Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa
File:                     3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa (raw, json)
Hash identifier:          gMxkqdhCBR/qCogx83fOR7rlVIb2/MTGfacno16Nfxo=
Subject key identifier:   3F:F8:52:68:C1:4B:14:38:2A:1F:40:E8:17:EA:9B:EF:AC:BE:5C:87
Certificate issuer:       /CN=501C1D2D606E5EF5408898671C988AE2CDB4066B
Certificate serial:       184E100B9A55761C9AEE6A77C13353C0E237E5C6
Authority key identifier: 50:1C:1D:2D:60:6E:5E:F5:40:88:98:67:1C:98:8A:E2:CD:B4:06:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa
Signing time:             Tue 05 Mar 2024 17:56:35 +0000
ROA not before:           Tue 05 Mar 2024 17:51:35 +0000
ROA not after:            Tue 04 Mar 2025 17:56:35 +0000
asID:                     52292
IP address blocks:        190.211.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 03:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4e:10:0b:9a:55:76:1c:9a:ee:6a:77:c1:33:53:c0:e2:37:e5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501C1D2D606E5EF5408898671C988AE2CDB4066B
        Validity
            Not Before: Mar  5 17:51:35 2024 GMT
            Not After : Mar  4 17:56:35 2025 GMT
        Subject: CN=3FF85268C14B14382A1F40E817EA9BEFACBE5C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:d1:e0:0a:37:26:88:7d:07:de:cd:41:50:
                    b3:67:b2:5c:88:79:43:7f:6a:a5:6c:44:d1:41:d4:
                    f7:0b:c2:80:63:a0:70:13:d6:17:99:02:bb:71:e5:
                    e2:cb:09:b9:34:71:76:c6:ea:f1:22:b3:d4:45:ec:
                    a7:41:e6:ea:b4:bd:c6:6d:1c:b6:54:31:b9:4c:9e:
                    8b:31:87:c9:b5:5b:e4:5c:75:a6:d2:d0:b2:62:6a:
                    71:b2:1e:d2:a3:c0:59:fc:16:b5:d6:75:a2:e1:da:
                    86:17:1f:ff:31:49:8d:db:23:3f:d3:62:a1:07:a4:
                    70:f4:06:c3:3a:87:39:a2:68:04:e4:1a:2c:71:d0:
                    d1:7e:0a:c3:64:6e:8c:75:8d:44:26:e2:9d:6c:46:
                    a5:49:cd:1f:a1:57:5e:01:64:66:8e:90:99:05:94:
                    96:b4:5a:20:86:0d:9b:b1:d8:09:58:7b:64:7b:a9:
                    ee:d5:8f:a9:46:8c:80:d1:72:bd:f4:48:55:5a:65:
                    0c:82:df:4d:3a:d1:68:e4:e8:2c:44:54:71:4d:09:
                    43:4e:48:92:00:7a:31:03:ba:69:c4:f9:cb:6f:e0:
                    bf:c9:7a:14:a3:4f:19:cc:a3:ec:61:1f:db:b5:6d:
                    20:cd:95:cd:94:6e:c4:de:88:a3:11:a1:b9:11:7d:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F8:52:68:C1:4B:14:38:2A:1F:40:E8:17:EA:9B:EF:AC:BE:5C:87
            X509v3 Authority Key Identifier:
                keyid:50:1C:1D:2D:60:6E:5E:F5:40:88:98:67:1C:98:8A:E2:CD:B4:06:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/501C1D2D606E5EF5408898671C988AE2CDB4066B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14863BCA38C83823ABCD005637A3E2DDBC6959A557899CE92D58CD65E4567B1C/0/3139302e3231312e3135322e302f32312d3234203d3e203532323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:a8:7b:03:91:3d:29:2e:90:68:45:77:07:33:83:22:b1:
         08:20:2f:c3:7f:bc:d9:cb:a0:f4:1b:11:68:4e:7f:57:63:b5:
         eb:e2:1e:55:48:6d:40:02:ea:a4:6c:81:3b:42:16:5b:42:e0:
         68:40:82:57:5c:ae:99:82:d4:1f:20:40:81:d2:1c:f3:e4:62:
         dc:c4:9c:de:8b:a5:08:97:55:ff:c9:47:95:3e:e0:1e:a6:ac:
         1a:a8:15:dd:fa:ce:9a:fd:0b:db:58:81:e5:99:69:02:e1:4c:
         6b:db:2d:43:4b:0a:a2:d7:c6:00:01:41:af:27:03:88:6b:f2:
         d2:ed:aa:3e:66:4c:02:a6:84:59:dd:d0:4c:ae:cb:a3:bf:78:
         62:a8:39:42:1e:3d:af:41:3e:55:b4:93:22:f8:81:04:a0:cd:
         f9:f5:b6:76:94:f9:ba:05:58:d6:ef:22:8b:b9:99:44:17:38:
         ff:fb:8c:d6:15:ec:55:b7:31:f0:ab:81:44:d1:4a:71:21:e0:
         b8:f7:29:cb:2d:67:c3:f9:2f:ef:39:09:fd:94:22:64:de:ed:
         56:90:61:e3:b0:12:60:a4:d6:97:e6:9b:73:df:8d:a9:4b:d9:
         ec:f4:47:f2:f8:54:fd:6d:80:76:36:aa:eb:43:ac:bb:90:f3:
         d4:4f:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:31 2024 by rpki-client on console-fra.rpki-client.org