Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa
File:                     3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa (raw, json)
Hash identifier:          4sW618+QbsTZvV/or0OIpwptsy2g0M2Iyrqnrl+EszU=
Subject key identifier:   4C:7B:FA:6E:CB:FA:9F:EA:4E:25:3B:E3:C4:87:59:4C:FA:8C:0F:F5
Certificate issuer:       /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial:       580FE97F2B14D22964EE8AC7FD62896462565B19
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa
Signing time:             Tue 05 Mar 2024 18:12:41 +0000
ROA not before:           Tue 05 Mar 2024 18:07:41 +0000
ROA not after:            Tue 04 Mar 2025 18:12:41 +0000
asID:                     52485
IP address blocks:        190.123.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0f:e9:7f:2b:14:d2:29:64:ee:8a:c7:fd:62:89:64:62:56:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
        Validity
            Not Before: Mar  5 18:07:41 2024 GMT
            Not After : Mar  4 18:12:41 2025 GMT
        Subject: CN=4C7BFA6ECBFA9FEA4E253BE3C487594CFA8C0FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:61:30:2f:b4:5d:ef:39:2d:1b:09:ef:5d:
                    a1:9a:23:4b:c4:12:97:f5:a3:cd:b8:52:f5:46:f7:
                    f9:ea:64:83:08:fb:40:30:ec:48:14:82:36:2e:1c:
                    d3:d3:89:ea:d5:c3:43:b2:77:5a:3c:b0:d0:74:77:
                    e9:88:06:80:0d:39:32:c1:c1:65:b1:62:35:f3:8a:
                    27:9e:d7:96:3d:1f:aa:93:39:53:b6:ee:b0:d6:50:
                    42:43:01:04:b6:ab:b0:e9:0a:43:22:c1:ec:4e:28:
                    d7:1e:97:8b:68:34:12:5c:b2:7e:b9:67:9c:83:2b:
                    a9:85:75:e8:ae:55:99:e9:d4:71:b6:7a:b4:b0:fe:
                    0d:de:7c:4b:92:2c:04:9f:f7:00:48:b1:de:62:71:
                    ad:ac:ba:6b:00:80:ea:5a:72:61:a1:a0:73:b4:07:
                    b5:c2:09:c9:99:12:cc:f2:ab:b6:ea:61:42:10:5b:
                    66:03:9f:bc:a6:ae:7c:7e:98:a4:35:81:8e:de:01:
                    9c:99:f3:bf:3b:c6:5f:9b:7c:ea:b6:31:84:4f:26:
                    84:7b:b8:0b:be:22:84:65:61:5a:a6:2f:1a:7e:89:
                    49:10:5b:e8:53:2b:f0:79:3b:1f:ff:30:23:db:a4:
                    26:e7:82:69:46:49:11:16:4b:74:b6:d1:7c:40:83:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7B:FA:6E:CB:FA:9F:EA:4E:25:3B:E3:C4:87:59:4C:FA:8C:0F:F5
            X509v3 Authority Key Identifier:
                keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3139302e3132332e3230382e302f32302d3230203d3e203532343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:22:3d:56:c2:6e:8a:a1:5f:dd:c5:62:4c:88:03:5a:d9:89:
         b9:3e:4c:39:2f:8f:f6:01:f7:0a:a2:80:eb:fd:3c:66:74:3f:
         7a:ab:1c:20:29:1d:93:c8:1a:41:65:14:91:dd:52:4d:06:51:
         1d:ff:cb:ad:c4:31:7f:00:89:0c:6a:0c:b4:1d:ed:aa:81:c4:
         de:ae:48:d1:03:e5:00:ef:db:f6:19:04:49:e7:c6:d9:15:57:
         6e:63:2f:e4:11:58:70:73:ea:54:55:ce:46:51:a7:7b:86:1b:
         ff:b3:b5:4c:83:1b:97:21:78:bb:76:90:0c:d2:ee:65:36:cb:
         f8:a3:bc:2f:79:08:12:32:06:47:22:e3:6f:7b:4f:a8:06:44:
         0b:f7:ea:4c:af:f2:42:ca:7d:61:bb:df:3a:dc:29:66:80:c0:
         9f:71:be:fd:95:69:21:ad:83:3e:de:f2:93:6b:04:aa:67:5b:
         c1:99:c8:70:2b:b1:d5:1c:82:56:e0:ef:84:a1:eb:53:ce:bb:
         da:54:7b:8e:1f:e9:91:75:a0:26:97:bc:77:01:13:5c:29:7b:
         f7:77:26:12:4a:b8:d0:6d:23:60:41:08:6a:10:69:e7:00:23:
         32:aa:2e:bb:9e:ba:ce:5b:71:9c:ae:b2:a5:f0:2b:20:fc:e8:
         f5:7d:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:34 2024 by rpki-client on console-ams.rpki-client.org