Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35372e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e35372e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          EZjA0Vf9Qa8nPzsEcAekjeCz+w8COqaAMgcCxRH5uak=
Subject key identifier:   0E:37:2D:2D:1C:4B:EE:43:D2:05:B1:8E:25:E9:7B:CF:2A:F9:59:AA
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       3488392A01BCC3F960E62B9F2A3FF939249D81D2
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35372e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:07 +0000
ROA not before:           Mon 27 May 2024 19:45:07 +0000
ROA not after:            Mon 26 May 2025 19:50:07 +0000
asID:                     22313
IP address blocks:        190.103.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:88:39:2a:01:bc:c3:f9:60:e6:2b:9f:2a:3f:f9:39:24:9d:81:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:07 2024 GMT
            Not After : May 26 19:50:07 2025 GMT
        Subject: CN=0E372D2D1C4BEE43D205B18E25E97BCF2AF959AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:5c:98:20:e5:99:78:dd:ed:94:0a:68:42:
                    56:2f:78:71:71:40:2e:53:77:5c:c9:8c:79:e5:14:
                    5b:de:5a:69:4b:06:6f:04:6b:70:50:2d:38:22:78:
                    c6:bc:91:39:fe:11:81:52:18:75:bf:e3:91:7a:70:
                    92:fe:3a:95:18:fe:75:5d:fd:a2:5c:f5:43:e2:6b:
                    37:98:96:62:63:4a:e7:0d:a2:51:b4:38:8d:25:15:
                    1d:26:a1:53:3c:b5:a1:a1:02:04:24:9a:11:2f:e6:
                    33:94:ec:4b:f3:49:d3:ad:09:ba:c0:b3:3c:05:41:
                    eb:55:87:bc:9e:36:7c:3b:c7:26:cc:0d:cf:c6:1f:
                    91:54:30:dd:1e:35:1e:25:54:4c:75:f7:ff:04:96:
                    f8:03:97:9d:36:17:ed:dd:35:fe:83:e3:c0:bb:6f:
                    77:58:ba:a2:ae:4f:d8:31:93:93:c3:ef:75:7e:17:
                    7b:80:4a:92:f1:fd:0e:89:e3:37:5a:d7:f2:4c:ba:
                    b2:28:80:88:c0:a7:78:d0:51:85:1e:85:ee:71:20:
                    d2:17:2e:d5:51:56:a8:4c:a7:b4:cb:31:66:37:67:
                    a6:d3:2d:34:bb:06:04:43:ff:fb:57:a2:c5:5f:56:
                    a5:eb:f8:a0:fb:00:f4:b4:33:9d:84:05:56:61:44:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:37:2D:2D:1C:4B:EE:43:D2:05:B1:8E:25:E9:7B:CF:2A:F9:59:AA
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35372e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:13:65:5f:51:d6:ef:d7:f7:d3:b9:a3:68:ae:e7:01:9f:
         f1:e2:98:e5:d6:27:70:4c:73:7d:3e:ee:58:18:f6:a2:b4:13:
         a0:96:a8:82:31:6f:c2:36:09:7c:44:cc:81:3c:f9:b7:e4:0a:
         ca:f4:2b:e6:a2:2f:2d:b5:c6:95:78:e8:16:26:22:fd:05:8f:
         95:23:66:6f:d2:94:4b:56:9d:57:14:0c:1f:10:d3:e2:69:21:
         8f:6b:d5:d0:5d:c4:b2:10:bc:a4:54:8a:bc:f7:c9:bb:d9:d7:
         3b:98:6b:8e:5a:ca:74:73:0e:93:9a:7c:50:89:6b:e4:ac:80:
         40:15:c8:5c:c7:9c:4a:8d:98:79:73:7e:bf:fd:cb:f8:f1:6f:
         2f:15:8b:30:d8:d6:3c:42:c4:10:50:92:65:65:f9:ec:29:82:
         cb:d5:da:5d:51:97:68:38:ba:50:dd:c2:f8:b3:f8:de:81:73:
         f1:2f:8f:05:d3:65:3c:d2:3f:76:45:4b:27:e4:0c:ae:8a:ea:
         ee:5e:79:26:3a:e1:8d:15:9d:bb:59:c3:d2:7f:84:e1:a1:a1:
         a7:e5:f8:99:f8:69:5b:01:bb:56:29:44:fa:86:ba:b5:3d:02:
         1c:fc:13:d3:df:db:57:cf:99:ca:e8:8a:d7:86:61:b6:52:3f:
         02:bb:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:45 2024 by rpki-client on console-fra.rpki-client.org