Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
File:                     3139302e382e34382e302f32302d3234203d3e203532343035.roa (raw, json)
Hash identifier:          WMV9A1uKq4Ds11Rrjd/K2rN8GKc5RXshaG9SWBL0cMI=
Subject key identifier:   EB:F8:9F:62:BB:73:4D:DF:14:96:8C:DE:E6:8A:C6:9D:51:3C:04:DB
Certificate issuer:       /CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
Certificate serial:       43149AB2E032F4C13543722AE3B668D2D79DC38E
Authority key identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
Signing time:             Tue 05 Mar 2024 17:53:27 +0000
ROA not before:           Tue 05 Mar 2024 17:48:27 +0000
ROA not after:            Tue 04 Mar 2025 17:53:27 +0000
asID:                     52405
IP address blocks:        190.8.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:14:9a:b2:e0:32:f4:c1:35:43:72:2a:e3:b6:68:d2:d7:9d:c3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
        Validity
            Not Before: Mar  5 17:48:27 2024 GMT
            Not After : Mar  4 17:53:27 2025 GMT
        Subject: CN=EBF89F62BB734DDF14968CDEE68AC69D513C04DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:19:ee:21:4b:79:d8:d4:88:b1:4e:83:bf:
                    da:53:3a:40:7f:bb:74:3a:86:de:0c:01:fb:cc:09:
                    77:4c:1c:16:0d:4b:ac:6d:72:ed:b7:7e:75:f6:2d:
                    1f:c6:5b:b0:92:df:f4:f3:bf:b7:21:d2:d7:84:33:
                    7b:78:37:a1:c1:3e:c5:e1:38:d8:04:46:7f:5f:31:
                    9d:04:4f:c8:0a:2b:54:a7:d6:1d:2e:c3:ff:a7:34:
                    cc:95:1c:64:e3:4b:10:3c:93:d8:1f:02:6c:50:4f:
                    ce:92:05:b6:ec:7c:bf:0f:02:4c:77:1d:52:61:17:
                    c1:0c:d7:af:1c:53:ec:26:3c:8e:3e:14:6d:ad:e0:
                    62:48:00:f3:c3:65:f8:4a:b8:a6:76:37:ff:07:83:
                    75:41:f0:94:a7:2e:58:9c:b4:2e:d1:dd:7a:37:15:
                    b1:42:dd:2f:67:c4:97:37:c9:6b:47:f5:04:1b:16:
                    cd:a7:25:7b:a5:f2:97:7b:f1:9b:74:4c:d2:b7:17:
                    33:b8:4f:27:8b:9c:82:a6:4f:ec:b0:60:c3:f4:fa:
                    52:20:f6:30:22:e5:07:b3:4f:27:1f:e7:15:41:70:
                    90:56:de:58:24:17:b3:7c:f2:de:4d:96:96:0d:7f:
                    b0:ae:00:68:96:a6:6b:ec:e1:8e:77:be:9a:35:6d:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:9F:62:BB:73:4D:DF:14:96:8C:DE:E6:8A:C6:9D:51:3C:04:DB
            X509v3 Authority Key Identifier:
                keyid:C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:1f:73:b9:32:ff:74:f9:07:a1:f9:2a:74:54:89:27:21:cd:
         df:04:7c:1f:76:8e:d1:34:03:8b:cf:41:68:71:50:37:59:c1:
         72:a4:c6:15:4b:73:df:c7:f2:20:53:99:e6:f8:07:9d:a7:e5:
         03:ae:7a:f1:99:d0:fa:7c:78:35:c8:3c:00:2d:30:8d:e9:1a:
         76:a9:b4:42:b3:b9:de:0d:68:91:01:fd:99:0c:d9:1e:b7:af:
         5d:b4:29:93:11:e9:b6:74:d7:03:bf:c9:a1:74:30:f6:70:27:
         c9:2e:e8:39:6c:75:e9:2e:15:d3:ef:fe:b7:26:33:89:91:59:
         b8:90:bd:99:96:f8:c7:04:3d:03:4d:df:8e:9d:fa:2a:5f:a4:
         44:7d:62:9a:04:18:c3:22:1c:f1:e6:d4:60:75:9e:61:5e:57:
         55:99:ef:ea:c1:f9:40:d6:38:4e:4e:4a:22:e3:e1:92:3e:73:
         15:ad:6a:7b:96:ae:8b:76:16:c6:6c:b2:31:57:66:2c:ed:a2:
         7a:5e:24:71:1d:c5:f3:23:92:94:fc:12:94:88:ba:c4:34:42:
         2c:92:84:cf:c1:e0:34:a0:1e:7a:32:f8:cd:3f:d4:45:9c:5b:
         0e:fa:ba:74:96:8f:b2:c0:af:dc:b7:89:35:79:ea:9f:ae:84:
         4a:08:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org