Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36312e302f32342d3234203d3e203532323731.roa
File:                     3139302e3131322e36312e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          DWizcQHQzrpxIYza37PgaN5cB8zJVw6tGQyETrXAF8Y=
Subject key identifier:   34:F5:CC:D5:86:13:F2:A9:22:6F:8F:12:99:A4:7E:4A:56:4A:E3:39
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       45D62D0CA29184BF6C461019010C3C887425C7D0
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36312e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 05 Mar 2024 17:44:53 +0000
ROA not before:           Tue 05 Mar 2024 17:39:53 +0000
ROA not after:            Tue 04 Mar 2025 17:44:53 +0000
asID:                     52271
IP address blocks:        190.112.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Dec 2024 18:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:2d:0c:a2:91:84:bf:6c:46:10:19:01:0c:3c:88:74:25:c7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Mar  5 17:39:53 2024 GMT
            Not After : Mar  4 17:44:53 2025 GMT
        Subject: CN=34F5CCD58613F2A9226F8F1299A47E4A564AE339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:4d:15:ae:a8:80:fd:94:b1:41:19:8c:dd:
                    22:b8:7e:bf:a6:1f:ab:d5:86:35:2b:91:41:4d:05:
                    9a:99:69:dc:0b:6b:df:ae:2f:17:5b:24:6c:ad:f8:
                    ec:d0:3e:04:a0:f9:d5:77:3e:aa:33:e3:54:e9:75:
                    58:06:44:34:b4:53:bf:91:f3:fa:b6:27:fd:0b:71:
                    f3:9f:dc:39:cf:24:47:34:80:ac:b5:9a:66:c5:03:
                    8c:21:38:97:04:7c:88:71:45:be:06:01:6b:32:71:
                    62:0d:84:92:ca:c9:c3:e9:67:20:b9:a4:ce:16:37:
                    50:9f:2c:0e:03:56:de:c1:be:14:88:0f:4c:20:2c:
                    36:39:23:8e:e8:d1:9c:72:2e:06:ed:5e:e6:ac:55:
                    0e:31:da:f3:9e:a9:41:48:bb:f8:6f:61:5c:96:8d:
                    5d:15:fe:a0:ba:18:cc:1c:ca:9d:ea:5a:37:c5:3e:
                    d9:a3:fd:15:bc:a4:79:a9:79:f8:77:ff:41:c1:ec:
                    2e:5b:ce:72:da:58:f3:02:64:2c:ca:83:13:a8:52:
                    ee:50:f9:37:29:77:9e:3a:c8:be:52:ca:78:09:fa:
                    31:18:b2:3d:bd:f4:60:49:c8:dc:29:4f:b8:9c:d2:
                    f0:89:0e:8f:00:2c:3e:db:a9:a7:40:7d:5d:fd:54:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:CC:D5:86:13:F2:A9:22:6F:8F:12:99:A4:7E:4A:56:4A:E3:39
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3139302e3131322e36312e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:8b:bd:95:46:15:e7:58:6f:0a:7b:88:12:c0:39:60:63:
         b3:ae:37:60:10:7b:7d:ec:c6:7f:37:1c:c3:98:49:06:74:20:
         92:de:96:07:23:5a:2f:91:09:19:73:d4:e6:8e:cc:32:49:16:
         46:89:78:98:b4:57:27:e7:10:19:f7:eb:57:79:8c:88:c9:8e:
         96:d1:89:85:45:76:44:4d:68:e1:54:c3:a1:01:e2:3c:07:a8:
         7a:c9:af:b4:f3:e9:c8:a2:f0:4a:db:09:48:5d:d7:54:c3:ad:
         15:86:96:33:c7:8d:07:f1:bc:63:f4:fb:c6:7e:b1:3f:1d:b2:
         2c:70:c7:01:14:c9:7e:30:d5:b2:ce:a0:0c:4d:05:e1:a4:0d:
         5d:f9:b2:89:8e:67:60:6d:5f:d0:d4:a0:5f:d7:5d:f1:0e:af:
         98:0d:ef:1d:6b:b6:88:d5:35:c6:26:c4:d0:0e:4e:4f:48:19:
         2e:60:36:76:9b:1a:74:a4:4c:2c:b2:84:d7:53:89:9c:99:4c:
         dd:02:66:4e:48:09:e4:32:e2:45:e8:b4:5f:5a:5d:0b:ff:17:
         b9:46:7d:fe:b0:57:f7:35:a4:40:c4:2a:9d:f2:65:89:67:ce:
         e8:15:ca:43:50:d8:80:a1:79:14:21:a2:5c:3c:96:1a:80:4b:
         37:6e:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 19:52:23 2024 by rpki-client on console-fra.rpki-client.org