Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3232302e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3232302e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          EcwfxQSpFI78sPxWVds046mnnLrPBaM4BPxQzlsOaYc=
Subject key identifier:   09:4F:BF:98:83:25:AC:35:0E:6D:AC:32:5E:14:AF:55:6D:FE:25:77
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       6920631113C77D8FE714F062AA9A72D18F42CB68
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3232302e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 05 Mar 2024 18:11:43 +0000
ROA not before:           Tue 05 Mar 2024 18:06:43 +0000
ROA not after:            Tue 04 Mar 2025 18:11:43 +0000
asID:                     52348
IP address blocks:        190.52.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:20:63:11:13:c7:7d:8f:e7:14:f0:62:aa:9a:72:d1:8f:42:cb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Mar  5 18:06:43 2024 GMT
            Not After : Mar  4 18:11:43 2025 GMT
        Subject: CN=094FBF988325AC350E6DAC325E14AF556DFE2577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:8d:b8:cf:25:f4:d8:46:8a:82:20:89:5a:
                    de:e1:70:85:d8:19:4e:b4:c6:8a:bb:f8:e6:79:cf:
                    ad:3f:d8:01:92:e7:22:31:d7:97:4b:76:ca:75:17:
                    8f:d4:4c:48:7b:a4:b8:23:a1:03:85:48:0d:54:eb:
                    af:32:83:83:24:25:ed:10:3c:a5:34:c0:ed:33:31:
                    fc:56:c5:31:af:7e:99:af:bb:50:2f:5d:5c:b1:50:
                    c8:e1:58:68:4c:33:b3:4c:8c:0c:68:fe:ce:26:b6:
                    e3:84:43:a8:a0:d2:d9:33:6d:b3:72:07:78:6f:e0:
                    a6:bc:01:cb:5c:96:ff:17:de:da:7e:e6:3e:b4:90:
                    02:f3:b3:cb:00:31:2c:ce:b5:eb:6b:ab:d0:85:df:
                    62:e7:57:89:44:70:fa:23:1f:71:34:0a:b0:1d:33:
                    69:fc:31:12:10:e9:da:9c:ba:ce:1a:bc:d9:51:12:
                    32:35:b0:87:ec:b2:a9:7c:4e:53:b7:4c:72:bb:34:
                    3e:0e:a4:6d:b5:3e:03:cf:c0:58:94:03:65:27:55:
                    27:64:e1:2f:23:e3:ee:60:52:5d:ee:d2:64:13:d4:
                    56:44:29:46:6a:20:c1:a2:24:e4:6a:e4:6e:4e:95:
                    50:9a:16:2c:e5:a6:6c:3a:07:c3:20:95:6f:2c:e1:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:BF:98:83:25:AC:35:0E:6D:AC:32:5E:14:AF:55:6D:FE:25:77
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3232302e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:df:68:df:ac:31:38:f3:f7:fd:9a:cf:ae:05:45:d4:11:12:
         4c:c8:32:69:56:68:f8:fb:7f:3e:dd:c2:b6:db:bd:f3:75:43:
         0c:a6:a6:14:7b:85:22:a8:92:ef:83:1d:2a:fc:7d:c7:f0:2d:
         ef:3a:8e:d8:f2:75:51:28:6f:93:b5:e9:78:b8:c0:86:bd:fc:
         a2:03:a2:16:9f:9f:06:88:00:74:d9:8d:7d:43:56:34:8d:ef:
         43:38:1a:05:23:3a:e3:dc:f2:e5:80:95:4b:f8:c9:49:f7:5d:
         6b:53:6f:fe:03:55:59:b6:4c:65:d0:6d:4e:0c:aa:ec:cd:65:
         b1:d8:b1:04:4d:17:e2:f5:32:88:cc:6f:59:1d:54:c7:af:38:
         55:ff:31:e2:13:83:06:3a:0f:0a:b8:62:45:94:e9:73:d5:e1:
         e6:0a:03:89:da:2b:91:33:3c:81:ce:43:6f:c2:34:c9:a9:b5:
         cf:6b:5e:e7:43:00:62:c5:cf:a3:0d:c4:c5:3e:ea:ec:19:03:
         0f:60:f9:d0:be:b2:dd:f3:e3:b1:8e:c3:a7:66:43:9d:a6:69:
         4b:d0:05:e4:db:ae:0e:98:0a:44:f3:ac:a7:6f:c8:38:56:6f:
         ba:a5:04:87:66:e3:02:4d:75:9a:f1:a5:e1:44:78:5c:db:78:
         b5:79:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org