64:1f:8c:ca:df:1e:
                    43:85:46:5e:4a:01:a2:42:11:fe:2d:15:32:42:46:
                    d4:60:f4:ba:d7:55:96:11:14:81:2f:63:80:42:20:
                    e0:5f:e9:07:66:a2:a2:35:8c:b2:19:10:99:b0:64:
                    48:7f:af:b5:9e:8d:e2:e0:64:0b:5a:67:fb:cf:2b:
                    aa:9a:70:64:60:3d:a2:0b:66:ae:e7:d0:c9:d2:1e:
                    54:8f:61:fd:1b:08:36:ab:84:a1:b5:2e:87:cd:10:
                    3b:e6:ce:42:a5:46:cf:25:25:8a:2c:9e:a2:52:58:
                    f0:35:3d:c1:b7:0d:be:2d:c9:20:6e:da:63:ee:bb:
                    d4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:5F:69:ED:7A:F7:EB:1E:0E:E6:1B:6E:1E:F3:8A:49:67:7D:2C
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:16:c0:5f:a4:c7:86:05:91:27:d3:c4:5e:23:6d:c6:42:d2:
         e9:63:7c:73:3c:2f:3e:29:28:93:51:46:65:3b:b9:67:36:d4:
         fa:b8:8e:23:c7:f9:5e:ab:8a:26:e0:24:29:b8:28:98:43:ca:
         73:15:22:c0:82:0d:58:99:e3:d1:74:8f:e5:aa:13:84:81:14:
         4d:90:81:11:9b:38:43:8b:41:16:fc:98:36:6d:0d:7a:f2:5d:
         cc:60:28:df:0d:a1:91:71:5b:78:b1:6f:99:52:e5:02:c8:c0:
         d2:68:33:c4:5c:6b:1c:14:8b:ef:5f:fc:8b:0b:32:91:94:5a:
         f2:f8:0c:8e:7c:8d:fb:fd:6a:b2:3b:bb:8b:93:08:3f:ec:3a:
         06:f9:b4:0e:01:11:7b:80:60:ee:de:96:d9:67:41:59:6d:45:
         54:2f:89:ff:df:ff:14:9f:ba:34:cc:f5:ce:b9:fd:9f:1a:0f:
         9f:ae:62:6c:61:67:54:a7:cc:9d:10:7c:a9:e8:14:b5:63:37:
         dd:d1:4a:d2:aa:1c:e2:ae:fd:15:7e:ac:6a:31:de:99:50:83:
         df:10:a9:93:5f:32:8e:3d:62:8d:b1:6b:c7:a7:86:01:55:8e:
         ee:0a:46:80:7f:84:06:1d:6c:50:88:90:51:ab:56:d8:7d:6a:
         a7:c0:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org