Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237383230.roa
File:                     3139322e3138382e35302e302f32342d3234203d3e203237383230.roa (raw, json)
Hash identifier:          FritvOZxxznY0zY5mf/1xBJebDAJGB9QQomWWtsZsJ4=
Subject key identifier:   45:27:51:12:B9:D3:58:51:7A:5F:9D:0E:74:B3:05:A3:91:55:2E:C1
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       09F2387C3C0EA1DF07932C87932CCE872B15E834
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237383230.roa
Signing time:             Tue 05 Mar 2024 18:20:33 +0000
ROA not before:           Tue 05 Mar 2024 18:15:33 +0000
ROA not after:            Tue 04 Mar 2025 18:20:33 +0000
asID:                     27820
IP address blocks:        192.188.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f2:38:7c:3c:0e:a1:df:07:93:2c:87:93:2c:ce:87:2b:15:e8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:33 2024 GMT
            Not After : Mar  4 18:20:33 2025 GMT
        Subject: CN=45275112B9D358517A5F9D0E74B305A391552EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:8d:6b:09:ef:75:f3:07:6e:f0:fb:63:64:
                    69:9e:e0:cf:0c:50:31:2d:01:2d:d1:89:e2:db:23:
                    07:b0:48:d9:f8:28:44:44:bc:7e:2b:1a:ac:cc:08:
                    6f:04:bf:94:a0:9d:cf:c5:26:0e:ad:7e:ea:dc:85:
                    67:77:42:a4:a3:72:36:db:bd:ad:ed:7c:4f:d1:8f:
                    9f:cc:da:5b:34:f3:dd:7b:da:1d:11:ea:92:b6:12:
                    b6:ce:21:09:d3:f1:a0:8b:16:7f:75:5c:aa:fd:a0:
                    39:33:f9:69:43:ac:1b:0a:9b:67:2b:1e:f9:9a:99:
                    45:de:e7:e9:1e:fd:d2:07:2e:71:1f:8b:04:56:c4:
                    6f:9c:dd:0d:b4:57:20:f2:0b:eb:5c:69:00:94:8e:
                    8d:6b:84:f2:19:52:fe:3b:4c:b5:8a:06:38:d3:bd:
                    7d:cd:85:ec:85:69:ea:de:65:43:2c:26:37:34:30:
                    60:6f:76:dd:70:9d:64:81:22:8e:77:80:a8:a3:04:
                    03:4f:a8:7f:72:eb:e9:bc:ce:3b:c0:99:16:05:cd:
                    6f:18:53:5c:2b:08:f6:ff:a4:07:5d:fb:a2:b1:49:
                    aa:ba:30:a2:13:36:16:f2:6f:33:b2:1b:32:50:d5:
                    da:df:36:5f:3d:5e:3a:15:18:8a:d8:f0:7f:9a:74:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:51:12:B9:D3:58:51:7A:5F:9D:0E:74:B3:05:A3:91:55:2E:C1
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:26:53:f0:39:f7:40:0b:3d:b3:41:d5:e2:fc:42:e2:ce:
         e4:5d:f0:3c:4d:fe:87:cb:07:5d:ee:06:2c:c5:64:ed:f2:79:
         97:e1:35:c4:c7:bf:6e:0c:0c:62:54:52:be:cf:11:42:48:82:
         ec:4e:17:dd:91:06:a6:cc:e5:82:e6:34:28:d0:48:78:94:f2:
         f2:cd:7e:a7:df:20:7b:91:2e:40:07:a5:25:65:c8:3b:73:79:
         3a:80:05:29:45:57:ae:dc:28:e9:66:c4:67:ad:e0:ea:76:af:
         0a:3c:eb:26:e5:07:d9:79:13:cc:57:83:33:62:8c:31:79:54:
         61:03:02:7f:ed:b6:47:06:00:d6:ae:c7:66:c8:71:81:88:a6:
         07:e9:4b:d8:fc:a7:3c:9f:f1:7a:42:54:0d:e3:b8:6e:13:9a:
         62:67:7d:a8:db:12:23:39:4e:f2:7f:7f:2e:6b:73:76:ea:da:
         b0:73:7c:e8:85:a2:40:bb:19:67:6f:15:81:ee:e3:c5:a5:a5:
         70:89:26:26:34:49:47:5d:ae:ed:53:aa:7c:0a:4f:e1:6e:bd:
         56:36:eb:fb:61:be:79:e0:63:2d:b8:41:c5:06:ca:d2:d6:5f:
         b4:ee:9b:53:f1:b0:cf:f0:bf:c8:f2:3c:08:b9:cc:3a:b5:b3:
         08:fd:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 11:56:29 2024 by rpki-client on console-fra.rpki-client.org