Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31392e302f32342d3234203d3e203532333335.roa
File:                     3138352e37342e31392e302f32342d3234203d3e203532333335.roa (raw, json)
Hash identifier:          tyEYC3lImyDjaTqK+zJ6Rn4xhZpldd3WNze4ltQFlk4=
Subject key identifier:   3A:60:18:21:50:2E:56:79:CB:AE:E6:C6:C6:89:13:97:66:D9:23:B9
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       113968191D9649DD902E1468F85197FF2371A798
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31392e302f32342d3234203d3e203532333335.roa
Signing time:             Tue 05 Mar 2024 17:41:20 +0000
ROA not before:           Tue 05 Mar 2024 17:36:20 +0000
ROA not after:            Tue 04 Mar 2025 17:41:20 +0000
asID:                     52335
IP address blocks:        185.74.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:68:19:1d:96:49:dd:90:2e:14:68:f8:51:97:ff:23:71:a7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Mar  5 17:36:20 2024 GMT
            Not After : Mar  4 17:41:20 2025 GMT
        Subject: CN=3A601821502E5679CBAEE6C6C689139766D923B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:6a:a8:fb:2c:b4:55:53:db:37:46:b9:62:
                    b0:2f:32:3a:d9:66:e8:e1:a8:6f:c3:6b:59:14:68:
                    ef:03:f6:61:de:48:03:c9:cb:6b:67:24:8c:e9:cd:
                    d4:52:84:63:04:8e:d8:f1:a7:97:6a:aa:8f:24:0f:
                    34:1b:2b:bc:c3:52:83:60:ae:a2:c4:f4:b7:a1:41:
                    d4:41:55:34:61:f4:f6:67:d0:c0:66:f6:61:2e:16:
                    4f:f9:60:e1:ce:41:00:56:fc:63:14:51:1c:1f:38:
                    60:f2:45:b1:af:7d:ef:5a:64:72:22:19:a5:e2:0a:
                    61:49:c8:59:ce:31:c5:fc:c7:00:1e:93:d6:a8:15:
                    26:b4:da:81:8c:30:f2:17:50:41:bc:68:76:ab:30:
                    d7:1b:3b:a9:08:d7:80:c4:2b:76:eb:e2:c0:2a:12:
                    f1:50:99:ac:d9:77:84:94:9e:3b:b8:8d:eb:02:01:
                    fb:30:33:aa:b0:90:e0:6c:88:05:16:6f:b4:5b:b2:
                    1d:67:57:01:f2:15:ba:2a:d5:47:1d:e0:56:2e:9f:
                    e8:b3:e2:f3:ba:cd:e3:5e:76:cf:64:0e:b8:65:b6:
                    aa:c9:12:7f:1b:85:e6:4b:67:d8:98:93:d9:fc:cb:
                    09:03:8b:9b:bb:d2:e8:e7:3f:41:f1:3e:be:5e:99:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:18:21:50:2E:56:79:CB:AE:E6:C6:C6:89:13:97:66:D9:23:B9
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31392e302f32342d3234203d3e203532333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:46:c8:a7:22:23:3f:05:58:a8:a7:cd:36:40:2e:7b:20:f4:
         21:64:ab:81:a1:97:52:a3:aa:27:6a:d7:99:4d:bc:27:7d:95:
         06:e0:38:19:00:27:cc:ee:65:49:65:4c:b0:04:4b:5f:ec:26:
         ca:6e:f1:a4:d6:04:23:f3:d5:d9:11:76:86:62:76:88:8f:fc:
         57:b5:d6:2b:d9:c0:95:c4:6a:2c:2b:70:99:f2:9d:e5:54:54:
         39:29:8e:18:76:29:71:73:d5:9a:cf:e3:98:df:ae:06:66:af:
         1f:cc:a9:18:3f:7b:ae:71:ff:e2:83:15:a2:d8:9c:c1:b3:1d:
         b8:3d:96:eb:2f:20:e8:ec:c7:86:f6:52:8c:a7:db:5b:08:25:
         78:8b:65:da:ab:68:6c:a2:09:91:40:ae:81:08:ce:71:d5:bb:
         33:14:b6:a1:22:eb:73:06:c2:35:54:2e:8f:6e:c0:e6:94:9d:
         31:e0:db:6a:1b:07:b3:f0:2e:70:e9:28:b4:07:40:c9:b0:12:
         3f:0d:59:2d:37:84:34:e6:a7:94:16:ff:79:87:40:7b:97:f8:
         91:a4:d7:d5:c9:2d:5f:3d:3f:79:97:3d:ad:34:bc:08:6e:2e:
         f1:89:b3:bc:a4:ec:bc:98:6d:64:3e:37:e3:0f:61:d4:25:f6:
         a9:5b:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org