Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa
File:                     3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (raw, json)
Hash identifier:          qdAvDkmSfdaDYTJaYLYBVh64n3V/zcCmrdjWj4MWLGM=
Subject key identifier:   09:48:2B:0D:7F:FC:37:72:E7:02:15:13:32:09:4A:46:4B:2F:7C:C0
Certificate issuer:       /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A
Certificate serial:       3E3CFC43AFD45C3E6BBFC3BAA8A13C096CE00F76
Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa
Signing time:             Tue 05 Mar 2024 17:50:34 +0000
ROA not before:           Tue 05 Mar 2024 17:45:34 +0000
ROA not after:            Tue 04 Mar 2025 17:50:34 +0000
asID:                     271808
IP address blocks:        190.123.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3c:fc:43:af:d4:5c:3e:6b:bf:c3:ba:a8:a1:3c:09:6c:e0:0f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A
        Validity
            Not Before: Mar  5 17:45:34 2024 GMT
            Not After : Mar  4 17:50:34 2025 GMT
        Subject: CN=09482B0D7FFC3772E702151332094A464B2F7CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:fe:fb:7d:c7:8c:2e:d6:e2:26:57:28:7d:
                    06:73:b0:1c:89:f7:00:52:5e:50:b2:f4:e3:c8:19:
                    0e:04:78:21:96:cd:4c:59:c2:c2:cf:05:c3:e3:90:
                    02:17:33:8a:79:92:49:33:82:a9:80:b9:8e:ec:56:
                    21:61:f3:db:64:e5:6c:da:ec:95:7a:0f:09:f2:a0:
                    84:79:54:08:71:64:62:fb:f4:15:cf:f1:4e:2c:e0:
                    74:a0:ba:9d:0f:53:8b:a6:2f:1d:78:d7:99:0d:d7:
                    7b:b0:79:17:d1:73:bd:d3:6b:4d:47:4d:24:f3:2a:
                    53:05:a9:ef:96:da:d0:ce:f4:bd:35:7f:d8:b8:9a:
                    c2:3d:58:48:0f:5f:bb:02:ae:7a:44:0f:c5:0d:b6:
                    9a:f2:ee:d5:48:ae:a0:9d:60:3e:30:c2:09:0d:01:
                    d7:e3:5c:dd:5f:ef:2f:4c:fc:64:04:2a:a1:c5:b9:
                    8e:4f:9d:73:e8:b3:3a:61:8f:27:30:16:fe:f1:a1:
                    f2:24:1f:5a:01:8e:97:65:e8:9c:d1:cc:91:6e:8e:
                    fc:a2:c2:1c:cb:1f:22:8e:44:12:17:f3:9a:8c:10:
                    ed:1c:9a:1b:00:1d:ae:6a:e0:43:6c:5f:ab:54:17:
                    f0:d8:81:cb:e5:d3:c6:3c:82:d6:4c:91:84:cb:ed:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:2B:0D:7F:FC:37:72:E7:02:15:13:32:09:4A:46:4B:2F:7C:C0
            X509v3 Authority Key Identifier:
                keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:05:9a:a9:93:87:d4:a3:cc:c8:c6:c6:b5:84:73:9f:2e:41:
         bc:d9:d2:22:06:e9:89:25:be:95:47:55:86:a7:7b:87:bf:e3:
         a8:e8:d4:7b:64:c0:64:9b:83:52:8b:7c:36:f5:05:16:b8:e2:
         c1:c1:b3:ec:e2:04:b5:1a:34:51:ab:b1:6b:9f:7d:a2:ac:9a:
         44:c2:7a:34:2a:2e:55:e6:2a:c5:a7:c0:24:55:04:04:d2:2b:
         ec:fe:46:de:37:a6:97:d8:f7:9d:d1:8e:e5:46:79:29:44:31:
         66:91:0f:60:59:85:52:fb:09:e7:60:55:57:f1:23:76:4d:05:
         c5:e1:fc:7a:01:b4:b7:43:2d:40:18:27:11:15:12:86:e2:7a:
         e9:e5:23:f1:d5:4e:8c:04:36:1a:48:44:49:0d:86:15:c0:55:
         00:ab:ec:c8:c5:12:87:84:61:cb:04:eb:00:81:8b:f8:f5:26:
         55:0a:a8:9e:0a:3d:ed:53:b4:50:f2:d2:b2:ed:5d:f3:46:c1:
         c1:b9:73:1d:f0:23:06:5d:3b:83:21:40:ee:f1:2c:a2:c4:c9:
         4b:ce:03:6a:fc:e9:a2:25:12:35:73:14:49:41:71:b0:16:71:
         64:bc:fa:92:84:38:de:7c:a9:bf:63:4e:e8:82:b9:8b:c1:7e:
         c5:6e:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:09 2024 by rpki-client on console-fra.rpki-client.org