Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3139302e3130332e36342e302f32302d3232203d3e203532343935.roa
File:                     3139302e3130332e36342e302f32302d3232203d3e203532343935.roa (raw, json)
Hash identifier:          N4rndsddYrv7kSgUjt+WxGpKAQzwQeg4H6Y2dT4S2mo=
Subject key identifier:   35:06:1A:30:0C:D5:C3:91:C0:B3:7B:55:3A:D3:D5:88:FA:5D:CD:85
Certificate issuer:       /CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2
Certificate serial:       7480B7EA377FDB80A1FC60E99E1AA536ED095227
Authority key identifier: 3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3139302e3130332e36342e302f32302d3232203d3e203532343935.roa
Signing time:             Tue 05 Mar 2024 17:50:22 +0000
ROA not before:           Tue 05 Mar 2024 17:45:22 +0000
ROA not after:            Tue 04 Mar 2025 17:50:22 +0000
asID:                     52495
IP address blocks:        190.103.64.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:80:b7:ea:37:7f:db:80:a1:fc:60:e9:9e:1a:a5:36:ed:09:52:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2
        Validity
            Not Before: Mar  5 17:45:22 2024 GMT
            Not After : Mar  4 17:50:22 2025 GMT
        Subject: CN=35061A300CD5C391C0B37B553AD3D588FA5DCD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:2d:19:29:a7:a8:27:97:64:90:99:bd:da:
                    ae:eb:7b:74:32:68:56:9b:61:40:89:4a:72:f9:3d:
                    85:e4:6f:10:6c:2f:6f:0e:dc:d0:33:3e:2a:f5:70:
                    f1:db:77:57:e5:b6:67:5f:6e:da:30:6b:09:46:7e:
                    fd:8c:17:2f:dc:d8:99:da:0c:02:34:60:09:d9:7b:
                    03:c9:5f:fa:db:71:dd:e7:2b:89:58:29:97:41:02:
                    b7:c7:9f:65:9e:59:74:3a:90:2d:ba:45:f4:31:4d:
                    cd:44:ac:68:82:18:20:a1:04:4b:20:80:3e:9f:0c:
                    ac:0e:9d:38:93:02:11:9a:13:7c:96:d6:71:8d:9e:
                    ba:9f:87:1c:96:a2:75:51:80:01:80:96:d3:27:30:
                    63:9e:a7:75:a3:f2:6d:23:d7:5d:52:7b:74:25:80:
                    57:cb:c9:9f:b2:9e:89:a1:cc:31:79:a9:db:40:4b:
                    49:89:c5:91:69:9d:16:3c:39:75:65:66:b4:75:fb:
                    7c:29:15:a8:0d:c4:73:69:a0:fe:4a:16:6f:1a:76:
                    c3:7f:95:9d:6e:6a:29:d5:60:ef:ef:27:70:5a:c4:
                    a8:4b:0b:12:53:4c:aa:8d:66:42:b9:88:f2:54:4f:
                    0b:e2:f7:0c:70:47:a8:ce:51:9b:e5:3a:12:2f:61:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:06:1A:30:0C:D5:C3:91:C0:B3:7B:55:3A:D3:D5:88:FA:5D:CD:85
            X509v3 Authority Key Identifier:
                keyid:3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3139302e3130332e36342e302f32302d3232203d3e203532343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:83:e5:60:34:ef:6f:cb:34:01:4d:a3:74:b6:5d:8f:c5:
         e0:5c:58:e8:e1:d8:0d:56:3c:ed:36:7d:2d:2d:7a:37:39:0c:
         4a:d5:02:8e:ef:fe:dc:8b:26:08:34:d6:9c:4d:7e:3d:aa:3c:
         24:99:1d:78:a1:40:91:da:4c:eb:2f:e4:43:0b:21:ec:5d:a2:
         09:28:f3:71:7a:be:88:2a:20:9c:49:18:5b:9d:64:02:48:b4:
         ca:42:80:e8:12:88:e3:b2:a8:9f:ed:3a:96:28:41:99:9b:dd:
         8d:3e:bb:16:37:c2:ba:71:38:13:21:fb:da:b6:85:17:48:10:
         d7:58:1d:64:d0:98:94:50:30:e1:50:ad:20:c8:8d:8e:65:69:
         62:e9:e3:8d:a5:c4:bb:42:32:23:00:a2:9f:34:e9:13:bb:64:
         c0:20:40:09:bb:f2:59:56:bb:3e:76:ed:6a:44:d4:45:b3:ce:
         e4:73:1f:19:6e:cc:0f:7c:dd:b3:e8:0e:83:ba:55:68:ef:7a:
         c5:7c:84:46:c3:f0:4d:fa:b3:28:a7:72:3c:6d:91:a5:34:83:
         6b:4f:4b:52:39:e8:1f:d8:ae:10:b6:71:62:10:05:75:30:4d:
         38:80:e4:77:cf:97:43:d8:49:fd:45:99:64:28:18:63:6e:e9:
         86:dc:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:52 2024 by rpki-client on console-ams.rpki-client.org