Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa
File:                     3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa (raw, json)
Hash identifier:          PWtsbcMVpKSAA45K+u5yj6EJaSA4r5WThBIPmGOtlOw=
Subject key identifier:   26:38:A0:80:18:5B:25:73:42:4C:EE:67:5A:3D:B8:56:02:8F:43:24
Certificate issuer:       /CN=C9AE029974BF7364D796B09E2D313FA4128E1865
Certificate serial:       4CDDDB4229CF81879E54E1BDA59D3CA947E9C273
Authority key identifier: C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa
Signing time:             Tue 05 Mar 2024 17:48:43 +0000
ROA not before:           Tue 05 Mar 2024 17:43:43 +0000
ROA not after:            Tue 04 Mar 2025 17:48:43 +0000
asID:                     262178
IP address blocks:        190.113.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dd:db:42:29:cf:81:87:9e:54:e1:bd:a5:9d:3c:a9:47:e9:c2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AE029974BF7364D796B09E2D313FA4128E1865
        Validity
            Not Before: Mar  5 17:43:43 2024 GMT
            Not After : Mar  4 17:48:43 2025 GMT
        Subject: CN=2638A080185B2573424CEE675A3DB856028F4324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:cd:43:0f:db:4c:77:c5:a7:6b:22:0d:a2:
                    00:c7:7e:89:7a:e0:5c:d9:1d:6c:e5:46:b1:32:29:
                    ea:49:6e:b2:92:9f:6a:75:44:99:fe:1a:38:27:4d:
                    58:8f:2b:cd:d4:e7:ad:0d:f3:84:a2:1c:2c:bb:89:
                    24:2b:a3:f5:64:63:2f:f4:2b:6c:8e:c6:a4:7b:bd:
                    4f:6a:6c:65:1f:fc:ea:7e:67:29:87:15:60:13:81:
                    45:6c:e8:19:b4:4c:a5:5d:6f:34:31:84:60:0f:f0:
                    92:68:b0:c1:d6:4f:29:0d:87:09:fc:60:1e:8b:ae:
                    9d:27:a3:5c:94:9b:f9:1f:af:b6:e0:2e:e1:a2:35:
                    77:f1:c1:f7:d9:46:ed:48:c1:35:19:93:af:94:b0:
                    32:82:4a:e2:fd:a6:fb:da:51:09:0d:c1:db:96:5d:
                    3d:01:53:09:69:21:71:ed:f6:d5:d7:70:1c:01:78:
                    d8:39:15:16:a4:4c:69:32:a7:fb:de:1e:2d:4e:4e:
                    3c:8f:69:7c:73:f5:44:ec:bd:b0:40:a4:b0:02:e9:
                    6e:24:86:7a:9b:c7:6f:6d:b7:29:21:ca:3a:53:09:
                    b1:49:44:e8:65:bf:c5:64:31:d3:8f:e2:00:1a:71:
                    01:29:2a:d7:d9:df:92:aa:82:0a:bb:d7:8f:77:b2:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:A0:80:18:5B:25:73:42:4C:EE:67:5A:3D:B8:56:02:8F:43:24
            X509v3 Authority Key Identifier:
                keyid:C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:e3:c8:c6:82:bc:04:f1:8b:09:84:8c:6f:2f:81:79:07:ff:
         e0:ea:14:1e:86:17:c7:bf:ca:d9:d8:98:b1:f1:10:d5:04:64:
         d1:90:16:71:82:8b:e6:8e:d1:2a:42:94:de:51:85:9c:0c:eb:
         2d:54:55:c4:fb:03:6e:87:18:c5:70:6c:b1:cc:81:89:d4:de:
         4b:e1:da:18:78:bf:3a:75:e9:54:e5:76:83:58:ca:d7:38:82:
         97:b9:34:53:aa:37:46:08:e9:e8:3f:25:8a:d3:b5:91:c2:f6:
         92:2f:b2:84:9f:23:64:3b:df:9c:38:1f:8e:1e:25:b4:95:ff:
         54:83:54:a8:1d:03:27:4e:5c:42:75:9e:11:6b:86:98:fa:ca:
         05:6b:0e:23:f1:96:59:7f:25:55:ca:fe:67:5d:4a:88:ae:c1:
         38:6a:b1:ae:d3:33:a8:55:f4:68:e8:b3:25:da:90:dd:d5:d2:
         9f:00:e9:1a:92:e4:3b:80:28:7a:a5:e1:19:e0:ef:c8:3d:5a:
         dd:3b:21:9e:d0:75:df:1f:9d:00:10:50:66:f7:aa:04:98:b8:
         74:8a:ed:99:53:1e:32:d3:94:6b:f4:08:c2:72:1a:5d:e9:15:
         40:f8:17:d9:90:0a:9e:d2:24:0b:f3:c3:4a:2f:ef:2e:36:43:
         58:ca:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:46:23 2024 by rpki-client on console-fra.rpki-client.org