Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa
File:                     3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          ZxjEyLbHJS6aurGYgc7967Fa6iT+p/dXk1Utx2ST7po=
Subject key identifier:   4A:D7:49:81:63:58:EB:1C:C9:FB:E1:7F:08:BB:31:58:9C:4A:E9:85
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       0C4262050C306D84AA29AD4ED42F7C44F4DE2F7D
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:17 +0000
ROA not before:           Tue 05 Mar 2024 17:36:17 +0000
ROA not after:            Tue 04 Mar 2025 17:41:17 +0000
asID:                     271773
IP address blocks:        190.13.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:62:05:0c:30:6d:84:aa:29:ad:4e:d4:2f:7c:44:f4:de:2f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:17 2024 GMT
            Not After : Mar  4 17:41:17 2025 GMT
        Subject: CN=4AD749816358EB1CC9FBE17F08BB31589C4AE985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:ef:ff:84:f9:6a:ce:d1:06:74:3c:1b:01:
                    39:a9:45:b4:40:7c:ec:e4:94:71:52:53:8b:ec:02:
                    31:90:00:d9:a5:66:e6:48:38:c8:f5:36:f2:90:eb:
                    3f:4e:4c:79:45:3f:19:46:ea:40:04:0c:04:7b:c4:
                    85:cd:87:63:9a:29:61:1a:23:06:ab:93:3a:55:dc:
                    9d:db:31:d1:49:7c:86:47:39:90:e4:5d:c7:8f:f0:
                    76:9a:18:2e:9b:94:76:92:6d:78:0f:ff:97:84:87:
                    50:2e:b3:45:dc:a3:4f:96:d7:99:91:73:88:fb:11:
                    43:33:82:76:b3:8b:7f:84:9d:6a:a3:d2:41:f6:1c:
                    fa:5c:0a:af:4c:9b:44:36:19:90:6c:4d:18:7a:bf:
                    8f:bf:88:ee:ad:57:b8:68:68:af:46:78:57:8c:a5:
                    b8:c8:4d:22:af:a6:5c:6a:87:df:52:00:ac:90:fe:
                    88:e0:5f:74:1d:b1:ea:be:93:10:6c:4d:d9:43:60:
                    7e:96:52:cb:3b:dd:3f:ec:58:9a:70:f8:29:79:46:
                    96:20:a2:a7:58:9c:c7:2c:24:75:65:bc:14:6e:bf:
                    10:b2:a1:c7:cb:d5:d0:7e:07:8b:e8:45:67:71:51:
                    35:0a:e0:f9:21:be:53:f7:c8:7c:f1:7e:78:18:39:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:49:81:63:58:EB:1C:C9:FB:E1:7F:08:BB:31:58:9C:4A:E9:85
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:1c:1c:47:84:f3:08:01:33:18:85:b9:39:4d:80:35:92:
         61:ac:65:eb:10:0f:3c:a5:64:cf:f9:0b:fe:9a:99:a2:69:d9:
         09:94:4f:5a:40:c9:6d:0b:7b:ba:f4:8c:bd:38:a0:2b:40:ee:
         8f:57:4f:9b:17:87:23:e6:f4:74:9a:8e:5b:b0:de:0a:0f:78:
         ba:fd:c4:a1:cc:87:34:3a:ef:60:d1:c3:14:83:cd:29:fc:23:
         6a:75:3a:a4:3a:63:91:96:c3:6e:8c:92:c1:17:00:a5:63:b2:
         ef:35:fe:d5:36:94:23:5e:91:a2:b0:45:8e:f3:70:11:25:17:
         13:e3:69:97:4b:b4:c5:35:8a:61:c4:c6:d4:2d:e2:eb:65:ff:
         62:8d:a9:30:95:50:b9:3d:16:9a:85:c1:dc:a1:11:08:64:3c:
         78:b3:57:e9:53:0c:5f:87:db:df:1c:15:a1:d6:93:a7:61:84:
         55:2d:fa:bc:8a:74:79:aa:c9:87:d1:dc:2e:d7:25:d5:79:3c:
         b2:e7:b5:43:3d:9f:0e:b8:6c:0b:db:39:2a:4f:56:de:b3:38:
         57:46:4e:12:85:e0:3a:f9:1e:c8:fd:fc:db:2d:1c:1d:85:94:
         9f:ef:51:27:20:a7:12:9f:da:1b:7d:5b:6c:07:f1:16:93:00:
         17:2b:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:38:46 2024 by rpki-client on console-fra.rpki-client.org