Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa
File:                     3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          zH+Uf6nMS36gjYFfjQ+k/g11HrMbTmf1W3Yn0Fkm/M4=
Subject key identifier:   1B:EF:E8:D4:40:3F:88:6B:5F:3D:37:C1:1A:63:09:25:C4:AF:CA:77
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       70B88DB7AA7220953793406379555AC3C6EAF275
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa
Signing time:             Tue 05 Mar 2024 17:58:59 +0000
ROA not before:           Tue 05 Mar 2024 17:53:59 +0000
ROA not after:            Tue 04 Mar 2025 17:58:59 +0000
asID:                     262216
IP address blocks:        190.60.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b8:8d:b7:aa:72:20:95:37:93:40:63:79:55:5a:c3:c6:ea:f2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:59 2024 GMT
            Not After : Mar  4 17:58:59 2025 GMT
        Subject: CN=1BEFE8D4403F886B5F3D37C11A630925C4AFCA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:df:0a:a5:cf:aa:56:09:59:b2:8e:02:b6:
                    8f:3b:fc:2c:ff:7f:8f:da:6c:a4:e5:ff:09:d6:66:
                    d1:a8:d4:a3:57:d0:96:8d:30:0b:a2:7d:f5:c0:69:
                    98:3d:d8:23:96:87:54:96:21:76:11:a3:ae:38:62:
                    43:65:25:17:8f:81:49:1b:78:cb:7a:07:d5:f9:79:
                    99:28:af:2b:21:8a:84:b1:e8:98:66:13:a5:70:79:
                    0d:a0:04:38:16:75:6c:67:4b:a0:a8:a2:ba:03:ca:
                    cc:22:0a:ee:ff:2b:44:7e:75:4c:8c:05:a6:ef:19:
                    d6:41:b3:33:24:28:40:8c:3e:b7:f4:f8:af:12:9e:
                    a0:1d:ff:64:4b:93:58:8a:e3:0d:82:21:6a:86:ad:
                    74:12:b3:6c:45:95:30:84:06:44:6a:b0:77:4b:6e:
                    2e:5e:5b:66:97:84:39:f0:d2:82:c4:35:00:31:39:
                    54:8e:a4:da:a1:0c:1f:e2:63:c8:91:41:f8:6b:b0:
                    b8:a9:19:de:fe:64:6e:4d:2f:79:ab:a9:6e:dc:87:
                    49:89:74:b3:ee:af:6f:c7:ee:3a:50:0c:5f:cc:33:
                    62:74:9a:24:8f:f3:66:ff:8c:ff:88:66:da:49:ff:
                    dc:10:47:db:c4:fd:d8:43:64:31:10:ae:f0:cc:e0:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:E8:D4:40:3F:88:6B:5F:3D:37:C1:1A:63:09:25:C4:AF:CA:77
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e3137352e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:14:61:97:77:2a:5a:4b:d8:bb:66:17:54:2f:df:a0:7d:
         3a:ec:b3:ce:b0:99:c2:f7:94:18:61:4d:2a:5d:6c:16:6e:ee:
         9d:88:c0:01:6d:17:9f:1d:94:00:4a:2b:37:40:5c:bb:32:c3:
         22:24:12:17:82:9e:6c:02:f1:90:3c:34:17:0c:0a:cb:49:e1:
         a4:d1:29:a9:12:5b:bc:0b:ef:dc:3a:aa:fd:11:6e:ba:7a:90:
         a4:fa:eb:68:5a:16:98:b6:39:d2:e9:fe:df:30:59:23:b3:a2:
         76:68:f3:3d:ab:33:63:c6:40:99:70:c7:20:7d:cf:66:0e:e3:
         ab:67:f9:24:05:23:2e:4f:c1:42:62:b6:ff:00:68:84:27:07:
         8e:7a:3a:56:d4:34:f9:b2:0d:40:63:32:be:92:05:af:c0:97:
         6d:04:59:aa:89:29:53:e0:9e:45:65:4a:fd:05:e6:14:5e:32:
         6d:c7:2c:e4:4d:79:01:0e:77:97:52:43:a8:2d:a0:f5:0e:86:
         14:5e:80:9a:ae:bd:c6:04:e6:02:a9:26:33:8e:22:84:61:eb:
         60:36:a6:da:6d:1b:d7:4b:f4:f4:57:cf:25:3b:c1:cd:17:b6:
         bb:09:0d:b6:da:df:97:b2:52:ed:b7:90:be:d5:85:d9:a0:68:
         f1:57:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:39:58 2024 by rpki-client on console-ams.rpki-client.org