Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/3139302e38332e36312e302f32342d3234203d3e20323639393338.roa
File:                     3139302e38332e36312e302f32342d3234203d3e20323639393338.roa (raw, json)
Hash identifier:          FDgkrBLPKFH/awtAJy1yQbaurPMXU3HxwJvRb6xitio=
Subject key identifier:   9A:7B:90:31:66:7B:27:84:B3:72:8F:EC:CD:C5:8A:CF:EA:00:82:C7
Certificate issuer:       /CN=473AFB9A5D0AE9E193C986190D5540C7B4716B22
Certificate serial:       40E968AA75A66761EF9100283762CEDE0ED856B7
Authority key identifier: 47:3A:FB:9A:5D:0A:E9:E1:93:C9:86:19:0D:55:40:C7:B4:71:6B:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/3139302e38332e36312e302f32342d3234203d3e20323639393338.roa
Signing time:             Tue 05 Mar 2024 18:09:28 +0000
ROA not before:           Tue 05 Mar 2024 18:04:28 +0000
ROA not after:            Tue 04 Mar 2025 18:09:28 +0000
asID:                     269938
IP address blocks:        190.83.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e9:68:aa:75:a6:67:61:ef:91:00:28:37:62:ce:de:0e:d8:56:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473AFB9A5D0AE9E193C986190D5540C7B4716B22
        Validity
            Not Before: Mar  5 18:04:28 2024 GMT
            Not After : Mar  4 18:09:28 2025 GMT
        Subject: CN=9A7B9031667B2784B3728FECCDC58ACFEA0082C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:ef:18:31:7b:63:98:9e:d0:af:0c:50:9b:
                    2c:8d:7d:52:62:9a:8b:e6:24:6f:97:81:9a:f2:f6:
                    e1:90:68:ce:58:f6:98:2b:d4:4e:cc:9b:fe:3d:54:
                    29:26:c0:5e:ad:6f:71:29:0a:9d:42:e7:4a:36:d3:
                    18:6c:53:4b:b8:ce:46:5f:3d:84:ae:3c:e6:d1:97:
                    14:4e:b2:4c:fa:3b:db:2f:6b:f8:40:c1:13:0e:2b:
                    a0:1a:61:6e:57:3b:ff:c5:0d:1e:27:10:5a:17:dc:
                    8f:ef:9e:15:35:c2:b0:6c:72:9c:0f:95:cb:54:6a:
                    73:28:a9:14:6c:33:be:e1:33:1f:cb:05:08:54:10:
                    81:31:93:e0:14:dd:91:53:6b:65:77:5c:6e:64:6d:
                    04:c5:b4:5b:31:b4:44:e7:c3:46:da:d4:87:57:a7:
                    d8:a8:40:58:2d:f6:ce:e4:75:e5:7f:0e:7a:df:7b:
                    0e:72:2e:6a:6e:b1:ae:02:5b:21:da:86:05:10:61:
                    91:ff:57:0c:82:1c:5e:c6:29:d6:4d:c0:a8:91:81:
                    98:98:d0:b8:02:d3:fc:34:d9:9d:3b:13:9b:4c:d1:
                    ca:2b:29:7f:fe:2c:1b:29:69:c9:15:38:7d:56:df:
                    df:31:6d:de:93:37:56:7d:f7:4c:f7:4f:c3:bd:b0:
                    7f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7B:90:31:66:7B:27:84:B3:72:8F:EC:CD:C5:8A:CF:EA:00:82:C7
            X509v3 Authority Key Identifier:
                keyid:47:3A:FB:9A:5D:0A:E9:E1:93:C9:86:19:0D:55:40:C7:B4:71:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/3139302e38332e36312e302f32342d3234203d3e20323639393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e9:cb:61:83:0e:01:c3:b9:14:15:85:43:b4:a2:fe:4f:1a:
         18:10:0e:6b:58:5e:36:3c:6b:25:f2:06:2b:be:ef:8b:fd:04:
         9d:94:4d:f7:a2:56:d8:47:b0:df:b4:d5:99:3a:31:b4:e7:eb:
         75:77:bb:e7:18:db:69:a0:d5:98:d5:92:2d:ef:73:f8:e9:69:
         8f:b8:9a:d5:b7:fa:c1:74:51:b6:eb:f6:29:c3:9f:15:a3:94:
         74:36:8b:c0:44:19:c5:24:1f:0f:e4:5a:20:b7:bd:18:5d:62:
         00:29:52:3e:2c:21:c8:04:7e:30:29:a0:ea:75:7f:3e:83:2e:
         c8:36:7e:23:52:61:dd:9b:61:14:3a:7b:1d:fd:94:3a:fc:1f:
         6a:f0:ce:4b:d8:3c:9f:a5:89:86:b7:a2:1f:65:40:8e:d3:7c:
         9f:46:c6:15:f9:de:3a:06:9b:3f:54:b7:9b:cf:0d:4a:71:bd:
         4c:ef:51:b9:a8:90:01:ed:ff:98:ba:37:d1:72:29:5f:96:d5:
         1a:02:36:a0:e2:7c:b3:d4:75:a6:66:9c:5c:9c:f7:5a:ef:11:
         82:52:f7:63:29:71:f4:88:98:2a:fb:77:6d:19:38:b7:61:2c:
         42:d3:fa:d4:d5:66:84:12:7d:c1:f6:c4:7c:d1:af:21:b1:7f:
         e5:9f:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:09:38 2024 by rpki-client on console-ams.rpki-client.org