Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa
File:                     3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa (raw, json)
Hash identifier:          FwjdASUMWpV45MWVbo5iYLuyxeOlIfNcGWv0CCoiOek=
Subject key identifier:   28:FE:31:03:5A:E1:38:D8:EA:72:3B:5D:F8:D5:C5:08:D6:BB:27:D4
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       0B3D1252522FEA216EC9895461427BE8D3F3FCE3
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:53 +0000
ROA not before:           Tue 05 Mar 2024 18:17:53 +0000
ROA not after:            Tue 04 Mar 2025 18:22:53 +0000
asID:                     23201
IP address blocks:        190.128.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3d:12:52:52:2f:ea:21:6e:c9:89:54:61:42:7b:e8:d3:f3:fc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Mar  5 18:17:53 2024 GMT
            Not After : Mar  4 18:22:53 2025 GMT
        Subject: CN=28FE31035AE138D8EA723B5DF8D5C508D6BB27D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:34:03:49:83:2f:9f:57:54:f1:3b:3b:2a:
                    45:25:59:81:97:41:0f:f5:0d:67:b6:32:d8:ce:42:
                    5c:67:db:a0:b6:0d:a0:bd:86:ac:ef:e9:df:99:f9:
                    21:23:53:d7:f0:40:17:52:c6:4d:8a:c7:dc:83:22:
                    de:3d:39:d2:9f:e1:81:a4:3a:8a:ca:cb:22:39:58:
                    81:f2:f9:45:04:72:de:6b:7a:68:09:cc:f5:7f:54:
                    7a:57:9c:f7:f1:fc:c4:59:d3:35:4a:f2:c9:ca:7c:
                    3c:76:da:18:f5:9f:22:09:91:c5:4e:e9:8c:15:31:
                    25:37:54:c5:69:12:9b:86:fb:16:11:6a:d2:9d:f5:
                    0b:7a:39:e9:55:4b:99:52:f5:8c:5b:25:b1:40:8e:
                    7e:14:10:71:57:98:18:c4:0a:1c:81:89:93:be:20:
                    1e:f9:2c:a7:0e:f3:cb:ab:02:a8:f5:9f:3e:d4:31:
                    f0:51:9d:74:ad:f3:96:eb:ee:95:c1:73:38:6a:f2:
                    bf:db:9b:d6:de:6f:b4:52:43:94:a1:85:6d:e7:02:
                    49:a5:d9:ee:e9:71:04:f5:db:ee:4a:60:00:7a:4c:
                    1b:32:67:e9:81:aa:3d:65:60:43:64:21:bc:0b:ed:
                    8d:7e:ae:a8:eb:93:d9:a7:19:3e:84:7b:c1:24:ca:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:31:03:5A:E1:38:D8:EA:72:3B:5D:F8:D5:C5:08:D6:BB:27:D4
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132382e3132382e302f31372d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.128.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:54:30:f0:f8:91:bd:f8:3a:89:31:7a:55:75:79:b5:b3:
         1a:23:86:aa:4d:e9:2e:a5:ae:86:c4:61:9a:6b:63:2e:9b:ce:
         2d:12:6e:27:20:62:77:43:ce:ee:9d:e3:80:60:38:99:85:0a:
         7c:a5:54:49:80:27:cd:56:85:0f:ea:fc:07:85:37:1a:ab:6f:
         d0:f6:e4:01:3c:9f:7c:f9:e8:99:24:4f:58:3b:70:b1:40:f1:
         7f:55:8e:d5:0d:18:90:70:69:fc:e9:11:dc:c4:0e:c7:3a:88:
         46:44:0e:23:2c:ba:11:d2:4d:95:3f:b5:22:ee:aa:6b:01:0e:
         cd:74:9c:f6:bc:3e:ee:f4:3a:46:ae:22:a7:bf:7c:86:7f:8f:
         b4:c3:a9:81:07:19:85:da:c0:db:13:02:94:28:39:5c:33:6c:
         f9:3e:51:a2:34:a9:79:f8:50:94:12:f8:e7:87:c2:53:fb:cb:
         eb:4c:7d:f7:09:48:03:15:a6:d6:fa:11:ca:59:65:e2:97:bc:
         2a:27:11:2d:1a:d8:d4:ce:76:22:12:67:37:e6:d6:c6:53:e0:
         7b:46:53:f6:03:92:71:7c:b0:c0:3a:a7:02:97:4c:47:bd:d3:
         fd:b5:98:ba:b0:59:1d:4d:23:aa:72:20:38:e0:7d:f8:d1:cc:
         50:c0:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:22 2024 by rpki-client on console-fra.rpki-client.org