Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3139322e302f31392d3230203d3e203133343839.roa
File:                     3230302e35382e3139322e302f31392d3230203d3e203133343839.roa (raw, json)
Hash identifier:          oN2SFMPtGuSIoZKuNV7tNtXLjENM109aVY00dLBauE8=
Subject key identifier:   69:34:AC:EA:03:B2:76:3D:76:73:1E:8A:DD:10:49:61:3A:4A:B3:79
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       752DA1D88183E3A32BF222DFBCE5AFC89FB98883
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3139322e302f31392d3230203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:54 +0000
ROA not before:           Tue 05 Mar 2024 18:01:54 +0000
ROA not after:            Tue 04 Mar 2025 18:06:54 +0000
asID:                     13489
IP address blocks:        200.58.192.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2d:a1:d8:81:83:e3:a3:2b:f2:22:df:bc:e5:af:c8:9f:b9:88:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:54 2024 GMT
            Not After : Mar  4 18:06:54 2025 GMT
        Subject: CN=6934ACEA03B2763D76731E8ADD1049613A4AB379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:6c:2d:de:27:09:26:fe:29:23:14:cd:01:
                    15:ff:04:a1:18:a0:6a:52:e9:f2:d5:30:86:2a:5b:
                    79:23:93:6e:24:e0:c3:26:e6:b0:03:c8:91:49:09:
                    aa:1d:26:c8:3d:23:5e:be:f5:df:d7:1a:42:a4:10:
                    cd:b6:88:97:84:4d:39:20:5f:73:85:56:06:1a:fc:
                    fc:e0:ab:70:86:6a:fa:a2:90:8b:85:83:63:69:89:
                    14:4d:20:11:fd:73:d4:c5:21:04:36:96:c5:3c:50:
                    07:e4:9b:f4:40:68:0a:6a:63:0c:91:19:c6:11:24:
                    d8:2e:ce:7b:f9:cb:ee:4c:f0:b2:bf:eb:ab:e7:e1:
                    b1:e5:63:ce:41:6e:71:54:dc:f5:d5:1f:72:d3:62:
                    6c:38:41:15:85:00:4a:b6:ed:0b:73:fd:8f:e3:6f:
                    de:a6:63:e1:66:7a:23:c4:e3:28:ce:57:8c:7e:31:
                    54:2f:43:b4:7f:e6:f9:7a:b1:b2:75:ba:4f:19:6f:
                    07:2d:48:fa:e7:47:11:f3:89:2a:51:ec:70:45:a7:
                    af:4f:09:98:e9:29:40:b4:e5:38:89:9f:23:99:38:
                    d7:64:8b:ec:e9:0d:7e:46:4b:f4:9d:49:19:3e:9b:
                    13:35:c0:cf:35:b9:ef:c4:70:bf:ee:26:c9:9d:16:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:34:AC:EA:03:B2:76:3D:76:73:1E:8A:DD:10:49:61:3A:4A:B3:79
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3139322e302f31392d3230203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:ab:4c:15:55:9e:66:bd:5f:a1:66:b8:cb:dd:cb:07:77:9d:
         99:b2:50:a1:13:0b:e1:45:fe:7e:b1:c2:80:75:9f:e6:31:82:
         f1:42:17:bf:fe:22:4b:d9:6f:e8:f2:c5:88:b8:5d:d4:6d:f0:
         93:4b:e1:6a:14:7d:b4:ab:37:48:c8:7f:2c:3c:a1:a4:1a:9c:
         a0:45:bd:77:83:62:c4:7b:42:e3:15:42:dd:21:24:28:0b:45:
         48:a5:4d:96:06:50:78:b8:53:82:a4:b9:c0:2b:5e:49:12:26:
         70:62:11:b9:26:5d:93:1e:7a:9e:55:37:57:53:be:f7:a1:ff:
         67:60:9a:ba:02:33:ef:58:05:de:a6:c7:32:16:e5:17:3f:6e:
         b0:af:02:b6:a8:3e:2d:1c:5f:56:25:dd:c9:7b:c3:9a:44:7a:
         3b:f3:c4:26:60:da:09:95:f8:8a:4e:24:f6:dd:33:82:aa:73:
         a5:60:db:3c:f3:d7:84:c9:08:5b:25:5b:37:52:11:1f:ff:1b:
         8d:a3:28:2b:6a:02:6d:2d:70:6e:1d:f3:a9:dc:88:a2:63:3e:
         92:8b:c3:c7:c0:be:cf:15:19:04:11:9e:84:02:7c:dc:70:2c:
         ee:d7:99:51:6e:b6:4d:4f:8a:b9:88:93:5c:9f:1a:85:ff:c8:
         87:13:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:51:45 2024 by rpki-client on console-ams.rpki-client.org