Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231392e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231392e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          vPHJU2swQvsxZaHEdu1MehAZ+9FgDYlZmMCOnwVBlnI=
Subject key identifier:   01:87:65:5D:A0:A6:91:C3:CE:E1:04:F1:47:3C:07:58:D8:D4:FF:AF
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       051C4190C43DEDFF7ADFF0A933B3AE33C90289A2
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231392e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:45 +0000
ROA not before:           Tue 05 Mar 2024 18:06:45 +0000
ROA not after:            Tue 04 Mar 2025 18:11:45 +0000
asID:                     52348
IP address blocks:        190.52.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1c:41:90:c4:3d:ed:ff:7a:df:f0:a9:33:b3:ae:33:c9:02:89:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:45 2024 GMT
            Not After : Mar  4 18:11:45 2025 GMT
        Subject: CN=0187655DA0A691C3CEE104F1473C0758D8D4FFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:68:2d:19:bc:34:54:1f:4a:e1:fd:d6:d8:
                    38:11:7f:89:83:26:c7:3f:e5:aa:c6:8a:d6:96:92:
                    51:c4:fd:49:86:6b:ee:f9:9e:a3:56:80:02:ea:87:
                    9f:3e:01:40:96:97:e7:6b:9a:cb:44:55:ea:4e:32:
                    45:9f:ac:c3:98:2a:2e:23:2e:71:38:83:43:29:ca:
                    35:59:13:0e:46:9f:fe:02:c6:ca:64:93:09:be:ed:
                    0f:02:43:2c:6f:f6:b3:6f:90:95:0c:f3:59:c0:9b:
                    5c:22:ba:0a:5e:13:46:8b:5f:bf:3d:aa:0d:76:8f:
                    2d:6c:01:82:a9:ab:bd:6a:39:f8:dd:b8:e8:71:db:
                    91:c9:01:f9:74:f6:c4:7d:76:40:65:00:d7:af:f7:
                    60:fa:39:c5:34:85:98:17:0d:f3:a3:b0:b2:70:84:
                    b4:8e:72:b5:17:aa:8d:24:e4:b7:c0:e0:cb:69:68:
                    12:9b:a3:e3:24:93:8d:cf:68:9e:e6:d7:53:84:44:
                    aa:52:a1:50:6d:ca:10:9d:93:97:df:f5:2e:fb:5c:
                    c8:61:49:00:f4:81:e3:8a:5e:dc:59:12:dd:e5:0c:
                    fe:5e:e9:22:94:16:02:a8:2e:2c:ed:fb:b6:2f:d0:
                    f9:b7:ab:24:8a:df:c3:14:d6:42:0b:11:3a:37:76:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:87:65:5D:A0:A6:91:C3:CE:E1:04:F1:47:3C:07:58:D8:D4:FF:AF
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231392e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:2c:6e:77:2b:fd:8e:7d:4d:65:0d:7a:93:9d:13:82:00:
         f1:05:4d:ba:4f:22:47:c2:f6:74:84:82:ce:f5:dc:bc:32:ab:
         de:01:e7:da:9c:66:4b:23:bb:f0:04:ac:3d:7a:33:0f:57:e6:
         15:a9:11:10:af:fc:bf:94:da:ae:b4:fe:27:b6:de:fc:46:a7:
         30:b4:4a:da:43:ac:e1:c5:7b:86:cf:1d:03:38:ba:eb:63:df:
         a1:35:ab:b0:ac:8a:8b:4d:2b:84:47:14:30:e7:8b:23:51:9d:
         4a:22:12:af:b0:4d:76:93:57:ca:b7:5f:63:d0:67:49:f1:99:
         b1:7a:cf:db:87:a7:74:97:4d:1f:e1:4b:eb:16:04:8a:3b:1a:
         32:fc:b3:12:39:de:64:63:a9:13:7a:e7:13:6e:fa:c1:4b:69:
         1a:a4:a2:af:71:cc:7b:ad:2b:5e:55:b6:5c:fd:88:30:5a:bf:
         18:d0:7f:5c:74:7c:f5:6c:e3:2d:db:7e:9c:ca:04:20:09:f2:
         04:e4:45:17:10:8a:c6:4e:84:d8:94:0d:7f:f6:54:5c:73:09:
         24:11:3b:fc:61:11:3d:cb:e4:88:bb:e6:da:6a:2a:cf:41:8b:
         de:b9:b5:42:4c:99:c6:6a:63:04:c8:90:a9:54:2a:cf:d3:28:
         45:ee:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org