Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa
File:                     3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          3TQT3Ov+1cMtHdJ+nK/YH8aAJvcHeJqj+yQRRgU0Fx4=
Subject key identifier:   7A:DC:B4:06:3E:32:B7:D8:2D:6C:22:13:96:6B:1C:CB:DF:67:19:50
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       6C7E31A3CE8AFC0A43E73FB524D6E8605F83EE25
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 17:57:00 +0000
ROA not before:           Tue 05 Mar 2024 17:52:00 +0000
ROA not after:            Tue 04 Mar 2025 17:57:00 +0000
asID:                     263238
IP address blocks:        190.107.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:31:a3:ce:8a:fc:0a:43:e7:3f:b5:24:d6:e8:60:5f:83:ee:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Mar  5 17:52:00 2024 GMT
            Not After : Mar  4 17:57:00 2025 GMT
        Subject: CN=7ADCB4063E32B7D82D6C2213966B1CCBDF671950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:29:dd:a9:b7:42:2e:50:a2:fb:c5:97:9c:
                    bf:1c:09:d8:e9:cd:36:7f:fa:c3:31:f4:8a:e9:65:
                    7b:11:bf:63:6a:ac:a1:b1:33:67:b1:24:f4:83:06:
                    de:97:27:7e:11:ce:e1:f4:87:c9:67:27:85:ac:2c:
                    32:27:7e:4a:cd:32:4e:0e:75:5b:83:b3:fe:e3:a9:
                    44:13:72:60:11:a4:42:98:d4:ef:6e:ba:aa:38:f8:
                    f5:9b:04:0c:d5:ad:eb:05:a0:d6:d2:93:96:22:e4:
                    90:c8:66:f3:e2:e5:ad:20:08:e8:39:19:a1:d4:f4:
                    93:43:3a:04:88:f1:3b:fe:8b:d9:f9:8a:26:2c:8b:
                    08:60:02:85:3d:eb:b2:71:bd:3a:83:a5:63:8a:4c:
                    b0:df:79:42:91:a2:07:b8:8e:e6:c8:e7:47:7e:f2:
                    8a:6f:29:05:cb:5d:bc:32:78:30:20:87:6c:c2:49:
                    e7:3b:bb:00:4a:58:5e:a1:ff:d8:41:9b:3f:46:9f:
                    84:c8:fc:cf:0c:cf:ed:5f:15:3b:2d:5a:41:36:49:
                    d5:1d:bd:3c:a4:91:5c:ee:fe:15:a5:c2:6e:24:cb:
                    d6:b6:6a:9a:92:8d:f9:95:70:38:4a:3a:a5:7f:d2:
                    39:be:df:4a:11:cc:1c:99:67:0f:c6:50:18:7b:38:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DC:B4:06:3E:32:B7:D8:2D:6C:22:13:96:6B:1C:CB:DF:67:19:50
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:19:94:35:ca:6a:b9:8a:2d:15:cb:09:f9:3b:73:d8:d0:
         2e:ea:75:22:28:2d:23:63:09:a5:db:1b:40:9f:57:11:31:4e:
         0b:98:72:b9:39:c3:fd:79:93:de:36:11:42:7e:c2:5b:08:af:
         ea:d6:b5:91:e2:e2:e3:ac:93:e3:27:09:3c:fe:05:34:ec:6d:
         31:1d:cd:6f:c0:66:1b:ea:ca:c0:da:07:17:8d:b1:af:17:cf:
         a0:d4:96:f3:0a:4b:9c:e9:34:c0:fb:8e:fd:67:bd:71:61:3f:
         e4:56:49:9d:9e:54:47:95:0f:91:a4:0e:47:58:ec:b7:70:01:
         b0:39:b6:7c:07:09:d5:f8:66:99:00:83:ff:82:81:9a:bb:2b:
         c2:52:7e:8b:fa:e2:09:03:18:c7:c1:65:25:ab:7b:77:23:70:
         a4:fb:a6:14:a2:b2:19:9e:1b:6c:21:57:b6:1f:21:22:63:61:
         aa:56:1b:27:34:05:df:9e:20:93:a0:0d:9b:22:af:99:55:cb:
         3f:c8:a5:d6:8a:f0:24:ad:fd:79:93:c7:e9:8a:1c:37:31:df:
         02:f1:49:13:8d:9d:2c:5e:51:5b:e2:ec:01:41:91:73:32:19:
         b5:47:b0:8e:a8:88:cb:92:dd:18:39:22:fc:5d:b3:c1:5c:2e:
         62:25:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:51 2024 by rpki-client on console-fra.rpki-client.org