Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          mBKy3ZsUF2gHftntpGdLxPOLoLf6kgKF+EX72FGasuw=
Subject key identifier:   AE:D1:4A:FE:D7:00:96:B7:10:8C:F1:82:27:4C:B7:23:9B:8C:5C:AE
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       5E91D9342105F3F43EF443B2D5F46405F2F64522
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa
Signing time:             Wed 13 Mar 2024 19:40:01 +0000
ROA not before:           Wed 13 Mar 2024 19:35:01 +0000
ROA not after:            Wed 12 Mar 2025 19:40:01 +0000
asID:                     262182
IP address blocks:        190.52.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 00:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:91:d9:34:21:05:f3:f4:3e:f4:43:b2:d5:f4:64:05:f2:f6:45:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 13 19:35:01 2024 GMT
            Not After : Mar 12 19:40:01 2025 GMT
        Subject: CN=AED14AFED70096B7108CF182274CB7239B8C5CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:93:02:ba:9c:2d:f5:b5:8a:a0:b5:6d:65:
                    bc:f0:f2:de:68:a3:22:dc:50:c8:17:75:f1:c5:e4:
                    60:96:28:27:d4:81:8d:04:8e:55:6f:cd:1d:27:3b:
                    8e:31:f2:8d:4e:4f:43:51:cf:2e:15:7b:2c:e0:a5:
                    45:fa:c1:70:a0:91:d4:eb:c7:dd:f5:7b:60:72:d9:
                    d2:6f:1a:94:03:c7:b1:0d:d5:34:51:94:a1:f6:8f:
                    10:c1:50:6a:39:a4:0f:09:d7:88:f3:09:69:e4:14:
                    cf:0b:70:94:2c:b8:4e:f6:25:5f:e8:32:b6:e5:36:
                    cb:f4:47:eb:0b:5e:f8:dd:67:a8:0b:4c:3e:9d:a1:
                    a2:b2:44:c3:0b:fe:ab:70:92:0a:5b:3a:46:88:97:
                    d3:c3:45:9b:df:98:ec:a9:7f:12:9a:18:bc:97:f2:
                    0d:94:8f:f0:07:d1:06:50:d4:0a:ad:71:e5:76:a1:
                    13:40:12:6e:51:6a:22:37:36:f3:9e:5a:f4:0a:0c:
                    a7:0d:b9:4c:35:30:b2:19:67:ff:a5:7c:c4:ac:2a:
                    02:32:4d:60:0e:4f:ac:0e:56:3c:90:72:40:1b:9d:
                    2c:ae:e9:48:e7:92:5b:ec:e7:2c:89:e6:ba:87:bf:
                    5d:ee:e4:30:bc:ef:e5:bf:09:96:1d:34:e8:19:6c:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D1:4A:FE:D7:00:96:B7:10:8C:F1:82:27:4C:B7:23:9B:8C:5C:AE
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132332e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:ba:64:c1:bb:d9:c7:e1:02:9c:91:d7:29:72:d4:10:61:
         ec:3b:1c:40:6e:38:5d:71:68:7f:ca:c8:2b:0e:4c:ab:10:cf:
         37:94:88:8e:e8:f2:1c:50:d4:ee:43:31:92:81:27:29:13:21:
         a2:14:16:6d:21:d3:e7:80:79:01:54:c1:9c:8f:57:75:7d:8b:
         82:09:c8:5c:61:30:a6:ee:aa:c6:4b:91:76:c3:5d:f6:18:6e:
         51:29:2d:77:a2:18:c7:99:24:56:06:f8:d8:98:9e:8b:0e:39:
         64:fc:a9:25:08:ae:81:bd:b4:fb:cf:28:ad:02:d8:24:db:8e:
         6c:07:ee:c9:95:57:78:c5:5c:c2:2b:5d:ea:c9:68:a9:66:0a:
         79:43:f9:55:d0:21:17:f3:08:09:c4:c7:0f:2f:be:49:e5:82:
         85:50:4c:f6:cf:da:9f:9f:6e:de:c2:dc:d9:8d:5a:ce:79:74:
         b9:50:64:cf:c3:57:ae:f1:da:a0:cc:c6:ad:90:bc:77:0d:a8:
         bf:a0:c0:ed:8a:fe:5b:13:6e:ff:e2:0e:15:80:a9:63:47:b0:
         d9:ab:a8:3c:a0:28:d4:17:77:8f:e9:de:f0:71:4a:bc:e0:84:
         0e:ae:26:91:63:45:09:50:b3:6c:79:f9:bf:ce:1b:55:a5:1d:
         7e:dd:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:21 2024 by rpki-client on console-ams.rpki-client.org