Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34312e302f32342d3234203d3e203532333438.roa
File:                     3139302e31342e34312e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          NxonhqkOJ8THyqppPW7yDKpAxlhN9FLpJF3PIWy+2+8=
Subject key identifier:   02:5D:0A:11:17:E7:C6:1D:45:85:1B:6D:11:6D:80:93:48:E1:F9:BE
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       12C29920AC57B9E907CFEAA8E45FA6D104F3642D
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34312e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:41 +0000
ROA not before:           Tue 05 Mar 2024 18:06:41 +0000
ROA not after:            Tue 04 Mar 2025 18:11:41 +0000
asID:                     52348
IP address blocks:        190.14.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c2:99:20:ac:57:b9:e9:07:cf:ea:a8:e4:5f:a6:d1:04:f3:64:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:41 2024 GMT
            Not After : Mar  4 18:11:41 2025 GMT
        Subject: CN=025D0A1117E7C61D45851B6D116D809348E1F9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:cf:c9:fd:38:06:5f:e8:d1:f8:ed:2b:d9:
                    1a:e9:e2:33:63:8d:3a:dd:c1:5a:82:06:de:0f:b4:
                    2a:fc:96:ee:b7:42:b1:40:1b:30:68:71:36:c9:11:
                    d3:0e:5f:0d:80:45:af:32:30:2f:04:c3:9c:be:61:
                    0e:28:b4:6d:e1:76:17:8d:0a:75:ee:7a:70:f1:9c:
                    d9:e5:c5:aa:9f:c0:61:ac:5b:5a:21:f8:d1:e7:d4:
                    12:6d:21:f0:5e:1d:40:48:d4:72:06:71:83:95:e9:
                    8e:1c:51:6d:bb:99:89:d0:fc:fa:64:2b:97:03:72:
                    b2:19:ab:8c:f8:ef:17:64:21:d5:a7:b1:a6:bb:68:
                    c0:d0:e3:ba:35:d5:61:5c:97:f2:0a:64:a3:1f:89:
                    6a:5e:4c:6f:07:88:90:c5:d5:35:44:ea:94:6d:51:
                    03:54:a7:9d:7f:a3:b2:d7:43:06:b1:09:32:da:c6:
                    c7:f6:1a:6c:eb:be:77:a1:74:af:d8:bf:41:24:c5:
                    4b:2a:bd:a2:88:b3:60:6a:12:6a:8e:f9:80:f6:77:
                    14:29:1f:9a:13:c6:08:b5:80:04:08:2d:45:27:7a:
                    0a:a9:ac:40:e6:a0:8c:0a:91:6b:e2:d4:d3:2a:a7:
                    1a:83:fa:80:fd:39:b0:28:31:df:80:4a:05:25:cd:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:0A:11:17:E7:C6:1D:45:85:1B:6D:11:6D:80:93:48:E1:F9:BE
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34312e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:5e:a7:b8:95:fd:46:8f:dc:7d:2a:e1:52:6f:d1:5e:ce:
         88:da:e5:6b:ab:f3:9a:e4:ee:af:d1:72:1f:a8:01:9b:d9:95:
         2d:b1:cf:cf:57:7e:5d:ad:3a:f0:27:13:63:a4:5e:44:06:23:
         e7:66:5a:12:6a:c8:53:52:7b:01:e6:19:54:75:5f:a0:2c:7a:
         36:dc:22:14:8b:41:8d:8f:76:7c:ce:4c:73:91:0f:44:b9:f2:
         a7:60:b9:00:d5:01:aa:ae:e8:a8:d6:cf:10:0b:e8:d3:a4:25:
         90:ba:23:43:5e:c1:c8:9a:04:43:f1:1d:d6:24:da:ed:70:35:
         75:a5:e2:ef:17:ba:3c:57:92:09:8e:51:b3:9b:c0:f2:35:4e:
         3b:1e:72:7b:f1:2f:60:dc:fb:a8:f4:c8:0b:02:78:09:ca:00:
         8e:8e:71:7e:7e:0f:e2:99:31:fc:7a:f5:85:08:f6:47:42:8d:
         2e:b7:00:7a:b4:6f:7a:74:33:ac:8d:e4:7b:bc:97:5d:3d:41:
         a5:5b:7d:f6:44:8d:db:29:df:9c:dc:85:11:82:be:96:f2:4d:
         b5:41:03:51:63:db:68:bc:54:df:a5:31:b0:75:a4:13:f1:87:
         c9:94:42:b1:5b:6e:d8:4d:4b:df:1d:bb:a9:1f:12:a9:15:24:
         5a:51:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:32 2024 by rpki-client on console-fra.rpki-client.org