Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137302e302f32342d3234203d3e203232333133.roa
File:                     3139302e3132332e3137302e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          iZtKWfiIqq3VS4DXCwNGun7IPWFwt0ZB8ivZJNrY6qU=
Subject key identifier:   8A:28:11:0B:51:DD:44:1C:AC:23:10:2B:0D:56:2C:07:44:5D:97:12
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       2C7C3B6B5EC7C3A6A507663DB992BA818FCE690A
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137302e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:19 +0000
ROA not before:           Mon 27 May 2024 19:45:19 +0000
ROA not after:            Mon 26 May 2025 19:50:19 +0000
asID:                     22313
IP address blocks:        190.123.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7c:3b:6b:5e:c7:c3:a6:a5:07:66:3d:b9:92:ba:81:8f:ce:69:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:19 2024 GMT
            Not After : May 26 19:50:19 2025 GMT
        Subject: CN=8A28110B51DD441CAC23102B0D562C07445D9712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:2c:77:5c:c7:a2:a0:23:da:9c:99:d9:54:
                    2c:c2:89:df:46:22:06:26:6b:b4:90:98:fe:87:2b:
                    10:55:50:e7:6d:09:6d:76:83:a1:08:05:29:ae:7e:
                    8b:a3:82:eb:13:93:ec:16:86:6d:1f:23:4e:ea:c4:
                    50:f0:8d:f4:d9:5d:73:48:16:2e:7f:46:70:1b:ff:
                    df:56:3b:74:1c:db:5c:30:a5:95:c0:df:5a:5b:cb:
                    96:6c:36:03:61:7c:c7:7f:7b:a9:73:22:65:14:44:
                    52:f7:04:a8:3a:f4:22:4c:85:d9:44:65:ab:04:2a:
                    67:61:ce:85:27:f0:b8:36:aa:20:e7:ff:0d:d0:7f:
                    72:5c:1d:59:5a:ba:d8:5e:27:3b:e6:fc:f1:fd:d1:
                    70:3f:d5:36:37:bb:8e:7d:dd:bd:fd:e4:a9:02:fc:
                    ae:14:14:fa:d9:5d:d8:1a:73:3b:7d:dd:ea:15:9e:
                    9f:b5:99:9f:4a:50:e3:0e:5e:23:4d:13:2a:e8:8e:
                    3c:87:bf:56:56:74:47:52:01:e8:15:7a:81:6f:ef:
                    5d:2b:e9:e3:d1:c5:28:89:50:d0:4f:32:43:98:cd:
                    54:94:a7:c4:98:16:92:ef:cf:a5:3e:94:98:82:ee:
                    9f:8a:7d:72:1f:8f:38:25:86:68:1f:d7:78:f7:b4:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:11:0B:51:DD:44:1C:AC:23:10:2B:0D:56:2C:07:44:5D:97:12
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3139302e3132332e3137302e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:8b:c2:a1:b5:23:40:5d:77:db:57:3b:b2:61:9f:ce:25:0b:
         75:de:41:d9:b5:42:9f:15:16:d5:78:18:2c:a5:a4:c9:98:d1:
         09:00:55:38:ab:29:2d:3d:ad:f1:ae:ba:74:07:f0:82:e2:43:
         4d:0c:b3:45:81:32:f9:3b:50:a1:79:5f:e4:53:e5:d8:74:6c:
         0e:20:73:c3:1f:55:19:f1:71:0f:65:6b:96:54:ca:a4:1f:a1:
         82:7c:5c:48:51:ed:fa:fa:fc:45:b3:bc:35:dc:da:6a:be:67:
         46:14:13:77:67:c9:89:05:83:38:5b:9f:1d:b3:f0:35:8c:85:
         c4:86:48:3b:c1:99:8b:e7:3e:c1:7c:01:7d:c0:0c:61:b9:6a:
         57:1a:31:99:2b:7a:02:b3:2f:9d:fe:12:9a:1f:c2:29:ce:d4:
         3a:09:ee:28:1c:8e:4b:f7:c7:9f:85:3a:0b:64:e7:08:98:04:
         4b:e5:eb:91:a4:96:d1:32:9e:35:1c:71:70:17:f5:e3:1b:55:
         29:1e:2e:b9:3f:84:55:02:e7:27:dd:d0:4e:50:9d:c7:fc:37:
         19:ec:eb:ce:6e:cd:03:eb:2d:2e:e3:28:55:c3:fe:6d:8c:f4:
         0d:2a:4c:73:1b:e4:b5:5e:33:c5:7d:07:42:6d:03:0d:a3:2d:
         0e:ae:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org