Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e203132363834.roa
File:                     3139302e35322e3132342e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          DonryZAerWfjBXkLtaDmGidFTBJKEhMmbqEoR3L/k0w=
Subject key identifier:   67:51:CE:A4:71:75:71:56:6F:61:C7:5B:89:EF:CD:F7:55:72:BD:F0
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       450D8E463D136773513C0CFC3DE31269BBF8AA60
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e203132363834.roa
Signing time:             Wed 11 Sep 2024 18:35:00 +0000
ROA not before:           Wed 11 Sep 2024 18:30:00 +0000
ROA not after:            Wed 10 Sep 2025 18:35:00 +0000
asID:                     12684
IP address blocks:        190.52.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0d:8e:46:3d:13:67:73:51:3c:0c:fc:3d:e3:12:69:bb:f8:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Sep 11 18:30:00 2024 GMT
            Not After : Sep 10 18:35:00 2025 GMT
        Subject: CN=6751CEA4717571566F61C75B89EFCDF75572BDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:d7:28:99:f3:3f:ff:4f:27:4a:8e:1a:28:
                    20:ba:a4:28:d7:da:10:96:ce:04:7c:79:17:45:cb:
                    4d:49:7b:59:c9:64:31:55:6c:26:84:ab:76:b9:27:
                    99:a0:b7:d0:fd:7a:41:2f:6b:d8:44:13:79:cc:f5:
                    0c:f1:c8:42:b8:53:bc:e6:fa:a5:b4:ec:6b:bb:8e:
                    e9:c1:27:70:50:a4:b5:46:24:8d:62:d0:29:48:f4:
                    5a:fd:74:36:ec:b8:cb:e8:24:d1:39:e0:ca:25:b1:
                    73:ff:51:8b:c2:86:56:79:57:b2:79:4e:30:e0:9d:
                    e5:00:ef:02:b4:b5:4b:0b:e0:d0:66:a6:64:44:a8:
                    b9:36:60:76:28:92:45:60:aa:7e:9d:51:55:a9:76:
                    fc:78:0e:9c:77:8d:40:54:77:3f:b7:7d:50:88:08:
                    71:32:99:96:8c:36:2d:16:9c:e6:2b:d6:61:f5:62:
                    98:d2:a7:76:6b:2c:aa:f6:17:f4:06:d8:4b:bd:0a:
                    72:83:15:5b:5f:7b:d5:a1:85:fd:31:19:6e:9a:a1:
                    7b:fe:13:98:0b:b5:8c:70:74:f8:ec:83:8e:df:29:
                    60:6f:50:bb:cf:06:1e:42:0e:c9:77:ca:f1:7d:a6:
                    89:6d:04:c2:f6:df:b8:10:ec:08:bd:c0:de:90:92:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:51:CE:A4:71:75:71:56:6F:61:C7:5B:89:EF:CD:F7:55:72:BD:F0
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:89:f6:d1:a8:36:c0:5f:8c:c9:fe:cb:2f:e9:ae:d1:90:
         55:23:8f:e5:53:b7:6b:46:04:5e:9f:05:da:fa:e9:3f:75:ed:
         cb:03:50:9b:63:55:93:0a:85:75:88:86:b5:3a:32:a3:45:73:
         b2:bb:1e:6f:3f:36:88:be:cf:de:db:11:ad:45:2c:e8:0b:96:
         e5:51:12:a6:f7:34:e9:e2:5b:6d:42:da:b2:4b:50:d3:68:92:
         e4:df:4d:ad:7d:ac:9d:6e:2f:78:d3:bb:79:60:23:95:c1:70:
         1a:8f:ec:c5:15:07:a8:08:cf:d1:41:2d:b3:9d:5a:b1:8f:84:
         f3:5d:d0:12:c1:d7:d6:9e:09:93:90:33:29:00:78:05:bb:a4:
         4f:ea:fe:be:80:4a:4d:62:45:62:fb:36:2e:fa:59:ab:6f:91:
         37:cc:de:75:2b:e0:b7:d9:78:32:bb:bf:71:ea:1c:97:7a:43:
         a1:33:7c:1a:fb:5a:d8:b8:25:3f:c7:7d:4e:1e:d5:86:13:9a:
         0b:38:79:dc:a3:e9:d5:11:b7:0f:02:19:3a:61:b7:57:69:d6:
         26:e8:20:bf:3e:20:9c:fd:91:cc:09:7d:9c:b5:e7:29:02:a4:
         59:75:25:81:40:41:05:68:fc:82:a1:1d:c5:47:d3:7e:ab:84:
         29:be:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org