Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e322e302f32342d3234203d3e20323639393334.roa
File:                     3139302e38332e322e302f32342d3234203d3e20323639393334.roa (raw, json)
Hash identifier:          cSbaiA4RoHjASGCEjdmv0H/UvQq5UtHd1RnqSVBzcxM=
Subject key identifier:   DB:5D:2E:4B:16:D9:14:DC:70:46:58:BC:C3:E3:9E:A9:8D:79:3B:BB
Certificate issuer:       /CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
Certificate serial:       0EDBCBB2AEB1307F5079490A446480CA8E83B079
Authority key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e322e302f32342d3234203d3e20323639393334.roa
Signing time:             Tue 05 Mar 2024 18:23:06 +0000
ROA not before:           Tue 05 Mar 2024 18:18:06 +0000
ROA not after:            Tue 04 Mar 2025 18:23:06 +0000
asID:                     269934
IP address blocks:        190.83.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:db:cb:b2:ae:b1:30:7f:50:79:49:0a:44:64:80:ca:8e:83:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
        Validity
            Not Before: Mar  5 18:18:06 2024 GMT
            Not After : Mar  4 18:23:06 2025 GMT
        Subject: CN=DB5D2E4B16D914DC704658BCC3E39EA98D793BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:fe:d2:a2:d1:70:43:23:d4:3f:d9:15:f4:
                    07:1a:16:87:ef:d7:27:59:41:5f:04:e6:98:5b:6c:
                    ec:eb:3c:67:06:95:22:b4:28:35:04:86:af:d1:09:
                    69:28:a8:18:ca:0c:ac:f4:c3:a7:16:8c:de:cc:cd:
                    b3:63:43:3a:03:b0:50:3e:c4:ab:0d:d8:b8:c4:41:
                    86:eb:8b:ad:5c:1f:80:d8:46:ce:14:25:cf:d8:7c:
                    93:32:4b:8b:58:c8:4e:40:10:21:d9:34:ac:d4:e1:
                    3b:44:eb:7e:bf:ab:fe:1e:6e:84:6e:22:56:24:5c:
                    2e:2f:c0:b7:30:a5:18:8b:69:84:4f:0d:c0:3b:ec:
                    d5:84:bb:fa:79:23:cf:e3:6e:19:c7:e7:ae:d2:c7:
                    78:c4:0d:86:d1:47:f2:15:74:d2:82:b1:77:75:5f:
                    a0:97:99:43:88:b9:0a:65:8a:d9:49:30:88:4f:62:
                    a2:d8:bb:21:ec:d2:65:d8:2d:ef:f2:5c:c3:0d:44:
                    db:51:25:0f:67:fe:5d:81:0f:b6:f5:44:18:68:75:
                    5e:76:2e:46:ba:06:cb:0a:8c:a7:57:8d:f4:9f:1c:
                    1c:f9:f1:a4:9e:57:80:0b:bd:98:99:b3:f4:7d:e9:
                    94:00:d0:94:ee:5e:d0:6b:c8:1e:92:8a:31:95:b3:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5D:2E:4B:16:D9:14:DC:70:46:58:BC:C3:E3:9E:A9:8D:79:3B:BB
            X509v3 Authority Key Identifier:
                keyid:3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3139302e38332e322e302f32342d3234203d3e20323639393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:7a:6a:a9:a6:7f:16:53:fb:8c:95:dc:3f:4a:d3:b6:5f:b4:
         8e:8a:97:f2:4c:fd:fd:82:df:c7:b8:b1:07:c1:4f:22:67:81:
         df:24:96:49:42:db:98:8a:8f:33:47:84:47:98:95:6e:38:52:
         09:0b:27:94:e3:23:96:59:3c:38:5e:b8:4d:a0:c0:62:89:6c:
         e9:82:6b:48:0f:63:71:d3:89:24:c5:12:49:71:f8:d1:55:dd:
         a5:99:88:5a:62:dd:a1:72:b1:35:1f:fb:7b:82:b9:dd:23:f9:
         b0:f7:3b:10:d1:86:4e:fb:ed:fa:99:c4:20:9b:45:92:80:4a:
         73:2b:e7:f6:40:08:27:bf:c1:af:2f:41:8a:79:28:74:4d:7f:
         31:a9:8b:fc:79:e8:d9:e9:5e:b4:32:e5:65:f9:a1:c7:11:40:
         c1:61:f4:db:ea:09:a1:51:30:6d:47:de:93:d5:99:9a:0b:2b:
         6a:32:ce:04:ab:19:b0:2e:73:7b:6c:5e:21:aa:ba:65:a4:a2:
         b2:7f:c5:6f:e9:89:b9:78:46:fa:fb:a5:9e:25:2f:5c:f0:6a:
         18:c6:81:18:9a:e7:91:7e:9e:0e:42:a2:ee:5e:e1:3a:9f:83:
         3e:8d:a4:16:90:52:68:0b:07:95:bf:a6:e4:9b:93:c3:84:02:
         ab:6f:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 23:38:17 2024 by rpki-client on console-ams.rpki-client.org