Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231372e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231372e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          zsJsV2I7KYAzjmdNSGgK3MJ2o5WOaAYJz4ukv+M0qe0=
Subject key identifier:   61:71:39:68:07:3E:0A:FA:1A:57:0B:1C:8E:D5:D4:8D:F4:90:FE:87
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       761EA8B072EEE51288AEC17CFF22804FE684CF74
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231372e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:41 +0000
ROA not before:           Tue 05 Mar 2024 18:06:41 +0000
ROA not after:            Tue 04 Mar 2025 18:11:41 +0000
asID:                     52348
IP address blocks:        190.52.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1e:a8:b0:72:ee:e5:12:88:ae:c1:7c:ff:22:80:4f:e6:84:cf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:41 2024 GMT
            Not After : Mar  4 18:11:41 2025 GMT
        Subject: CN=61713968073E0AFA1A570B1C8ED5D48DF490FE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:c1:89:cd:ef:54:f5:2d:10:ad:8a:dc:11:
                    d9:a5:16:12:5b:1b:b6:d3:63:cb:ff:89:61:87:bf:
                    c7:b8:b5:65:d1:0f:e4:08:b7:6e:01:44:50:00:67:
                    83:fc:60:9e:39:4d:a1:2d:c7:c8:2e:c1:8f:d9:d0:
                    a5:43:5b:85:58:88:98:78:47:52:22:40:d8:83:f5:
                    b3:d6:44:4e:6b:31:6f:16:62:7e:7b:d2:26:49:76:
                    e9:7e:34:18:fa:3c:a3:05:bd:bb:88:4b:e4:58:04:
                    ba:f9:c6:d3:31:c5:9e:27:61:9d:51:42:ba:5a:9d:
                    e5:9f:89:5b:af:6b:2f:5d:34:6f:7c:cc:2d:bc:5a:
                    73:9f:2b:fb:b9:8e:56:f1:d6:1e:d9:bc:ef:8f:08:
                    a1:f9:95:c2:a8:f7:93:21:5b:28:9b:20:04:00:6b:
                    07:d2:eb:ec:30:1b:02:20:fa:51:cd:6c:ca:68:4b:
                    1c:1f:c3:75:fe:82:ba:dd:ec:49:d7:25:fb:29:18:
                    72:86:e7:62:5c:e3:2a:70:cd:47:e6:58:ca:80:09:
                    ba:01:c5:ac:61:cc:53:8f:e5:b8:cf:66:73:98:42:
                    64:10:e6:68:5e:36:93:74:70:92:1e:53:44:65:b5:
                    5e:8a:2e:ba:41:fa:50:9d:9d:95:13:38:ad:a4:cf:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:39:68:07:3E:0A:FA:1A:57:0B:1C:8E:D5:D4:8D:F4:90:FE:87
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231372e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:37:47:27:58:54:e7:46:71:1b:61:8e:7c:c2:14:bb:a5:d2:
         c8:a5:77:6a:24:68:12:15:14:3f:31:63:4d:e5:32:e4:ac:62:
         b5:16:92:2b:e2:da:c5:8d:5e:9a:af:fa:c6:3b:35:09:7e:41:
         f2:21:45:0b:c5:30:86:c8:ff:b7:58:e8:e6:60:40:fe:0b:36:
         39:4d:90:b8:bb:46:3a:7d:79:40:98:10:6b:5f:b9:68:c0:2a:
         3d:ce:8e:96:09:06:82:4a:40:45:ed:94:ed:0d:b1:50:86:d8:
         05:79:41:8e:4d:47:04:2c:c5:ac:01:9a:d4:6a:a6:94:17:c8:
         2c:9b:ba:6e:e2:ea:c8:7f:5b:bc:96:85:57:45:36:63:b1:70:
         67:d8:2f:a8:ea:3f:c3:92:03:41:2e:52:a4:0b:4b:da:55:f7:
         1f:b8:1c:4e:6b:e3:ca:0a:1e:f0:10:e3:57:a4:7f:ba:b9:7e:
         38:dd:c1:d4:19:51:7d:63:24:61:bb:5b:bf:07:3c:7f:58:67:
         a2:bf:cb:36:ae:0e:4b:83:70:91:a7:3f:8d:8e:49:de:b9:50:
         06:90:94:f8:d5:a6:6b:a8:20:22:1e:58:af:df:72:22:93:ca:
         23:1c:2a:67:d8:d5:ad:fe:53:a7:7e:b1:d7:7a:bf:0c:e1:a1:
         43:bb:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org