Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231312e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231312e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          8mpcP2hLxeRmzg/H2dey4vN9DAOlIG9Nxve6uD4r+8Y=
Subject key identifier:   FD:17:D8:41:1A:FA:50:7D:BD:DC:D6:B2:02:EB:C5:A7:45:D9:5A:78
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       5DE2C0F529EF5DE372A345FFF5382B4CD83C7025
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231312e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:39 +0000
ROA not before:           Tue 05 Mar 2024 18:06:39 +0000
ROA not after:            Tue 04 Mar 2025 18:11:39 +0000
asID:                     52348
IP address blocks:        190.52.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e2:c0:f5:29:ef:5d:e3:72:a3:45:ff:f5:38:2b:4c:d8:3c:70:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:39 2024 GMT
            Not After : Mar  4 18:11:39 2025 GMT
        Subject: CN=FD17D8411AFA507DBDDCD6B202EBC5A745D95A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:58:78:ac:ca:ef:b0:ff:0f:d5:f1:74:88:3f:
                    76:86:1e:86:31:b5:91:ca:2d:9f:2c:16:a4:e0:eb:
                    52:31:c2:7a:c0:64:1a:40:41:4c:44:43:67:39:25:
                    31:f9:ee:e3:1b:89:78:72:39:5d:0b:02:2a:7a:d6:
                    78:9b:a0:c8:f1:1e:6f:a0:29:9b:44:05:6f:3a:fa:
                    a7:87:dc:f4:10:b1:86:ef:ce:d1:bd:f8:4f:da:60:
                    53:99:88:52:c2:01:85:63:c0:ee:4b:6b:a2:2f:a1:
                    1b:8d:fa:31:35:c0:d3:d0:26:8d:74:f9:08:73:99:
                    ac:c3:0a:65:17:9b:14:4d:94:5d:bc:3c:91:14:1a:
                    10:96:9b:8f:98:75:a5:35:7f:b7:08:af:33:56:8f:
                    27:5c:6c:21:33:fb:5f:93:14:a0:3b:7d:f6:08:8d:
                    65:15:f5:e7:29:5c:33:f5:9d:43:90:ba:0a:8a:df:
                    99:eb:f6:07:b6:c0:16:e9:86:d6:6e:1a:b1:7f:a4:
                    df:2c:6e:12:d7:c6:f4:85:95:74:12:c6:4e:8e:90:
                    40:59:78:6a:cb:dd:07:05:28:e7:37:91:3a:9c:7f:
                    b3:8f:22:9a:d2:22:0f:3b:f8:bb:37:0c:90:12:60:
                    18:bf:da:29:7f:97:f6:4f:4e:70:eb:4a:b1:7c:67:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:D8:41:1A:FA:50:7D:BD:DC:D6:B2:02:EB:C5:A7:45:D9:5A:78
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231312e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:a7:71:1d:30:69:d6:46:de:45:df:de:17:50:73:55:ad:
         b7:14:62:88:88:08:09:b8:2e:1d:12:b4:5d:64:24:52:43:35:
         33:ed:54:16:5f:70:25:fc:4d:a5:1e:9d:05:0d:11:72:e4:27:
         5f:a8:44:01:ef:f5:76:c5:b1:9d:f4:26:c8:e1:9b:9d:f4:89:
         53:93:dc:93:60:41:a2:24:0b:6f:b7:5f:1e:68:18:05:32:34:
         84:c5:80:ac:fc:ca:4f:fd:dc:da:61:d9:d2:98:2e:76:b4:2f:
         4f:ef:38:50:bd:a1:67:db:df:7d:59:9c:fe:50:4a:2f:8d:ac:
         cc:bc:b3:e8:42:46:76:65:9d:2e:81:c8:4a:26:a7:0e:54:35:
         e5:3e:a6:2c:ed:77:7a:4e:e5:02:83:3e:e5:67:27:08:fa:54:
         5c:58:60:1a:93:a9:a0:4d:cd:f5:89:8c:f7:45:24:1f:9b:d7:
         06:f2:c8:2c:08:15:ba:e4:22:8f:a4:a1:30:e7:65:18:6a:79:
         f8:4d:40:8a:0e:b2:ab:69:c2:0d:77:55:bf:da:3b:04:70:b8:
         fc:14:75:69:60:27:d8:a5:b2:ab:88:68:f5:ea:2b:5c:07:92:
         eb:dc:df:61:46:01:94:0c:a4:95:86:77:58:ca:bf:17:dd:d2:
         ba:f4:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org