Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/3139302e38332e37322e302f32322d3234203d3e20323731383233.roa
File:                     3139302e38332e37322e302f32322d3234203d3e20323731383233.roa (raw, json)
Hash identifier:          g0wgNZp5J8m13wTGxhIK2f2p74JyTmOABTAKdB1pgc8=
Subject key identifier:   C8:71:58:27:C7:F4:2A:BC:3E:B0:F3:08:97:8A:B3:7B:80:0E:7B:1E
Certificate issuer:       /CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25
Certificate serial:       0623D1BCA93D2270FB3D4C6B733703C413E6F17C
Authority key identifier: 9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/3139302e38332e37322e302f32322d3234203d3e20323731383233.roa
Signing time:             Tue 05 Mar 2024 18:22:10 +0000
ROA not before:           Tue 05 Mar 2024 18:17:10 +0000
ROA not after:            Tue 04 Mar 2025 18:22:10 +0000
asID:                     271823
IP address blocks:        190.83.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:23:d1:bc:a9:3d:22:70:fb:3d:4c:6b:73:37:03:c4:13:e6:f1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25
        Validity
            Not Before: Mar  5 18:17:10 2024 GMT
            Not After : Mar  4 18:22:10 2025 GMT
        Subject: CN=C8715827C7F42ABC3EB0F308978AB37B800E7B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:27:d7:1e:ad:3a:14:f4:b2:ac:0f:0b:4c:
                    ad:17:36:40:9a:23:2e:53:d6:7f:45:01:4f:13:72:
                    c9:aa:d3:bd:10:d0:86:0c:1c:e0:c0:5e:34:b1:10:
                    f4:0a:63:70:ad:67:df:20:cd:e9:21:29:59:6e:c8:
                    cc:b5:63:a4:36:37:06:ab:4a:47:94:8a:8c:1d:1f:
                    bd:8c:1e:a7:17:85:d9:19:f5:b8:de:c8:88:8e:6c:
                    7d:75:5b:ca:c6:a9:9d:3c:da:05:fd:57:a0:cb:c3:
                    da:d9:bf:de:cc:60:31:92:51:51:ee:f8:f6:ca:ef:
                    c5:d3:66:f1:94:e4:63:91:f1:4e:8a:64:24:a9:28:
                    e6:f4:e8:6a:36:31:0b:17:41:2f:cb:d3:12:cc:1c:
                    d1:aa:5a:c8:5c:8e:4f:d6:bd:aa:e7:0b:fe:2e:79:
                    03:f6:24:33:c4:95:ed:6d:69:10:b5:0c:53:9e:56:
                    b7:fe:0e:0b:c1:4c:07:56:c4:1f:c5:6b:f1:22:c6:
                    47:e1:7e:d6:f2:14:6d:02:b0:55:2a:e4:56:36:31:
                    e7:7c:02:14:84:e8:28:67:f0:5e:3b:78:d7:48:88:
                    42:28:b1:73:52:53:4e:0f:97:e9:8d:81:0d:77:e8:
                    a1:9c:e0:81:1b:00:27:00:20:1f:d2:d5:5e:5d:c3:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:71:58:27:C7:F4:2A:BC:3E:B0:F3:08:97:8A:B3:7B:80:0E:7B:1E
            X509v3 Authority Key Identifier:
                keyid:9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/3139302e38332e37322e302f32322d3234203d3e20323731383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:97:20:33:85:2e:ae:a4:84:66:0b:85:67:de:a8:03:d2:cb:
         99:a4:6a:dc:1e:9f:25:4f:c0:54:89:1e:de:89:8f:01:09:1d:
         fc:31:5f:81:4f:78:47:92:28:0e:53:28:19:65:34:ed:b7:7a:
         8a:bb:be:a1:07:3d:01:22:eb:8b:8d:8c:2d:ff:89:d4:6d:96:
         dd:a5:b2:63:c4:f9:fa:a1:c1:63:54:a2:55:2e:b1:4e:77:d4:
         88:3f:54:19:df:df:53:eb:4e:54:4c:42:63:97:fb:a9:ee:51:
         95:74:c5:56:95:50:ac:ed:9f:36:69:f0:c5:75:6d:5b:24:c5:
         5a:c8:b8:09:d8:d7:7c:03:0a:aa:27:17:87:4d:db:d1:f8:b0:
         d9:d0:ca:00:1d:52:0a:ad:32:1f:90:95:68:7d:c1:82:2c:1e:
         90:e4:01:a9:04:82:e0:45:fd:c9:6c:21:3b:1f:8c:10:96:b9:
         6a:89:fd:f9:60:18:0e:24:6b:4b:d7:7a:c4:00:48:f8:2a:a5:
         50:ec:ee:cf:d7:92:9f:9f:93:61:31:a6:b0:8d:9e:e2:41:21:
         7b:08:b3:0c:9f:80:1c:ad:6e:f3:ca:de:be:e0:fa:4b:b4:34:
         00:6d:a4:49:d7:a4:bb:52:b8:81:22:4c:46:18:1b:c6:b2:ec:
         34:84:de:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org