Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa
File:                     3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa (raw, json)
Hash identifier:          PghW4yYaO/Trm5oArU7ZTR7wl2ov771tqfFmfCcRIRc=
Subject key identifier:   CB:54:AB:33:C1:CA:11:CE:2B:F9:92:07:50:B1:2A:0A:ED:18:B0:C4
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       432C6198273B184B3C52FDC0BEF833C20AD4A6D3
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa
Signing time:             Tue 05 Mar 2024 17:48:44 +0000
ROA not before:           Tue 05 Mar 2024 17:43:44 +0000
ROA not after:            Tue 04 Mar 2025 17:48:44 +0000
asID:                     271926
IP address blocks:        190.113.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2c:61:98:27:3b:18:4b:3c:52:fd:c0:be:f8:33:c2:0a:d4:a6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Mar  5 17:43:44 2024 GMT
            Not After : Mar  4 17:48:44 2025 GMT
        Subject: CN=CB54AB33C1CA11CE2BF9920750B12A0AED18B0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:b1:d6:d4:d6:88:0f:9a:cb:ed:f6:df:98:
                    b7:7b:2d:7d:c7:88:6e:f0:e7:a4:8c:38:ae:1c:e2:
                    49:81:0a:51:af:0a:43:7d:75:20:a3:fa:dd:e3:e4:
                    a3:8d:c8:cb:da:db:07:78:de:b8:d7:dc:38:07:ec:
                    a1:76:5b:6f:72:71:34:63:f2:15:38:cf:1b:10:3e:
                    74:e4:d8:72:0d:07:05:7e:e9:22:64:d8:a1:fd:fa:
                    bb:4a:9b:ea:b9:69:81:4d:b4:0e:3d:81:2c:d6:52:
                    e0:0c:06:cb:d2:e1:36:c0:8f:fa:db:b2:a0:da:93:
                    9f:5e:fe:83:90:94:1f:66:3a:a3:cd:9f:43:57:e0:
                    40:25:13:59:f2:fd:f7:79:09:22:e1:ba:c5:51:20:
                    0d:22:8c:9f:d4:b1:65:de:c5:a9:46:0b:db:a6:d4:
                    54:80:ca:1b:e7:19:cd:f2:99:bb:65:51:7f:df:98:
                    c8:07:4d:5e:27:ee:e9:1f:40:d1:87:16:b6:0b:f7:
                    5b:f1:73:fd:97:f7:f2:74:b3:f6:c8:07:30:ed:4b:
                    bd:73:92:c8:b5:57:64:36:a1:0a:76:cd:14:22:f3:
                    26:1d:cc:85:c4:d3:9e:49:f0:dd:b7:fe:d7:9e:92:
                    25:e4:23:66:4d:c1:0e:cc:52:17:a3:9a:18:fe:61:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:54:AB:33:C1:CA:11:CE:2B:F9:92:07:50:B1:2A:0A:ED:18:B0:C4
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:05:d8:97:09:dd:ef:2b:40:77:bd:ff:c4:bf:17:5f:14:cb:
         24:a6:86:00:9a:bf:5e:8d:bd:08:49:b9:10:1a:da:12:91:29:
         96:40:4a:24:cc:94:8e:8d:c1:35:e8:2a:17:74:fd:0b:ae:d7:
         67:da:2d:4e:80:6d:34:5c:bf:f5:90:f7:8f:6c:b6:a7:c1:1d:
         01:2d:d2:23:4a:82:61:2b:24:5c:eb:0f:3e:d6:ac:d9:71:14:
         73:84:12:f4:d4:bb:e4:1f:dd:28:cc:c0:93:e1:64:1e:22:02:
         8c:17:0f:f2:0f:18:2b:9e:56:35:68:b7:cf:d3:1a:55:6f:24:
         ac:48:fc:c2:72:db:3d:c4:98:a1:96:09:a0:26:1d:c8:6f:4a:
         22:a4:68:9f:07:c0:0c:1a:7c:ba:e5:60:f5:5f:6a:87:90:77:
         cf:b9:2a:17:ac:3e:a2:c5:48:01:5a:4d:9d:b0:aa:17:13:5d:
         96:44:f4:94:37:1b:39:34:43:fc:0b:9d:c2:07:70:a8:8c:21:
         c2:d5:8f:62:3e:c4:78:a3:2d:a6:e4:cb:2b:b9:51:8c:e6:b5:
         7b:19:9b:44:99:1c:45:46:6a:9f:86:98:cf:da:5a:cc:22:46:
         db:30:6d:2a:a2:99:f8:53:d7:7f:9d:7f:ac:54:79:96:23:a5:
         50:1a:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org