Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35302e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          vSN5au2UTgXseFxrek8ImoW1GKdpS2Z9UBxV8IRbuu4=
Subject key identifier:   01:E9:C5:E4:9D:35:39:63:F1:FE:05:17:15:32:B5:52:27:DD:25:8D
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       5381C6BE39B311C70E849EC8810A8B295659231B
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:20:35 +0000
ROA not before:           Tue 05 Mar 2024 18:15:35 +0000
ROA not after:            Tue 04 Mar 2025 18:20:35 +0000
asID:                     61468
IP address blocks:        192.188.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:81:c6:be:39:b3:11:c7:0e:84:9e:c8:81:0a:8b:29:56:59:23:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:35 2024 GMT
            Not After : Mar  4 18:20:35 2025 GMT
        Subject: CN=01E9C5E49D353963F1FE05171532B55227DD258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:29:07:87:13:0b:f7:de:81:8e:09:84:14:7d:
                    c7:74:2e:85:71:5c:fb:5e:dd:74:29:06:d2:a9:38:
                    c4:24:bf:63:ac:ee:a0:a0:06:57:81:12:de:55:96:
                    66:df:07:4f:da:6d:05:41:4a:ea:32:45:7c:0a:66:
                    cb:0b:04:8f:a1:0e:91:0a:d2:87:e9:5a:95:13:6b:
                    87:c6:d3:3d:0e:48:d2:88:4b:85:ba:28:74:cc:93:
                    d9:6a:82:3c:ec:8f:48:fc:cc:19:c8:d1:42:58:e5:
                    89:7e:f3:8a:d9:30:d4:18:9a:24:78:c2:02:20:72:
                    af:cc:65:17:70:dd:45:41:65:e8:66:08:87:f1:32:
                    c3:c3:20:9b:8a:cf:fd:bf:b1:83:40:7a:12:ef:ad:
                    78:28:3b:ad:e8:6d:43:08:3f:fe:45:93:43:b3:d5:
                    57:64:8c:3b:27:4a:79:0b:81:e4:dc:bc:91:e7:28:
                    c5:89:80:88:9d:ca:f7:56:af:b1:9c:2d:72:db:07:
                    35:e3:ac:09:50:44:3a:3b:9a:12:df:2b:42:ac:1e:
                    e1:71:f1:6e:7a:32:5c:82:a8:af:4d:72:08:3b:1c:
                    a5:c6:cd:b5:89:68:1e:a2:88:d8:35:82:ac:db:d5:
                    1e:cc:11:2f:4d:7f:f2:34:00:cc:5b:4f:37:44:21:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E9:C5:E4:9D:35:39:63:F1:FE:05:17:15:32:B5:52:27:DD:25:8D
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3139322e3138382e35302e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:7e:d4:23:b9:ef:32:ec:e0:52:7f:50:c7:ae:f3:97:01:
         95:76:21:f4:45:7b:17:17:2a:8e:aa:3a:44:0e:b1:34:79:52:
         82:8e:03:ea:f9:c3:5d:d1:31:c1:63:58:35:f0:a0:63:ef:84:
         c5:94:6e:3d:32:99:24:78:8f:00:d4:85:e1:d8:47:77:42:ce:
         c4:4b:d4:32:59:71:22:d5:7d:ae:29:64:b7:3f:d5:f2:1a:a2:
         03:f5:3e:c8:30:e7:ae:43:11:51:62:b6:f5:1c:ef:14:69:08:
         98:42:38:ba:f2:a5:19:0a:15:df:74:ab:43:a5:e7:0f:eb:2d:
         92:ea:04:dc:ee:f8:4c:cd:b7:db:c1:22:2d:c3:b8:17:0d:e3:
         d2:0e:98:e8:f3:5f:48:4e:fe:ff:b7:0f:19:58:cc:f8:7b:df:
         24:6b:0a:89:3f:e1:d4:f9:e8:fb:b8:2b:2f:07:85:ef:1b:58:
         b8:16:81:ff:8c:e9:e1:28:dc:41:71:cb:c7:58:a5:f4:2c:1b:
         ad:7c:5a:ec:da:17:99:d0:3b:d8:27:12:d4:50:f2:d5:b4:b1:
         36:00:2a:76:aa:fd:4a:a3:b2:51:0e:2a:59:33:52:be:3f:80:
         a2:62:10:27:70:27:db:c9:b0:a7:4d:ff:e8:2a:76:ba:37:1a:
         0c:88:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:14 2024 by rpki-client on console-ams.rpki-client.org