Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          rsNh+V8fhk/MW02rYLJ6MI7vMPgPznt1B2+F0SELDso=
Subject key identifier:   B5:34:6B:DD:54:A4:C5:36:B3:0B:5D:AC:C7:6E:F6:44:66:A3:59:46
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       485ABC154F5806F77FD6F1A09AACB91034AE44BB
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa
Signing time:             Wed 13 Mar 2024 19:40:00 +0000
ROA not before:           Wed 13 Mar 2024 19:35:00 +0000
ROA not after:            Wed 12 Mar 2025 19:40:00 +0000
asID:                     262182
IP address blocks:        190.52.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5a:bc:15:4f:58:06:f7:7f:d6:f1:a0:9a:ac:b9:10:34:ae:44:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 13 19:35:00 2024 GMT
            Not After : Mar 12 19:40:00 2025 GMT
        Subject: CN=B5346BDD54A4C536B30B5DACC76EF64466A35946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:04:31:60:79:b8:3e:da:57:ac:4b:8f:6a:
                    2d:18:19:f0:33:2f:77:49:e7:c6:62:b8:43:8e:4d:
                    46:52:bb:c6:d3:91:f2:e0:c5:aa:8f:49:04:e0:4f:
                    00:96:5d:2b:95:2d:ac:74:59:33:70:b1:ae:f8:1d:
                    c2:3a:f2:92:9e:88:d1:c5:16:4c:90:c0:65:2b:e0:
                    16:25:cf:dd:a5:78:53:1c:2f:86:29:22:3a:2f:42:
                    dc:47:51:ef:6c:0f:a6:f9:3c:74:5f:c9:db:6b:5f:
                    e3:22:05:e2:ca:13:7e:5d:87:ce:4c:27:cf:34:3f:
                    19:cf:02:e5:93:cd:d4:4b:60:b5:68:a4:1f:20:e1:
                    01:1f:f8:a2:20:91:32:43:a6:54:c6:19:43:14:da:
                    3c:f7:45:ee:97:6e:1a:a0:69:13:14:bb:b1:df:01:
                    ae:96:44:46:f9:5e:48:55:f5:44:2c:b6:a9:72:99:
                    f4:b8:db:9b:9f:4a:08:67:28:75:0e:63:bb:89:b3:
                    4a:2a:23:7d:66:82:8d:80:b6:34:9b:8c:09:cf:f4:
                    49:9a:ef:d5:b7:60:4e:90:9a:db:4a:55:34:a2:68:
                    37:ba:02:bc:4a:b0:4c:ea:44:d7:ff:fd:56:49:f2:
                    8f:33:95:d0:f9:a5:b4:5d:8b:41:89:1a:fd:c4:ac:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:6B:DD:54:A4:C5:36:B3:0B:5D:AC:C7:6E:F6:44:66:A3:59:46
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:72:87:b9:c9:11:3c:ee:26:4a:76:d9:39:78:de:06:79:
         1d:e0:3b:08:2f:a4:5a:ab:33:f1:f7:86:34:2f:e0:6b:1a:6b:
         93:3c:f0:71:bf:64:75:02:16:79:d7:f1:b3:05:83:1a:ef:58:
         0b:b6:3a:60:3e:b8:de:d4:df:87:ea:c2:fb:39:0e:6d:8c:df:
         09:21:16:52:ab:56:a5:14:26:6e:64:1e:ad:0f:55:48:10:aa:
         97:f5:bf:1b:48:e7:7d:ad:fa:4d:d3:b2:6d:b5:b3:6d:4d:7e:
         30:b0:50:ff:9d:bd:45:b6:be:c0:60:b2:7c:00:29:6d:7d:1b:
         9e:86:64:0b:36:55:c9:4c:f1:7e:71:97:87:30:d0:0b:93:25:
         62:15:5e:53:e1:59:e1:74:a9:ab:7d:25:7d:5a:9d:f6:12:7b:
         d4:13:0e:3d:42:0d:78:c3:35:6d:5d:bd:ce:01:2b:ac:bf:cc:
         f9:30:8c:89:18:2a:e0:e3:0f:46:22:ab:c6:e1:05:33:99:b3:
         f1:02:6e:f9:55:24:a6:e8:3d:71:fd:d9:7f:92:78:71:57:22:
         8f:2d:35:0a:4e:e0:40:44:02:dd:79:c4:0c:fc:c6:8d:0f:89:
         5a:1e:79:1f:2b:b4:5b:47:ac:53:e6:54:a8:c4:13:37:cd:75:
         59:b4:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:13 2024 by rpki-client on console-fra.rpki-client.org