Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa
File:                     3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa (raw, json)
Hash identifier:          C+xBpRiTaD01fastk4zn6Ea1yiDRnrDsLKftA3MiR54=
Subject key identifier:   E8:D5:D5:70:D2:53:1C:C6:28:4D:8D:1E:2A:D5:5A:FC:90:8B:DF:3A
Certificate issuer:       /CN=BA340C77857657BA84C4ACA36039874FAF1238B7
Certificate serial:       0DEB63D2433D2C5FD888DF18273954FB1E12147D
Authority key identifier: BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa
Signing time:             Tue 05 Mar 2024 17:45:41 +0000
ROA not before:           Tue 05 Mar 2024 17:40:41 +0000
ROA not after:            Tue 04 Mar 2025 17:45:41 +0000
asID:                     270100
IP address blocks:        190.109.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:eb:63:d2:43:3d:2c:5f:d8:88:df:18:27:39:54:fb:1e:12:14:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA340C77857657BA84C4ACA36039874FAF1238B7
        Validity
            Not Before: Mar  5 17:40:41 2024 GMT
            Not After : Mar  4 17:45:41 2025 GMT
        Subject: CN=E8D5D570D2531CC6284D8D1E2AD55AFC908BDF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:ae:f3:ec:8f:ba:8c:c2:96:9a:a1:74:37:
                    47:92:ad:e6:64:8e:ad:41:1e:3d:1a:84:2f:9e:73:
                    12:b2:44:4e:bf:99:d8:0e:b3:ae:a6:63:0b:08:2e:
                    14:8b:c9:b0:2c:34:8d:d4:62:21:22:10:71:c7:40:
                    78:3f:46:5b:8e:11:77:55:6f:79:44:30:01:e5:23:
                    0c:1e:22:5f:2a:84:24:e9:04:c1:c0:b0:50:34:c2:
                    cf:29:69:c3:7d:cb:7f:ed:45:76:51:1d:4b:d2:23:
                    3b:68:f8:28:b9:b7:78:c5:06:0e:f4:c0:5e:48:18:
                    e7:0a:2e:d8:bf:0f:f6:0e:a6:54:e3:2b:6a:48:96:
                    8d:18:d9:0e:3b:6e:6e:3a:67:16:02:a7:44:26:42:
                    3d:65:15:a3:00:6d:92:05:1a:54:fa:a7:7c:b9:db:
                    b2:c4:42:b9:54:a9:bb:4a:e6:cc:77:af:ae:c6:6e:
                    e8:66:e3:20:e8:34:1b:7c:1b:51:b3:2c:4c:46:2b:
                    8e:ed:d1:de:f4:fe:a5:da:9d:d7:8e:ee:de:6d:54:
                    51:f0:eb:7c:ca:db:d8:ac:b7:b2:bb:52:c6:2e:0d:
                    76:6a:0e:18:4e:2a:2f:7c:15:11:d2:43:71:04:f0:
                    99:71:48:8e:7d:9a:c3:cb:42:45:3c:f5:6f:31:7a:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D5:D5:70:D2:53:1C:C6:28:4D:8D:1E:2A:D5:5A:FC:90:8B:DF:3A
            X509v3 Authority Key Identifier:
                keyid:BA:34:0C:77:85:76:57:BA:84:C4:AC:A3:60:39:87:4F:AF:12:38:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/BA340C77857657BA84C4ACA36039874FAF1238B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA340C77857657BA84C4ACA36039874FAF1238B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC8B1A3C4D93E589A9D67B1E49AAA7D546E32D7C3494C03ADB2EC444308EB747/0/3139302e3130392e3132302e302f32322d3234203d3e20323730313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:1c:e5:37:3e:15:df:17:1c:9d:30:1f:56:55:d1:4f:86:
         ae:28:86:d2:d6:d6:28:53:6b:30:96:20:83:2b:28:20:90:a1:
         a2:46:81:49:8f:04:ff:46:32:b0:66:e5:37:13:14:ac:32:8b:
         a2:6a:a2:9c:4d:3e:fd:88:12:58:26:50:82:2a:47:2c:43:7b:
         b4:c3:6b:71:9a:1b:41:2a:7e:0f:b0:7b:e1:c3:13:2d:08:cd:
         1b:2c:25:2c:58:4f:91:5d:db:34:b9:dd:a2:cd:a4:3a:30:4b:
         ec:88:fc:d7:16:96:4c:f2:ee:4e:49:9e:5d:93:ee:6e:44:11:
         49:b1:97:ea:f3:15:a8:7f:f8:f4:68:3d:06:9e:48:bb:77:b2:
         49:dc:89:51:3b:d5:9c:c1:77:93:b7:02:1f:07:d5:cf:ac:68:
         fe:36:9a:db:2f:b1:4d:3d:ab:e0:7f:f7:9d:8e:0d:ad:78:98:
         6b:52:c0:25:1e:6f:8b:fd:cd:d4:86:07:64:f5:e2:7c:b3:32:
         c3:3c:b2:0a:bb:fb:32:17:ea:80:1d:d5:45:0a:a2:7c:1e:5c:
         42:f7:57:aa:e2:5a:42:a0:00:c4:2b:ec:d3:19:c3:18:5d:33:
         7d:39:16:fa:05:a2:0d:ca:e8:34:6a:6c:ff:8f:e9:fe:4e:db:
         61:14:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:54 2024 by rpki-client on console-fra.rpki-client.org