Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3230382e302f32302d3230203d3e203532333438.roa
File:                     3139302e35322e3230382e302f32302d3230203d3e203532333438.roa (raw, json)
Hash identifier:          InRPT+6wpAU/it98Ksndk0AZ3iRuU10oAkZsZtAmwGE=
Subject key identifier:   40:47:E7:C0:D9:AB:F6:A9:DA:FD:35:9B:C2:C7:C6:B7:00:23:87:80
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       59C999A5A743CF23D2397F409553EBCA59282659
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3230382e302f32302d3230203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:44 +0000
ROA not before:           Tue 05 Mar 2024 18:06:44 +0000
ROA not after:            Tue 04 Mar 2025 18:11:44 +0000
asID:                     52348
IP address blocks:        190.52.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c9:99:a5:a7:43:cf:23:d2:39:7f:40:95:53:eb:ca:59:28:26:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:44 2024 GMT
            Not After : Mar  4 18:11:44 2025 GMT
        Subject: CN=4047E7C0D9ABF6A9DAFD359BC2C7C6B700238780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:9a:87:98:9c:0c:b2:be:ac:bf:86:3a:8e:
                    b1:d4:76:ea:0e:4a:21:7d:95:70:85:fd:3c:a8:c2:
                    5f:5e:f8:97:87:a8:7a:00:5f:54:51:f6:be:55:b1:
                    e1:23:d3:2c:02:52:89:df:78:bb:ad:60:04:32:32:
                    37:9e:9b:68:9f:c3:06:f8:83:1f:8d:12:f2:94:57:
                    a4:ba:ff:87:9d:7d:01:61:2c:00:23:95:73:df:41:
                    71:12:8f:b6:cd:90:ae:1d:01:9e:ea:43:64:80:a4:
                    ed:26:81:6f:a4:37:90:53:69:15:94:a3:42:f9:77:
                    d9:bc:83:90:c0:9d:a9:8e:2e:7f:46:df:8c:e6:e5:
                    85:c6:68:45:30:8c:86:c4:7d:b8:71:eb:62:c2:12:
                    3d:d4:4a:cf:54:8a:15:6f:f3:51:e0:3c:b1:d9:7d:
                    5a:86:fd:96:0b:1c:9c:82:b0:c5:34:67:35:13:b1:
                    b6:98:89:3e:3c:25:e8:16:9a:07:c4:92:0c:b6:e5:
                    f9:5b:dd:39:ca:13:57:bb:9a:5e:98:fb:4c:e6:ec:
                    8e:2a:97:74:b8:d5:72:62:5a:f0:8d:17:6c:95:90:
                    44:76:30:3e:13:0c:f6:f5:83:84:25:0f:5b:dd:24:
                    d0:81:92:fa:4b:6d:e6:af:2f:f8:ba:23:c7:7b:17:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:E7:C0:D9:AB:F6:A9:DA:FD:35:9B:C2:C7:C6:B7:00:23:87:80
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3230382e302f32302d3230203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:a9:2d:cf:2a:dd:b5:e4:8d:e8:9d:18:2f:8b:ff:62:2f:
         63:b3:18:17:45:c7:87:19:09:e4:62:6f:d2:20:f5:06:9f:8b:
         dd:de:d9:0d:cd:32:a9:ba:f5:73:88:96:a1:af:47:98:8d:cc:
         f4:6b:bc:4e:7a:d4:f9:a6:ce:7f:29:1a:09:f5:ba:ae:8f:10:
         3c:5d:9d:89:ae:3d:2b:30:ce:f4:9b:0f:89:5c:62:66:5e:d0:
         0f:e2:ce:07:c1:e1:cf:ba:8b:92:89:a5:c7:66:4d:53:d7:21:
         83:34:1e:8f:77:1a:f8:bc:a6:7d:69:84:cb:03:87:e3:3f:04:
         20:cf:8d:e6:f2:45:78:26:e0:e5:52:44:40:cf:c6:2f:f5:c1:
         8f:fd:c5:b5:8c:21:82:a7:ad:5f:11:ff:2c:fb:eb:d7:f3:14:
         56:8a:cd:ee:c7:d1:0c:9e:6e:e5:52:e8:9d:0b:29:0b:0d:3b:
         ab:84:7c:b6:32:0c:e5:6f:72:97:5b:ba:0f:7e:25:15:59:e4:
         8d:05:c2:d2:d1:e0:bb:06:82:f0:11:ed:e8:eb:6d:4c:43:ae:
         94:69:f6:d2:4b:87:d2:e9:5c:25:37:9b:60:e4:58:cd:af:d9:
         8b:ce:9e:68:12:d3:53:f3:ed:60:1a:8b:f8:6b:d8:a5:6e:48:
         81:ba:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org