Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e302e302f31382d3234203d3e203237363635.roa
File:                     3139302e3231332e302e302f31382d3234203d3e203237363635.roa (raw, json)
Hash identifier:          dJfnSoNEodXcViDMaYVRTMR7jBK2ijk9a3OjsaxAaOU=
Subject key identifier:   AE:DF:85:60:1D:24:4B:3F:D4:D6:A3:4F:D7:00:BA:63:09:18:75:BC
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       7E83FA22C1AFD823C94D1B44986FA90B936053F5
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e302e302f31382d3234203d3e203237363635.roa
Signing time:             Tue 05 Mar 2024 18:15:10 +0000
ROA not before:           Tue 05 Mar 2024 18:10:10 +0000
ROA not after:            Tue 04 Mar 2025 18:15:10 +0000
asID:                     27665
IP address blocks:        190.213.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:fa:22:c1:af:d8:23:c9:4d:1b:44:98:6f:a9:0b:93:60:53:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Mar  5 18:10:10 2024 GMT
            Not After : Mar  4 18:15:10 2025 GMT
        Subject: CN=AEDF85601D244B3FD4D6A34FD700BA63091875BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:cb:2c:96:78:5b:db:bb:c3:0a:78:86:5c:
                    7d:f8:4f:c3:17:96:59:9e:18:4e:52:40:ef:62:67:
                    55:e1:b8:06:04:08:25:d3:cd:19:65:6f:db:d2:dd:
                    f5:bc:fe:37:d6:e9:4d:81:7b:c8:8f:93:5b:ed:7d:
                    d3:b0:f9:d8:6c:be:41:ea:fe:10:28:a1:4a:87:8b:
                    07:7b:c2:9b:e5:24:5f:d0:27:27:88:f6:4e:9c:62:
                    06:44:d2:27:73:ba:b9:47:44:e6:cc:17:ba:07:56:
                    84:0a:51:ab:d7:cb:28:5b:72:8a:9e:ce:f4:6c:89:
                    40:8f:17:7d:22:db:b9:f3:86:e1:08:b6:71:88:a3:
                    97:bf:04:44:c3:c3:40:9a:ac:5a:05:6f:2d:aa:6b:
                    65:4e:35:e2:2f:e5:b9:4a:5c:8b:f7:a2:cf:8e:83:
                    17:1b:04:11:43:f4:59:3a:45:e6:1c:46:d0:9f:44:
                    ba:6d:c9:d5:50:0d:4c:b6:1a:9e:14:3c:9a:cd:f6:
                    4b:70:6e:e1:b2:dd:47:bc:94:ba:04:e0:39:f2:6a:
                    e3:8f:69:1a:ee:7e:80:ad:e9:4c:08:f5:9e:17:2d:
                    22:67:38:91:f8:da:04:13:0d:62:30:5c:2f:8d:ed:
                    d3:27:3a:e5:b8:b3:e9:b5:7a:00:93:e4:b5:7c:66:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DF:85:60:1D:24:4B:3F:D4:D6:A3:4F:D7:00:BA:63:09:18:75:BC
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e302e302f31382d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.213.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:33:36:2c:cd:30:44:af:ba:3f:e5:e1:5f:58:20:05:ce:59:
         7d:f0:70:84:86:c2:f0:9c:42:d6:59:98:63:dc:54:f1:69:92:
         75:1c:82:35:f2:f5:e3:b1:39:bb:aa:f1:c2:8e:ed:27:44:64:
         3a:c0:b7:ad:09:5e:06:11:6a:06:ef:74:85:16:b6:22:97:63:
         9b:72:5f:92:95:63:e3:5b:8d:2f:a1:ff:38:c4:8c:6a:e3:28:
         7e:51:72:24:60:ae:fd:9d:04:7c:e3:25:27:ce:6b:b2:88:4c:
         64:b0:b0:d3:77:d0:a5:7e:ff:6f:75:33:3a:98:0b:05:6a:b6:
         f1:c1:36:ff:76:01:97:b4:74:9f:2f:d0:26:46:c7:ed:dc:a4:
         4f:87:d9:3e:11:cb:8b:c4:6a:75:c4:cc:7f:49:96:ac:8c:d3:
         97:78:f8:5a:59:2a:ac:de:1f:a4:6c:d6:cd:80:8c:ff:b3:da:
         18:5c:46:41:ff:d5:a5:7f:41:3d:5c:ab:29:00:e7:b7:ba:e3:
         d3:f2:c5:0d:5b:4c:c0:a9:7a:b6:8a:c9:9d:5f:ea:1a:a6:04:
         8b:d5:47:dc:47:2d:bc:21:c1:9e:e5:13:c7:b3:8d:37:28:e5:
         9f:72:00:ad:f6:0a:f6:22:3e:76:eb:5d:7b:4f:38:5e:4f:d9:
         c8:82:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org