Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31302e302f32342d3332203d3e20323639393236.roa
File:                     3139302e38332e31302e302f32342d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          SBG+fRcGgj18oNW17G9roJb7AUJL+g+m/vdgpkXc17M=
Subject key identifier:   B1:74:D3:E1:69:11:E9:65:D8:14:5E:D2:32:4C:CD:4E:C4:40:37:ED
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       5BF318EB7DD3C897A0F60DD42ACC18F2E1127839
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31302e302f32342d3332203d3e20323639393236.roa
Signing time:             Tue 05 Mar 2024 18:21:52 +0000
ROA not before:           Tue 05 Mar 2024 18:16:52 +0000
ROA not after:            Tue 04 Mar 2025 18:21:52 +0000
asID:                     269926
IP address blocks:        190.83.10.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f3:18:eb:7d:d3:c8:97:a0:f6:0d:d4:2a:cc:18:f2:e1:12:78:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Mar  5 18:16:52 2024 GMT
            Not After : Mar  4 18:21:52 2025 GMT
        Subject: CN=B174D3E16911E965D8145ED2324CCD4EC44037ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:c6:3b:f1:4a:a3:ca:36:c1:08:7c:10:00:
                    f0:6f:b5:af:ff:b0:28:48:2a:5c:52:f6:6f:41:2b:
                    dc:c8:8d:2e:2a:75:24:66:2e:46:cf:8c:a6:97:c5:
                    9a:cf:d3:08:73:17:b1:f9:ef:83:67:ed:1b:73:39:
                    b0:69:d6:4c:ea:a0:41:10:af:8f:cb:35:d3:87:57:
                    fb:ec:15:f4:5a:4f:bb:f2:2c:c6:c7:40:a4:63:bb:
                    71:52:03:13:61:4a:af:90:3c:09:cb:9f:33:36:6a:
                    15:c5:d1:4e:31:5e:a6:f2:32:ad:39:c7:09:66:43:
                    9d:68:2e:ae:a9:67:08:b1:c7:6b:ea:b6:5a:2b:4c:
                    0d:2c:ba:64:e1:df:51:b8:1d:73:bc:90:7d:3c:1a:
                    bf:44:e3:b2:0e:34:38:e6:c9:0e:cd:8e:0a:08:18:
                    59:82:f7:b1:a9:af:43:35:e3:90:a2:1c:40:ec:66:
                    9e:47:f7:cd:7d:80:02:64:83:55:c3:69:4b:bd:d1:
                    71:a0:ad:67:2d:95:fc:b7:79:b1:2f:ec:5a:2e:99:
                    df:49:a7:72:ed:48:32:9c:e3:0d:fa:06:e2:f1:c2:
                    62:1b:85:d5:cd:12:0a:94:19:2a:24:72:70:3d:31:
                    43:39:e0:dc:94:88:96:93:c6:1d:80:58:ce:81:a2:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:D3:E1:69:11:E9:65:D8:14:5E:D2:32:4C:CD:4E:C4:40:37:ED
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31302e302f32342d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:8d:20:a4:d7:0c:cb:48:6b:a2:05:db:88:cc:7a:60:27:
         48:57:f7:9c:42:ac:9c:96:7a:51:bd:a6:4d:72:12:7a:1a:ce:
         e9:07:79:45:a6:be:ed:b7:17:a9:5d:1c:6e:17:88:04:ea:4a:
         87:50:10:e8:a0:f7:21:96:5d:4c:6c:08:fd:7f:9b:2a:2a:94:
         84:58:5e:64:bc:ac:03:48:16:b8:eb:3c:6e:84:d7:46:3c:d7:
         5b:6d:4d:7f:ad:c8:b1:dc:e1:c4:7a:a6:99:47:4f:fb:f2:be:
         d5:3d:88:0a:17:3b:c5:6b:a0:64:33:5c:cf:32:83:d1:19:14:
         34:3d:4d:31:e3:f5:65:d7:b9:7a:08:1c:20:de:37:09:1d:8e:
         0f:3f:4d:a1:c3:5a:db:62:1d:3a:0e:69:6b:a0:78:82:4d:36:
         ad:b5:b3:c0:22:45:e8:3f:1d:17:f7:74:d2:e9:58:b3:1a:00:
         c2:dc:1f:b9:7c:05:7b:64:1b:14:d9:c8:29:37:08:d1:7e:c0:
         4b:94:a4:f0:83:87:62:0e:ff:10:f0:03:40:74:47:6f:6d:62:
         d9:8c:25:43:3c:c6:a7:f7:8e:27:48:f9:68:c5:8e:4d:ec:66:
         ab:ec:aa:be:dc:81:29:17:93:15:ed:57:50:1c:46:d3:b5:59:
         77:6c:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:32 2024 by rpki-client on console-fra.rpki-client.org