Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa
File:                     3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa (raw, json)
Hash identifier:          cqDnzZkb15mTwFQRNybJYiTfuqr9VTZ6q68rjDF8qK8=
Subject key identifier:   A5:CE:03:90:78:83:08:0E:3C:E6:8E:1E:8B:AC:F2:EB:2C:83:33:8E
Certificate issuer:       /CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
Certificate serial:       112D3C57D3E3F54EC07F11D49C78F1E480C936CB
Authority key identifier: 4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa
Signing time:             Tue 05 Mar 2024 18:14:38 +0000
ROA not before:           Tue 05 Mar 2024 18:09:38 +0000
ROA not after:            Tue 04 Mar 2025 18:14:38 +0000
asID:                     271881
IP address blocks:        190.113.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2d:3c:57:d3:e3:f5:4e:c0:7f:11:d4:9c:78:f1:e4:80:c9:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5260CA1AC2523F94022706248B4D5E9A1729ED
        Validity
            Not Before: Mar  5 18:09:38 2024 GMT
            Not After : Mar  4 18:14:38 2025 GMT
        Subject: CN=A5CE03907883080E3CE68E1E8BACF2EB2C83338E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:c0:8b:97:26:29:29:83:63:2f:3b:8d:97:
                    57:bb:00:a7:44:21:2e:c5:92:d2:70:17:21:52:5f:
                    09:bb:f1:61:26:2b:e4:c3:5e:3d:28:a9:fc:9a:e8:
                    f9:53:62:a4:e3:45:9e:3c:4a:fc:a3:4f:8b:d0:7e:
                    e3:6e:64:a6:71:b5:21:4a:86:ac:85:ef:8d:d8:52:
                    3e:a3:b6:d1:93:f5:f0:b5:c7:12:26:dc:ea:6b:31:
                    7d:f1:a8:38:b0:76:26:54:fb:ed:48:b3:cf:4a:4b:
                    ef:9c:69:9a:7f:f4:e4:ae:84:93:e9:ea:55:a9:3b:
                    c4:c4:a9:1b:3e:67:9a:d1:3c:61:ff:31:99:f7:3f:
                    d6:01:47:cc:f1:ca:29:44:f7:bb:80:80:f3:b0:af:
                    95:75:65:70:0c:8e:de:c4:97:12:51:41:4d:d1:ee:
                    1a:43:a0:be:f4:d7:ac:be:07:30:8a:09:7d:4e:68:
                    36:59:2b:f8:60:f4:6f:4f:d3:95:7c:a6:a0:32:8e:
                    7d:e4:78:e5:9e:ff:71:74:03:e8:47:2f:58:b6:fb:
                    0f:ab:1d:d4:5d:5a:92:30:01:07:d0:a2:cc:63:cc:
                    0b:9f:24:a6:40:09:0a:27:fb:c8:4a:62:12:37:a1:
                    de:27:d8:17:42:7a:49:1a:59:88:1f:c0:3a:8b:d8:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CE:03:90:78:83:08:0E:3C:E6:8E:1E:8B:AC:F2:EB:2C:83:33:8E
            X509v3 Authority Key Identifier:
                keyid:4B:52:60:CA:1A:C2:52:3F:94:02:27:06:24:8B:4D:5E:9A:17:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B5260CA1AC2523F94022706248B4D5E9A1729ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0434853173CE0B5198644701F5B2882F655588676B47D78C8522D4C52498BFD1/0/3139302e3131332e35362e302f32322d3234203d3e20323731383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:95:34:7a:01:84:88:cb:dc:37:6c:70:ab:23:b0:5e:5f:
         15:31:7c:6e:21:e6:22:99:5b:e2:45:d1:a8:19:82:d5:70:63:
         23:b8:2f:88:e3:41:3f:28:85:01:b3:35:d9:07:e8:f8:11:1b:
         95:99:c4:06:5d:a0:6b:d6:38:c4:fd:16:9e:fd:70:85:d5:7c:
         64:c4:2b:ee:5e:6a:9d:3e:c5:d0:22:a5:b9:cf:f8:e5:58:00:
         df:db:2c:6c:57:36:85:6c:5e:78:72:13:2a:fa:65:03:ab:a9:
         68:e3:ba:4c:da:dc:cf:2b:3a:a0:55:fd:11:8f:ee:49:fb:96:
         0f:91:a9:45:ab:d9:d7:9a:ab:a5:6c:fa:71:23:fa:58:10:59:
         a1:d9:a0:06:d4:79:03:b1:19:06:02:42:62:61:5c:ed:9a:49:
         4e:8e:2c:97:d1:5d:a0:64:06:a6:d9:00:0d:a3:cc:ba:4b:46:
         d5:b3:2d:4f:24:a3:a9:5e:21:5e:5f:1b:57:68:49:48:4a:8d:
         1c:6e:71:63:23:f9:de:1c:f8:9a:81:2c:60:20:99:ae:68:2f:
         90:36:15:b2:42:9a:ab:45:76:75:fb:ea:45:f0:d4:cf:77:8b:
         39:06:2b:98:d3:a9:e5:ac:cd:bf:2a:f6:6d:02:b5:69:58:5e:
         e4:be:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org