Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32332d3234203d3e203532323730.roa
File:                     3139302e36312e3230342e302f32332d3234203d3e203532323730.roa (raw, json)
Hash identifier:          PTZDWVVl5sS3l7YTQnBpkLM+mUjUfAQ7b/Hat+jEZdM=
Subject key identifier:   9B:18:D8:2D:C0:C0:B1:94:24:09:E6:9C:C3:35:19:C8:FB:DD:B4:08
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       2C21DE4A179B73DCD79291193914534DFB493BB0
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32332d3234203d3e203532323730.roa
Signing time:             Wed 05 Jun 2024 16:30:00 +0000
ROA not before:           Wed 05 Jun 2024 16:25:00 +0000
ROA not after:            Wed 04 Jun 2025 16:30:00 +0000
asID:                     52270
IP address blocks:        190.61.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:21:de:4a:17:9b:73:dc:d7:92:91:19:39:14:53:4d:fb:49:3b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Jun  5 16:25:00 2024 GMT
            Not After : Jun  4 16:30:00 2025 GMT
        Subject: CN=9B18D82DC0C0B1942409E69CC33519C8FBDDB408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:2c:3d:22:0c:f4:97:5d:74:4b:35:9c:db:
                    16:2f:6e:d7:30:eb:d7:05:ff:ac:90:8c:a9:70:5d:
                    1e:c9:a3:28:ef:2c:51:8a:aa:6b:26:0e:40:bf:af:
                    ac:e0:db:cf:4a:c6:0d:7c:16:b2:3e:6a:e2:38:45:
                    85:64:61:ff:ac:4d:2f:e3:1d:f0:24:ab:f5:66:cf:
                    c5:9a:00:f8:86:7c:81:53:96:20:b3:28:ce:03:09:
                    72:9f:40:99:c5:12:74:34:39:d8:07:54:f8:2a:89:
                    56:46:34:c5:f4:80:f1:93:3c:20:57:37:41:6a:39:
                    ee:c2:89:c2:00:7c:28:47:5f:af:b4:61:86:21:c1:
                    d6:df:0a:76:16:8e:5c:0a:40:4a:65:44:23:d9:07:
                    ef:37:ca:3f:47:dc:bb:a6:15:47:11:8e:c4:c4:0c:
                    4b:3a:0a:34:7d:03:45:a4:36:39:47:e0:a7:42:d4:
                    19:ee:56:75:7d:d5:7f:eb:6b:9b:0b:ad:3f:b9:10:
                    b5:2d:42:6a:61:28:d8:92:74:62:fe:2d:21:92:dc:
                    b6:2d:5c:05:3f:43:4c:79:40:15:fe:bd:9a:a0:6e:
                    44:cd:75:48:b7:98:73:ff:ab:09:a3:4f:b1:4c:9b:
                    8d:d7:cb:2c:a0:0a:d6:7d:89:7c:02:ef:aa:8e:8d:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:D8:2D:C0:C0:B1:94:24:09:E6:9C:C3:35:19:C8:FB:DD:B4:08
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3230342e302f32332d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:6b:98:8f:bb:67:3f:dc:0c:d1:25:6a:8e:ad:1b:63:9a:
         c6:38:c8:ac:5c:bf:ec:df:14:0a:28:f0:04:a4:a4:0f:c1:8d:
         b6:d2:a4:d1:a2:fe:b3:b0:35:4a:23:a5:12:29:3f:0a:72:50:
         46:be:b5:45:ca:98:63:f5:8e:1a:84:d5:a1:52:91:fd:a5:3e:
         38:b6:b5:04:2b:07:be:fc:76:33:2b:ef:23:25:45:d8:73:37:
         02:dc:57:16:d9:39:1c:6c:f9:2a:90:d1:ff:fe:8d:0f:ec:89:
         ee:f2:d0:09:ac:40:c9:91:61:bc:20:21:5c:51:1a:d5:a7:ce:
         bd:f4:93:94:80:20:13:8f:2d:25:77:d7:03:0f:c6:7e:63:62:
         d6:9e:6f:28:ca:31:80:3a:61:b8:0d:29:f4:aa:8d:d8:f2:08:
         74:47:2a:92:02:72:ae:33:b5:a0:33:65:06:fd:57:4f:b4:38:
         64:54:84:66:5d:34:e2:c7:73:02:ed:ee:a0:5b:99:59:9d:32:
         f3:7d:8b:0d:e2:66:92:11:8d:49:ec:91:ca:33:0c:94:42:59:
         53:21:9c:44:bc:f0:1d:d9:a4:fd:13:cd:7b:1d:e3:7d:39:bf:
         9f:c4:19:f3:48:da:30:d8:af:02:2b:45:c5:76:35:5f:5b:60:
         00:aa:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org