Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35382e302f32342d3234203d3e203232333133.roa
File:                     3139302e3130332e35382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          by6yXBw1hhfZoSIO9CM9ZXJPgWj2RKG9w9zhuRm1qK0=
Subject key identifier:   0B:A5:2F:AB:E2:CA:D2:BF:B7:A4:21:18:D0:85:55:FE:B7:21:B7:E8
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4361271C288D4741A0F863DA4D8B3DD5E247FA51
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35382e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:02 +0000
ROA not before:           Mon 27 May 2024 19:45:02 +0000
ROA not after:            Mon 26 May 2025 19:50:02 +0000
asID:                     22313
IP address blocks:        190.103.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:61:27:1c:28:8d:47:41:a0:f8:63:da:4d:8b:3d:d5:e2:47:fa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:02 2024 GMT
            Not After : May 26 19:50:02 2025 GMT
        Subject: CN=0BA52FABE2CAD2BFB7A42118D08555FEB721B7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:39:a6:f5:88:b8:72:07:60:2a:3a:66:1c:
                    93:14:26:93:37:78:2f:c4:c8:54:7b:15:ae:33:72:
                    64:bf:97:60:d6:9d:1e:78:dd:a3:f4:a1:ac:ca:b2:
                    c3:c5:ef:86:9c:e0:28:12:77:b0:68:18:f5:c1:66:
                    e2:80:df:8c:b6:ad:8e:27:46:6f:a2:e6:82:54:58:
                    d1:dc:77:eb:e7:b4:87:8c:88:cb:01:26:d3:39:77:
                    78:bb:a9:80:fe:73:06:69:b3:65:08:87:0f:f6:14:
                    2e:5f:6a:41:e3:13:61:00:1e:1e:63:0f:73:58:b1:
                    73:8c:d7:57:18:b2:9f:c5:63:41:1b:3f:0a:bb:10:
                    b3:cd:f5:28:00:60:aa:39:9a:55:de:32:56:99:14:
                    54:cb:af:85:59:b6:68:6c:3d:d9:4e:e4:b1:90:b3:
                    d1:98:73:37:77:6e:8d:de:7b:6c:1f:f8:f2:dc:eb:
                    a8:1b:97:6f:4a:9f:c7:f8:70:2f:23:cb:e7:1b:82:
                    b6:6a:c1:e6:47:f2:d7:01:db:95:02:e6:51:ec:76:
                    0c:49:e3:3e:6d:16:51:ad:e9:7d:56:60:c6:71:19:
                    21:f8:3c:83:67:08:da:55:39:32:e6:b3:22:d0:c7:
                    6b:0a:ac:a5:c0:a0:22:dc:5a:a4:40:68:7d:da:75:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A5:2F:AB:E2:CA:D2:BF:B7:A4:21:18:D0:85:55:FE:B7:21:B7:E8
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3130332e35382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:71:38:03:eb:81:7d:4a:99:b7:13:d7:f2:72:68:6f:5a:
         06:34:bd:f7:90:16:31:3c:38:a1:e7:b8:f0:fc:a4:33:ba:13:
         6d:75:d5:3d:89:ba:27:1e:32:bf:19:19:91:4e:33:87:a9:69:
         3d:53:f7:00:01:89:24:89:cd:9e:42:a7:17:1b:26:de:4e:65:
         f8:58:1d:68:cf:d6:fb:a7:cd:1e:ef:d6:95:12:76:7c:c7:01:
         c0:e9:62:1b:9a:f7:5d:fc:69:28:5c:80:92:99:a4:10:5b:12:
         19:93:a3:2e:b5:7d:77:2a:ec:63:b8:c9:29:8d:f7:04:20:e3:
         a8:a4:bb:b0:ef:c5:4d:1a:ff:e0:23:11:33:69:d1:34:92:ba:
         39:5d:94:59:9b:58:7b:7d:0b:3d:63:b3:0e:cb:bd:d0:ce:23:
         9a:bf:32:67:31:98:c0:a0:b8:bc:55:44:72:ca:ad:85:ef:48:
         6f:4e:f1:bd:f9:8d:d4:cc:2c:10:31:1b:a1:77:36:34:b4:f9:
         88:86:e9:40:44:03:6c:e2:4b:56:8d:cb:8c:d7:6f:b2:f0:7d:
         72:0b:3c:ea:d9:2a:1f:d1:7c:1b:37:70:a1:c9:0f:c2:32:f2:
         32:4a:2f:c8:71:f2:4c:56:9c:00:8f:71:83:44:c3:36:07:7b:
         4b:99:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org