Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130362e302f32342d3234203d3e203532343338.roa
File:                     3139302e3138352e3130362e302f32342d3234203d3e203532343338.roa (raw, json)
Hash identifier:          AhdBgEhAF6rwN36pwGCH2bcvZh32tdFWwN0oOFey7rA=
Subject key identifier:   2C:60:30:B3:28:3F:2A:C6:13:60:26:BE:62:65:13:39:88:DA:CA:A9
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       49FCF0191B764CE7625A3611C1B7B453CBABBB4E
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130362e302f32342d3234203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:36 +0000
ROA not before:           Tue 05 Mar 2024 17:35:36 +0000
ROA not after:            Tue 04 Mar 2025 17:40:36 +0000
asID:                     52438
IP address blocks:        190.185.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fc:f0:19:1b:76:4c:e7:62:5a:36:11:c1:b7:b4:53:cb:ab:bb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:36 2024 GMT
            Not After : Mar  4 17:40:36 2025 GMT
        Subject: CN=2C6030B3283F2AC6136026BE6265133988DACAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:97:ab:58:1d:f6:c4:94:ac:0b:82:04:d8:
                    c7:d0:82:48:89:42:e0:5c:fe:62:5f:40:44:0b:65:
                    1c:28:dc:e9:c3:f0:ea:c7:52:b9:62:19:a4:ce:ff:
                    65:b7:01:75:42:5f:c5:e5:10:d2:ca:ea:0a:2a:7f:
                    7a:5f:4e:bc:6e:ca:d3:58:00:08:fb:ca:0c:da:ad:
                    7f:35:9c:94:d7:7a:b0:f5:8c:2a:b8:d0:80:51:15:
                    c3:e7:af:85:c6:cc:3e:1b:1b:6d:c9:1e:61:ef:79:
                    6b:a2:52:8a:7f:2e:09:ac:3d:0c:4c:d4:b1:cd:a0:
                    e2:12:90:5d:13:1b:45:0d:2b:05:e2:3f:73:75:f5:
                    c4:7a:df:82:d8:01:d0:7e:ee:e9:b9:6f:29:0c:87:
                    b4:5c:92:68:24:e4:29:35:6f:73:80:5c:74:ab:93:
                    7d:45:04:5a:15:16:30:ba:38:4f:10:cb:ba:b3:20:
                    0b:ae:bc:23:c9:84:67:c2:87:e6:97:f5:d6:58:12:
                    95:f9:68:57:31:54:94:e7:d6:a1:3f:6d:ab:f2:4f:
                    56:eb:16:07:b3:0e:84:6a:7c:3d:09:b6:c6:85:41:
                    b7:1a:7d:18:88:9e:af:11:f2:a0:d8:97:c2:1d:a8:
                    30:07:24:d3:6c:27:94:9b:da:01:22:6c:07:14:40:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:30:B3:28:3F:2A:C6:13:60:26:BE:62:65:13:39:88:DA:CA:A9
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3139302e3138352e3130362e302f32342d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:ec:4a:49:f2:d8:68:e6:e3:8a:78:a8:7e:66:60:f2:a9:
         af:a4:50:6a:b0:4f:ef:5d:c4:c9:a5:4a:a1:49:49:44:61:d0:
         88:3e:44:0d:7f:eb:3a:81:b9:37:7f:05:c6:73:8a:12:40:02:
         77:ac:ab:02:e3:d4:3d:85:0b:30:4d:94:3e:32:5f:6e:d9:4a:
         62:12:db:92:86:3c:38:0e:36:36:69:90:3d:0c:49:de:6d:95:
         89:98:11:ca:dd:4d:c2:2d:f5:ed:9f:1d:5c:8c:8e:47:c5:eb:
         19:60:64:2b:e5:e8:13:7a:c0:03:31:f4:38:ea:8e:2d:a9:7a:
         20:8f:4f:41:8e:f0:d0:08:eb:75:9b:52:60:f0:10:a8:a9:e4:
         4f:7c:c7:c4:2b:39:63:3b:38:15:2d:de:b7:b7:3f:6e:ea:18:
         b7:e8:e7:ec:7c:90:37:4f:38:09:a9:39:35:67:ee:9e:8c:d5:
         78:83:80:73:b7:ee:a3:ba:b9:80:56:44:73:37:47:26:7b:fd:
         ea:c9:d8:e0:5d:d8:31:57:5b:fe:88:fb:77:98:47:85:87:c4:
         51:d8:25:0e:5d:41:84:6d:bb:e6:a7:f5:08:ea:a9:bc:be:e8:
         2c:f8:33:70:86:6e:27:d2:f8:5b:45:a4:d5:dc:89:cc:3f:a5:
         cd:30:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org