Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231382e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231382e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          XYHG+jgClwOSJ2h4Qc3lhDZhxfthOOxs4QUFBbgHn64=
Subject key identifier:   53:D4:5D:DA:76:23:7E:B9:AA:BF:A2:AE:9F:97:DF:C8:11:5D:B7:B4
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       5FDE048C59C2E993D7841BFF58A18C5F30110595
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231382e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:45 +0000
ROA not before:           Tue 05 Mar 2024 18:06:45 +0000
ROA not after:            Tue 04 Mar 2025 18:11:45 +0000
asID:                     52348
IP address blocks:        190.52.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:de:04:8c:59:c2:e9:93:d7:84:1b:ff:58:a1:8c:5f:30:11:05:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:45 2024 GMT
            Not After : Mar  4 18:11:45 2025 GMT
        Subject: CN=53D45DDA76237EB9AABFA2AE9F97DFC8115DB7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:6b:05:2d:d0:3b:a1:b0:95:e4:94:46:e9:
                    5c:f5:7c:66:91:ad:ea:c8:b7:4d:44:62:6a:03:03:
                    b0:12:0a:09:9c:ee:d8:53:9d:ca:e1:85:98:99:98:
                    eb:46:68:17:2c:2d:5d:fb:ff:80:2d:b1:42:33:bd:
                    ae:07:91:a9:e8:f0:66:67:6a:1f:0a:19:ac:c9:16:
                    b0:8c:cf:c5:cf:c1:17:77:2a:e5:e2:62:d4:cd:ba:
                    3c:6c:5e:17:18:e5:7f:14:9e:01:06:4e:0b:c2:fd:
                    be:c0:b4:be:ff:65:ff:ba:99:e3:45:db:8f:ff:cb:
                    d8:dc:8a:a8:7d:02:bb:26:a3:c1:0b:46:85:3d:40:
                    2b:e1:be:80:63:67:45:b3:bd:48:8f:ac:8b:04:a2:
                    42:af:f4:72:c3:b9:09:9c:5c:61:05:7b:fc:67:01:
                    ad:5b:08:2f:e9:0d:d8:25:78:ed:1c:04:bc:1e:0e:
                    c2:96:53:ac:ce:f8:0b:98:62:57:f4:5d:b1:22:55:
                    16:cc:82:57:95:e2:10:f4:87:45:09:df:4b:f5:8c:
                    0a:98:b0:92:4b:79:1c:2b:f4:2b:ed:a4:1f:b5:9b:
                    c3:d8:e6:c6:89:30:4a:45:da:c8:b5:f1:8e:5f:a5:
                    b3:40:38:aa:70:8f:85:2a:ea:35:22:3c:9e:39:53:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:5D:DA:76:23:7E:B9:AA:BF:A2:AE:9F:97:DF:C8:11:5D:B7:B4
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231382e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:be:90:7e:11:f4:cc:fc:ec:cf:93:4a:80:d1:af:a1:dd:
         7d:98:85:da:30:76:e6:05:b3:02:8a:27:80:dc:e5:be:cd:50:
         f4:68:27:84:ad:e0:55:a9:9f:a9:dc:a1:b7:37:c0:b9:b3:34:
         b6:70:d6:00:61:ac:e3:27:1e:13:fa:80:06:73:ed:d1:ce:76:
         4e:b0:28:e2:a5:7a:35:57:26:f9:a7:9d:ab:ba:10:aa:a8:af:
         05:bb:e6:8f:02:69:2c:5a:82:65:4e:66:c7:09:e4:20:35:cc:
         9e:25:dc:8b:d1:10:7c:9a:93:78:b1:7a:7c:23:8e:d1:58:ae:
         46:18:04:5a:33:fb:bf:bc:a0:86:ed:bd:5f:f6:29:32:fb:2b:
         53:f4:e3:f1:4c:64:9f:4b:75:9b:e8:5b:7c:4b:05:08:fd:61:
         ae:ba:4a:08:e3:70:ec:26:76:15:1a:35:47:45:c2:e2:03:86:
         98:7f:8e:4d:94:a8:7e:7b:cf:e9:c6:1b:b1:3b:df:44:c5:7a:
         28:cb:44:1a:22:3c:09:27:43:f7:d6:bc:a4:46:77:36:07:db:
         67:f5:36:04:52:fe:4e:0a:70:2f:40:a0:6c:4f:7f:97:e4:6e:
         35:86:5f:88:ec:02:d9:08:ea:72:94:a7:1d:2f:de:70:6c:a2:
         1a:d8:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org