Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233392e302f32342d3234203d3e203238343332.roa
File:                     3230312e3133312e3233392e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          mvRrke3nwj5fvAsC/2mxfWfKftQoQD1nAQCANF2lb/M=
Subject key identifier:   B4:B1:59:D4:6B:C5:5C:EC:5F:9A:18:28:11:D1:B5:EB:CE:85:B4:9E
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       15507A04BC73274CB09F695ABDFCEB63A51ADF9A
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233392e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     28432
IP address blocks:        201.131.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:50:7a:04:bc:73:27:4c:b0:9f:69:5a:bd:fc:eb:63:a5:1a:df:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=B4B159D46BC55CEC5F9A182811D1B5EBCE85B49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:02:b6:f2:e8:cc:c1:f5:39:5c:6b:79:33:
                    7a:63:4b:1a:dc:10:ae:27:8e:49:cd:9a:fe:30:3e:
                    6a:5a:10:35:9c:7a:35:c1:f8:e4:37:a3:1c:23:4e:
                    ea:e8:2f:d4:58:2c:55:45:89:3d:e4:66:30:b7:7f:
                    5c:ff:14:44:54:84:f1:33:7c:cc:3b:e3:1d:ba:33:
                    e4:d0:69:67:04:9c:cc:e6:d7:93:04:67:88:b9:bd:
                    74:ee:0d:df:4c:e8:ea:a7:78:fd:00:d0:b9:ec:dc:
                    ba:c5:8c:1d:34:75:2c:6c:5a:f1:4f:52:45:b5:6f:
                    00:03:a9:a9:f6:b5:e7:89:19:05:17:2d:b5:28:36:
                    b9:38:aa:81:c0:67:3a:c4:a4:80:0e:af:82:fc:40:
                    b6:5d:42:ac:10:4b:cb:cc:3c:b5:53:a9:91:0e:3d:
                    62:66:22:17:3d:fd:b9:6a:a2:c0:d1:7a:12:ed:df:
                    9d:dc:81:93:41:54:e7:dc:c5:65:4c:da:5a:5a:26:
                    0f:33:ad:90:94:48:31:9e:c6:ff:45:2a:d1:82:3f:
                    8f:53:27:24:56:61:23:24:6c:5b:69:7f:bf:27:97:
                    86:4c:df:4c:9a:c4:35:23:36:f5:00:5c:5b:4a:9c:
                    25:ab:14:ad:8f:22:68:d3:45:60:67:ff:59:75:14:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:59:D4:6B:C5:5C:EC:5F:9A:18:28:11:D1:B5:EB:CE:85:B4:9E
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233392e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:93:6e:f3:e7:87:0d:09:15:da:08:ef:c8:a7:0e:1d:1b:be:
         60:82:cf:c7:87:d5:0c:6c:6f:2a:f9:49:1a:9f:b5:48:41:bb:
         58:f6:7b:bb:76:3f:71:b3:c0:e9:b8:7d:93:c5:a1:fe:53:d3:
         81:74:42:52:8d:86:d7:ef:62:e8:6c:8f:5a:ed:0f:c4:d9:7f:
         41:c0:a8:8b:8a:f5:75:a8:22:87:7c:4f:66:1d:2e:1e:42:e7:
         85:6c:5b:10:04:37:70:61:93:80:c4:66:87:40:e1:32:65:79:
         a9:10:bf:cf:76:ca:81:aa:da:8e:d6:5c:91:0b:50:0c:6f:a9:
         3c:c8:b7:37:62:0a:f6:94:a6:f0:bc:80:35:71:b5:bc:11:1e:
         89:69:ff:ae:15:1b:19:be:c3:ed:9c:a1:85:fd:6a:88:40:be:
         2f:d1:6c:bd:7d:3f:49:20:93:84:f0:63:3d:ca:e5:9a:a1:c1:
         60:ef:67:04:7d:8a:6c:f7:ee:ae:69:58:75:00:b3:f3:c7:b1:
         2a:6b:79:da:6c:5a:ac:5e:33:f2:1b:35:b5:ab:e9:ad:5f:32:
         4d:dd:ec:a5:98:89:60:8b:4e:89:17:f6:ae:b6:59:55:69:e9:
         43:e8:4a:65:aa:88:9f:bc:00:5b:30:fd:22:5e:5c:78:ef:01:
         a8:46:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:20 2024 by rpki-client on console-ams.rpki-client.org