Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3137382e302f32332d3233203d3e203238303135.roa
File:                     3139302e352e3137382e302f32332d3233203d3e203238303135.roa (raw, json)
Hash identifier:          wn650ByDRqKxVK8k9AIwIqV2A3HhX73HbryIN9L2wxM=
Subject key identifier:   FA:E2:3C:BD:70:BB:A7:27:16:96:6A:F4:4F:C6:3C:7E:25:B9:4D:43
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       C03744C6677CCC58F28EEF2EF4EC3077C3C82C
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3137382e302f32332d3233203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:49 +0000
ROA not before:           Tue 05 Mar 2024 18:06:49 +0000
ROA not after:            Tue 04 Mar 2025 18:11:49 +0000
asID:                     28015
IP address blocks:        190.5.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c0:37:44:c6:67:7c:cc:58:f2:8e:ef:2e:f4:ec:30:77:c3:c8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:49 2024 GMT
            Not After : Mar  4 18:11:49 2025 GMT
        Subject: CN=FAE23CBD70BBA72716966AF44FC63C7E25B94D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:92:de:14:5c:05:f0:0f:ae:1e:2e:ef:43:
                    ab:4d:e0:c0:39:ce:73:f1:5f:cd:45:05:47:a3:aa:
                    ec:65:eb:8c:20:b7:3b:11:ec:13:51:b1:62:0c:e4:
                    5f:9c:59:84:1c:b4:00:59:97:9d:8a:d1:7b:6b:4c:
                    bc:5f:6f:44:f9:f0:40:bb:3b:19:2a:11:d0:16:51:
                    d5:7f:6d:80:77:52:b6:ec:a1:4c:58:d6:a1:d1:ff:
                    01:a0:d4:c5:b4:5b:fe:f2:ca:30:d1:95:db:c4:01:
                    37:7b:af:04:b2:11:62:02:b6:84:4f:4d:f4:84:3f:
                    8a:14:d2:d3:3a:22:4e:93:ac:84:e7:91:31:07:b4:
                    a8:38:b9:3a:93:c2:f3:a0:99:01:89:ae:28:1c:53:
                    f1:7b:bc:53:98:9d:ee:6c:36:14:34:04:09:f5:ca:
                    0f:e1:ae:8b:57:ac:1c:0d:2a:70:f4:9d:bc:32:2f:
                    96:a3:f5:24:4a:00:fb:b9:3c:a3:d1:58:06:bc:04:
                    10:db:b5:b2:28:42:8f:5c:86:8c:7f:f0:26:86:13:
                    ab:b6:e8:c3:b0:ee:3c:69:17:df:42:2f:85:00:dc:
                    47:3e:d2:0e:3d:3f:5b:e2:20:ed:3f:6b:9c:35:85:
                    3a:b4:14:8f:65:63:6a:08:ca:a2:81:d8:88:8d:6e:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:3C:BD:70:BB:A7:27:16:96:6A:F4:4F:C6:3C:7E:25:B9:4D:43
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e352e3137382e302f32332d3233203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:14:15:fb:eb:ba:a1:2e:46:77:f1:fd:6f:a3:50:36:30:fa:
         8e:a0:e4:65:7e:c4:08:9d:4d:a0:10:e3:a1:42:35:00:c7:15:
         4b:76:c2:27:f2:9d:39:3f:0e:49:cb:90:a2:f2:45:c1:bf:8b:
         1b:39:8c:ae:c7:83:36:7f:fd:20:bc:38:21:53:d3:72:b2:7f:
         7c:50:73:40:f2:3d:5b:6d:61:3b:8a:b8:7e:11:13:eb:90:a0:
         91:c2:89:07:4a:1b:0a:45:cf:a7:72:da:94:61:0f:35:12:80:
         99:cc:9c:32:2a:f4:27:fc:7d:e4:53:ac:17:84:ae:db:b2:bd:
         fb:f0:fe:0f:f4:33:1e:33:43:0f:e2:e4:4b:83:d0:b3:51:01:
         6e:84:1a:8f:01:63:1d:09:d0:8e:fd:c7:28:06:16:69:fc:9c:
         59:07:41:2f:6a:a1:cc:38:02:0d:74:6c:00:d3:fe:65:d5:f9:
         11:ca:bd:3d:6a:ff:08:42:d4:42:61:73:52:56:78:e0:5f:6d:
         fd:60:f9:31:2f:64:29:7b:d6:dc:5d:b0:d2:43:36:b6:5d:eb:
         9a:77:14:69:e5:cb:78:6a:fd:e9:2a:71:e3:c3:39:bf:b2:03:
         55:50:c9:d6:78:6c:fc:d9:42:34:f8:b3:72:02:5b:0f:9f:20:
         12:5d:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org