Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          yXBZwoAUGpZH1y3h29fFclzBomjtMeBrBqPxnT+/oUw=
Subject key identifier:   D6:A9:82:DA:75:4E:A8:DE:CE:85:6A:ED:70:E3:F5:57:7B:52:54:FB
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       07BC093A29F1F2EF6E3657979FEF0D64FD601702
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa
Signing time:             Thu 14 Mar 2024 00:05:00 +0000
ROA not before:           Thu 14 Mar 2024 00:00:00 +0000
ROA not after:            Thu 13 Mar 2025 00:05:00 +0000
asID:                     262182
IP address blocks:        190.52.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bc:09:3a:29:f1:f2:ef:6e:36:57:97:9f:ef:0d:64:fd:60:17:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 14 00:00:00 2024 GMT
            Not After : Mar 13 00:05:00 2025 GMT
        Subject: CN=D6A982DA754EA8DECE856AED70E3F5577B5254FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:51:bc:1f:7c:36:a8:1a:d6:d7:bd:7e:cc:
                    c5:23:5f:9e:4b:e7:64:a9:21:de:c2:ab:b4:2c:cf:
                    44:ba:f5:b9:30:6a:9c:72:27:87:04:d4:dd:b0:e2:
                    e3:fa:d3:0c:d3:50:2d:10:c9:05:4e:40:75:72:39:
                    38:7b:cd:32:60:3e:4c:ad:5d:d4:8a:eb:09:a0:d8:
                    e4:43:6d:a1:c2:fb:8f:53:a0:be:96:70:53:00:eb:
                    4b:34:f2:85:9c:78:55:3d:3d:79:06:99:de:d0:ac:
                    3b:9e:bb:22:70:75:98:7c:4e:aa:6b:d7:f8:8a:be:
                    a3:f7:7e:bf:34:30:6f:1d:8b:77:f4:9d:8d:f8:bc:
                    5b:96:35:ed:d5:bc:76:72:29:f4:a9:22:82:e3:1e:
                    e0:04:0e:2e:35:6a:4c:89:9b:fb:a1:02:5f:83:d2:
                    9a:34:3f:0d:80:81:04:0e:6e:d4:a6:a9:3b:d6:aa:
                    e7:15:e4:4d:46:3d:31:94:76:de:58:bd:29:88:af:
                    4d:2f:06:fb:56:c4:3a:d9:e4:bd:a6:f6:8d:1e:57:
                    df:86:59:8b:a9:c4:e9:06:06:82:14:20:69:35:2a:
                    d9:57:d5:d2:b7:e7:00:c0:79:75:7c:2c:ed:ea:72:
                    dd:86:2b:ee:7f:06:d8:c1:10:b0:d8:af:30:a5:5b:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A9:82:DA:75:4E:A8:DE:CE:85:6A:ED:70:E3:F5:57:7B:52:54:FB
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:dc:fb:e2:9b:5c:1c:97:6c:39:70:cf:22:85:62:1b:6c:6d:
         91:ad:33:69:7b:df:68:3d:f9:1a:75:5c:4e:4d:45:cb:63:46:
         6e:9c:5d:85:09:55:f1:b3:6d:61:08:ac:ca:44:8e:87:e3:e6:
         07:ae:9d:22:a3:1b:80:cc:2e:86:9d:cb:1d:ce:5f:29:44:41:
         95:1e:7a:3e:6f:01:2e:4c:27:02:03:6f:46:7f:14:8c:96:c1:
         be:a1:ee:de:bd:52:59:0a:b7:ca:ef:1a:3b:f8:4e:42:69:26:
         ce:ce:b7:70:77:af:72:63:ea:2f:ec:67:2d:7e:db:4d:65:52:
         a7:4e:dd:b5:c2:a5:dc:7a:9c:01:44:52:68:6b:7e:94:f9:eb:
         68:cc:33:2c:7e:7f:6f:60:9f:fd:f8:07:57:8d:8a:62:8d:d4:
         f5:e6:13:a5:3c:f5:44:b9:d9:b5:c3:89:c4:8f:38:c2:e4:2e:
         8f:d3:a2:58:8d:d5:9e:50:92:20:dd:c2:d3:7d:96:7a:83:fd:
         69:6d:11:03:c2:fb:0d:ae:17:32:6e:d9:b3:18:90:b2:96:e9:
         12:05:d1:59:4f:dd:62:b5:82:78:b9:8d:c0:16:b7:20:0e:42:
         e6:62:ac:98:2e:ef:98:e1:d3:12:65:6b:9b:42:d4:f2:a8:d1:
         c3:8f:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org