Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa
File:                     3139302e39342e3139322e302f31382d3234203d3e2038303533.roa (raw, json)
Hash identifier:          JXFPjF9KBFoqyKMcWnPPYNlHelyXIcy27gHp7qgIDqk=
Subject key identifier:   E3:CD:4C:8B:3C:23:2A:41:93:5C:F8:41:EB:8D:28:7A:D0:03:C7:E9
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       5EF83A5CB57A000BCA81AB38E9C2783CCE0BBC77
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa
Signing time:             Tue 05 Mar 2024 18:22:44 +0000
ROA not before:           Tue 05 Mar 2024 18:17:44 +0000
ROA not after:            Tue 04 Mar 2025 18:22:44 +0000
asID:                     8053
IP address blocks:        190.94.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f8:3a:5c:b5:7a:00:0b:ca:81:ab:38:e9:c2:78:3c:ce:0b:bc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Mar  5 18:17:44 2024 GMT
            Not After : Mar  4 18:22:44 2025 GMT
        Subject: CN=E3CD4C8B3C232A41935CF841EB8D287AD003C7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6f:04:b2:40:8b:73:da:5a:f3:79:c0:9d:b4:
                    07:cd:00:1f:12:2b:1a:43:32:27:1a:62:4d:33:62:
                    21:ad:47:d7:f8:89:60:b5:dd:49:b9:77:b8:62:d3:
                    3a:ac:43:31:d2:0c:b7:bb:86:c7:23:1c:7e:a9:2e:
                    de:df:3c:28:f2:3b:1c:ab:36:b5:89:8b:aa:5e:ce:
                    ba:9b:8a:46:3e:f6:35:0d:5b:41:43:80:b9:bd:81:
                    19:c7:02:24:83:73:9a:06:5e:88:e8:b1:4f:59:11:
                    24:52:ed:15:6a:e6:a1:a7:ef:1e:10:58:51:ff:ce:
                    ce:4c:c3:d0:f8:03:67:25:b2:1a:e3:c1:d2:71:00:
                    d2:44:1a:57:49:aa:5d:63:81:f2:4a:d1:4e:f9:fc:
                    f1:bd:96:72:77:8a:d8:44:70:28:88:19:a8:cc:c3:
                    73:f0:57:c7:fa:1a:3b:da:6f:22:2a:a0:6f:41:dd:
                    0d:8d:a2:23:87:7e:09:47:ff:43:76:36:8b:e7:f0:
                    c8:85:57:15:44:52:1a:76:e9:10:98:8d:46:e3:48:
                    36:9b:ae:06:47:5a:ec:86:c4:68:c2:c8:16:fc:36:
                    6a:fd:d8:32:29:87:68:2a:26:3e:bb:e8:a9:fb:7f:
                    ae:64:1c:a7:6f:27:db:a9:00:08:7f:0e:25:61:b8:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:4C:8B:3C:23:2A:41:93:5C:F8:41:EB:8D:28:7A:D0:03:C7:E9
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:b1:56:bb:84:0b:15:0b:d3:df:94:be:bb:ac:ae:4b:74:
         16:24:db:7d:31:3c:14:c5:63:eb:64:8c:07:26:bd:f7:19:ca:
         b8:3a:1b:84:f4:7a:19:bb:36:8a:27:78:57:37:96:42:f8:38:
         47:39:06:38:7d:ad:e1:02:7f:42:bd:1a:e5:7a:96:2e:ba:8f:
         63:99:11:d5:6f:3c:90:2b:f7:58:c6:c1:82:a7:de:f5:f1:9d:
         e2:37:05:81:28:d2:b2:b3:de:ce:5b:f8:73:83:9c:66:94:73:
         61:ec:6a:2d:19:0a:35:29:32:2b:af:e8:48:0d:da:34:ae:1e:
         31:6f:38:c7:ed:21:48:42:80:d2:c0:3b:5e:21:dd:06:ca:37:
         dd:3e:f1:82:4e:51:f2:d2:c9:d4:5c:a2:1c:dc:6e:08:38:76:
         9f:8c:9e:3f:95:7c:9b:3e:aa:cc:09:a7:ab:18:0e:d6:e4:7c:
         37:ba:06:4a:b3:f2:e9:4d:20:a4:c5:4f:87:b1:15:d4:a8:b3:
         fe:60:73:22:7a:9c:e0:19:cc:91:95:1e:18:37:43:41:5c:3d:
         29:ab:53:e6:55:9a:42:75:58:c2:26:57:d8:3a:25:d2:9b:45:
         58:86:d7:86:04:b4:39:c3:ea:6a:77:40:49:cb:28:0e:4e:98:
         80:5b:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org