Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          qCapvVtYX20Hn4qKIrko2N3krT0e/DBYWm3LMMWHtkI=
Subject key identifier:   C0:A2:CE:73:AD:FD:86:AA:43:01:99:42:A7:68:EA:CE:BE:7B:06:9E
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       2A497FEACA97305D1558589F6CD6CB3D5B04BA68
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa
Signing time:             Wed 13 Mar 2024 19:40:00 +0000
ROA not before:           Wed 13 Mar 2024 19:35:00 +0000
ROA not after:            Wed 12 Mar 2025 19:40:00 +0000
asID:                     262182
IP address blocks:        190.52.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:49:7f:ea:ca:97:30:5d:15:58:58:9f:6c:d6:cb:3d:5b:04:ba:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 13 19:35:00 2024 GMT
            Not After : Mar 12 19:40:00 2025 GMT
        Subject: CN=C0A2CE73ADFD86AA43019942A768EACEBE7B069E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:ef:0a:f6:65:ff:a6:f6:0a:b7:f1:b2:63:
                    d3:25:70:f2:fb:8e:96:9e:18:bd:38:c2:70:16:dd:
                    48:3e:c2:16:71:3f:51:c4:19:26:f5:ce:98:fd:0f:
                    f3:fb:4a:4a:32:7a:37:21:76:ba:35:e4:69:b3:57:
                    69:9b:3f:35:f4:ab:56:97:b0:67:f7:97:34:87:9c:
                    d7:0a:ae:91:f5:0e:44:fb:da:e5:c1:5b:b4:98:be:
                    c7:3c:e8:76:30:8c:e3:61:cd:8f:ee:04:20:21:11:
                    88:10:88:42:ba:6e:ee:1c:a7:02:5f:e0:0b:08:87:
                    9e:0a:b1:7e:25:5f:74:79:27:c8:7e:6b:ed:df:ea:
                    63:d0:4c:6e:4a:ab:d8:1b:06:8b:3a:1c:ca:ee:93:
                    ae:bc:83:da:a1:c8:6a:7c:56:ad:3a:33:60:3b:70:
                    03:bf:90:2d:df:85:92:c4:e2:be:d2:a7:2e:1e:e8:
                    d2:af:65:93:8b:42:18:74:b4:aa:7a:8f:69:7b:d1:
                    b3:8b:07:31:ca:72:71:fd:65:97:13:a1:13:d3:0f:
                    09:c8:ce:7d:c7:2b:b3:e9:dc:50:ad:53:8b:38:69:
                    4f:37:6c:be:fa:36:76:52:fe:aa:bb:bc:24:db:6d:
                    04:68:83:b9:1b:ab:cc:7e:bc:df:28:b7:46:62:64:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:CE:73:AD:FD:86:AA:43:01:99:42:A7:68:EA:CE:BE:7B:06:9E
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132312e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:0f:42:a3:be:75:64:3c:e5:40:e1:2c:42:1e:fa:ca:64:
         84:43:1f:08:37:ef:dd:e9:60:7a:2d:79:c6:5c:62:ae:9f:29:
         bc:9b:77:af:0a:3a:25:8b:dd:83:be:f7:64:95:7e:64:78:25:
         2e:f8:b0:25:39:f9:ee:32:0f:d1:a3:6f:7e:ae:d5:4b:7d:53:
         c5:09:94:45:42:82:00:6b:c9:a1:32:e3:05:88:12:dd:e7:17:
         47:5c:51:6d:58:4a:98:a3:17:9f:ba:47:31:20:70:f6:f7:ed:
         2b:c8:1d:00:9b:d4:00:c8:d2:56:05:39:92:4a:33:b7:ab:ec:
         63:ca:d5:d9:01:53:62:51:8a:94:f8:bb:dd:13:6e:7b:e1:30:
         aa:f5:f2:a9:a1:50:08:88:b8:6f:97:01:4a:dd:39:e1:07:77:
         bc:e6:6d:12:84:44:f9:3b:36:ee:31:d2:53:57:f7:f4:ce:6b:
         9f:09:1d:a5:02:8b:4c:a5:0d:b0:f5:42:e9:80:19:34:58:53:
         91:0b:5d:ad:e2:ab:8d:ea:9c:d4:9e:59:e5:7a:57:08:0e:28:
         df:e6:36:21:e7:eb:42:1b:1a:2e:da:90:4e:68:15:ef:07:03:
         9c:57:f9:e5:8a:dc:4e:55:9f:52:f1:c6:4d:87:bd:ce:ef:82:
         c9:5c:a3:a6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKkl/6sqXMF0VWFifbNbLPVsEumgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNDAzMTMxOTM1MDBaFw0yNTAzMTIxOTQwMDBaMDMxMTAvBgNV
BAMTKEMwQTJDRTczQURGRDg2QUE0MzAxOTk0MkE3NjhFQUNFQkU3QjA2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLe8K9mX/pvYKt/GyY9MlcPL7
jpaeGL04wnAW3Ug+whZxP1HEGSb1zpj9D/P7Skoyejchdro15GmzV2mbPzX0q1aX
sGf3lzSHnNcKrpH1DkT72uXBW7SYvsc86HYwjONhzY/uBCAhEYgQiEK6bu4cpwJf
4AsIh54KsX4lX3R5J8h+a+3f6mPQTG5Kq9gbBos6HMruk668g9qhyGp8Vq06M2A7
cAO/kC3fhZLE4r7Spy4e6NKvZZOLQhh0tKp6j2l70bOLBzHKcnH9ZZcToRPTDwnI
zn3HK7Pp3FCtU4s4aU83bL76NnZS/qq7vCTbbQRog7kbq8x+vN8ot0ZiZBDfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwKLOc639hqpDAZlCp2jqzr57Bp4wHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzkzMDJlMzUzMjJlMzEzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvjR5
MA0GCSqGSIb3DQEBCwUAA4IBAQARjg9Co751ZDzlQOEsQh76ymSEQx8IN+/d6WB6
LXnGXGKunym8m3evCjoli92DvvdklX5keCUu+LAlOfnuMg/Ro29+rtVLfVPFCZRF
QoIAa8mhMuMFiBLd5xdHXFFtWEqYoxefukcxIHD29+0ryB0Am9QAyNJWBTmSSjO3
q+xjytXZAVNiUYqU+LvdE2574TCq9fKpoVAIiLhvlwFK3TnhB3e85m0ShET5Ozbu
MdJTV/f0zmufCR2lAotMpQ2w9ULpgBk0WFORC12t4quN6pzUnlnlelcIDijf5jYh
5+tCGxou2pBOaBXvBwOcV/nlitxOVZ9S8cZNh73O74LJXKOm
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org