Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa
File:                     3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa (raw, json)
Hash identifier:          MrFzB7DbMhcG7bogAv+WwBBu27x39p5AufgU77ekO7E=
Subject key identifier:   63:93:B0:D6:14:61:3A:F4:78:12:57:57:E7:BC:89:51:50:36:6C:5E
Certificate issuer:       /CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
Certificate serial:       4C3FFBD8DD058079132643AC6A6D7EB6FB6FD538
Authority key identifier: BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa
Signing time:             Tue 05 Mar 2024 18:03:25 +0000
ROA not before:           Tue 05 Mar 2024 17:58:25 +0000
ROA not after:            Tue 04 Mar 2025 18:03:25 +0000
asID:                     52300
IP address blocks:        190.110.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3f:fb:d8:dd:05:80:79:13:26:43:ac:6a:6d:7e:b6:fb:6f:d5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
        Validity
            Not Before: Mar  5 17:58:25 2024 GMT
            Not After : Mar  4 18:03:25 2025 GMT
        Subject: CN=6393B0D614613AF478125757E7BC895150366C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:58:87:ed:5d:67:e6:0e:aa:a4:65:6d:9d:
                    a6:f1:f1:0c:71:21:6f:98:2f:36:96:96:ad:ce:47:
                    42:e9:3b:9c:08:37:8a:61:a2:72:33:70:5c:d8:c7:
                    52:c6:3e:55:d3:28:70:d8:de:21:1a:6c:7b:54:52:
                    a1:0a:39:3a:f1:10:2a:20:aa:af:97:69:88:b4:0d:
                    55:19:17:81:6b:a4:8c:66:07:eb:22:fc:19:43:bd:
                    be:36:67:2a:2f:cf:e4:a6:2b:0d:fc:c3:8a:75:1a:
                    bb:82:5c:32:eb:64:33:c4:67:43:3e:b9:b1:8e:0a:
                    ec:23:41:fe:cb:37:06:34:8b:c2:b3:a1:c8:73:63:
                    7e:b7:9f:81:16:42:f1:c9:6b:da:fe:9e:82:a9:f1:
                    06:1c:aa:aa:f5:9d:51:b6:1f:8a:11:4f:e6:8b:d6:
                    23:48:9d:01:e5:ad:3a:18:05:71:67:56:b3:36:f9:
                    6a:cb:25:fe:f2:13:7e:42:d8:73:00:dc:35:6c:92:
                    05:8b:64:2d:6d:19:e8:9e:b4:92:78:b0:f1:4e:55:
                    a9:2a:f9:d9:5c:57:f4:fe:b6:ed:68:bb:20:40:73:
                    85:f7:11:80:de:e1:3e:2d:48:c2:48:12:e8:eb:a5:
                    bd:0f:94:7f:b6:c5:5a:5b:08:43:50:eb:85:75:d9:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:B0:D6:14:61:3A:F4:78:12:57:57:E7:BC:89:51:50:36:6C:5E
            X509v3 Authority Key Identifier:
                keyid:BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e7:e5:43:6f:5d:f1:f8:7d:24:06:10:fd:94:70:af:2c:cf:ce:
         6c:9c:9c:09:ce:ee:6d:07:6f:e8:ee:10:9b:58:4e:19:ee:42:
         2a:f3:da:63:1f:07:2b:2a:a1:82:7f:17:80:e8:69:89:ac:bd:
         2b:1a:24:c9:16:1b:b0:cf:17:1e:73:e8:40:c4:27:53:cc:6d:
         af:c0:46:f1:87:b7:6b:ae:3a:c3:f7:d1:66:aa:26:49:50:f0:
         11:36:f4:0c:92:0e:6e:14:29:54:9a:a4:50:af:b4:4d:f9:c5:
         fb:85:bb:93:8e:64:4b:a3:10:2d:14:29:7e:c2:48:59:38:73:
         8b:1e:0f:50:6c:f9:f9:74:12:2f:84:33:ca:76:cc:7a:c9:2e:
         3e:3c:59:d2:32:15:7c:c0:06:ea:bd:c0:8a:cd:69:d5:14:fb:
         d9:f1:75:d2:2c:ec:3a:ae:86:6c:d8:85:49:32:a3:9d:92:8a:
         f0:f4:df:86:62:65:af:27:ae:d2:f8:09:78:01:99:0e:c9:ff:
         b8:b8:e0:c5:a5:4d:f7:a8:7f:76:26:2f:42:a7:57:03:75:7f:
         ee:5f:ad:10:73:aa:e0:d0:c5:a8:6b:22:d6:ad:77:86:f6:c7:
         de:62:66:22:a1:5a:59:6a:b6:d2:0d:5d:d0:9a:b8:56:db:a0:
         f1:87:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:33:24 2024 by rpki-client on console-fra.rpki-client.org