Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139393035.roa
File:                     3139302e3138372e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          6ulscbCO0X+3ySBm2q5qfCME3SC0nSuLtpll7WGSNz0=
Subject key identifier:   2A:4C:8B:C7:90:CD:9D:B0:8F:CB:91:10:00:81:51:3B:D7:4B:96:4F
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       16269488B229091889F2095DCA8F1D559F596785
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 18:20:15 +0000
ROA not before:           Tue 05 Mar 2024 18:15:15 +0000
ROA not after:            Tue 04 Mar 2025 18:20:15 +0000
asID:                     19905
IP address blocks:        190.187.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:26:94:88:b2:29:09:18:89:f2:09:5d:ca:8f:1d:55:9f:59:67:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Mar  5 18:15:15 2024 GMT
            Not After : Mar  4 18:20:15 2025 GMT
        Subject: CN=2A4C8BC790CD9DB08FCB91100081513BD74B964F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:08:a5:7d:9f:04:b9:92:cf:50:9b:b9:ef:
                    a4:83:c6:14:d7:17:73:25:f6:f1:83:d4:33:dc:1b:
                    c7:71:f1:91:06:1d:29:24:f1:0f:30:5e:6d:03:30:
                    f4:58:79:0a:42:db:21:25:b6:a9:01:46:03:44:ba:
                    2a:63:43:d1:b0:80:90:ce:bc:84:92:c4:1a:26:c7:
                    19:7d:cc:d3:55:b4:a0:59:5c:0a:f5:19:03:d6:ec:
                    4a:62:65:f8:48:f7:03:b8:72:1d:6d:f2:d5:70:05:
                    2d:a4:89:83:26:ca:ae:a3:b5:eb:7f:68:3b:05:b4:
                    78:9c:19:99:48:e8:41:8a:cd:a5:2f:e3:3c:a7:f7:
                    b9:c5:3e:98:2d:dc:da:7c:81:21:b9:ec:3d:10:71:
                    d7:5b:34:b7:ef:1a:81:5a:e7:97:99:d9:91:a6:36:
                    dd:89:27:4b:da:c8:6d:ce:33:e2:e3:5a:ff:f5:a2:
                    93:dd:80:a7:3f:1a:df:0a:57:7c:b7:24:a3:d1:ef:
                    d0:9d:e4:69:6b:e2:65:04:bd:f2:0e:50:69:3d:25:
                    10:88:69:00:6f:2e:0a:44:72:20:f7:95:cb:ea:e6:
                    a3:b8:b5:31:67:3f:04:4e:57:13:e1:e4:21:2c:9a:
                    5c:b2:e0:a7:02:35:df:b1:ab:4c:49:f9:d1:13:d5:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:8B:C7:90:CD:9D:B0:8F:CB:91:10:00:81:51:3B:D7:4B:96:4F
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:41:1a:60:17:ed:8f:43:d9:42:a1:44:3f:4e:93:f4:44:
         42:54:8c:93:79:c4:d2:a3:cb:cb:7f:2e:b4:5e:2a:eb:37:06:
         62:aa:de:d3:72:db:8d:9a:c7:4b:be:32:7a:22:ea:1c:20:24:
         9a:23:ac:39:0e:f9:46:b9:a1:6b:bc:03:a4:28:c6:37:4e:38:
         e3:97:31:e0:bf:46:0c:31:7a:14:c5:f5:61:52:3a:03:09:1f:
         1d:66:d3:0e:7c:64:93:87:47:08:09:b1:4c:37:bc:f7:1f:29:
         dc:09:7a:27:89:10:da:10:64:b6:f8:7c:81:4a:0c:9b:29:44:
         92:3c:d3:bb:84:c8:4c:45:51:dd:47:e8:ef:11:a2:ed:42:c9:
         83:a4:ba:76:53:8d:f6:39:17:bc:19:38:05:89:b9:e7:c1:64:
         14:ab:98:6a:ba:58:03:04:57:35:e3:ab:d8:d7:e2:ed:d7:ca:
         be:b8:a1:b0:34:a0:57:2d:f0:01:32:9b:d3:3c:16:3f:a7:3b:
         78:21:ed:0b:b8:49:d5:58:91:f9:de:64:10:27:c6:a1:b6:93:
         ac:d9:3f:f1:da:6f:ba:48:81:17:af:88:9f:6f:d2:1a:c9:12:
         2e:22:f2:6c:18:35:22:49:8c:00:0a:cf:55:cb:cf:6a:6c:ee:
         97:e6:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org