Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e2037313535.roa
File:                     3139302e35322e3132342e302f32342d3234203d3e2037313535.roa (raw, json)
Hash identifier:          0mFWVZy3k1hFaXmv8YVkfRETxfT5Z+zofgxjCXRat0A=
Subject key identifier:   A7:4A:60:7D:FE:49:F6:EF:5A:CD:23:B5:49:31:23:CD:8A:3C:80:AF
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       20767C2E850A37BD0C451D750BCBFE76D979BEB3
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e2037313535.roa
Signing time:             Wed 13 Mar 2024 19:40:00 +0000
ROA not before:           Wed 13 Mar 2024 19:35:00 +0000
ROA not after:            Wed 12 Mar 2025 19:40:00 +0000
asID:                     7155
IP address blocks:        190.52.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:76:7c:2e:85:0a:37:bd:0c:45:1d:75:0b:cb:fe:76:d9:79:be:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 13 19:35:00 2024 GMT
            Not After : Mar 12 19:40:00 2025 GMT
        Subject: CN=A74A607DFE49F6EF5ACD23B5493123CD8A3C80AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:7b:18:ac:2c:2e:0c:d3:2b:69:cc:62:8f:
                    f7:16:38:8d:3e:16:53:fe:2f:45:5c:8a:00:20:68:
                    53:0f:2a:53:00:0f:2d:d5:50:a7:3c:a8:60:0e:b0:
                    db:b7:59:fb:93:54:e1:e1:e5:02:b7:39:11:a4:39:
                    35:23:c6:e3:09:90:16:8b:76:d9:57:9a:e4:44:75:
                    4b:33:25:15:0c:9b:c3:7c:b7:f8:24:ad:7a:a4:17:
                    01:d2:8b:81:60:23:a5:b8:27:e0:d2:1f:ab:97:23:
                    96:9a:72:da:4f:80:9d:ba:f9:6e:ec:82:6f:2c:be:
                    bc:38:0e:99:88:68:d9:89:8f:49:8a:c8:f2:cc:61:
                    80:f5:e7:66:ff:46:2d:39:49:87:24:9f:0f:8f:24:
                    16:70:67:75:87:4c:6a:77:cd:23:df:7d:56:1d:cc:
                    75:2c:b4:cb:00:b3:d0:2e:51:66:e0:93:83:e5:fd:
                    5f:02:51:80:d4:a2:68:27:7e:0d:ff:fb:1e:f2:e3:
                    dd:20:c4:98:9b:dc:b4:51:a1:1e:17:0d:75:d6:94:
                    1f:7d:2d:8c:fe:92:a2:6e:53:94:79:33:9e:6b:6e:
                    95:d3:f6:a0:13:ee:52:b9:d1:60:0d:15:94:06:37:
                    4b:08:e0:79:8f:0b:24:18:f9:0c:4f:10:5a:cc:1e:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4A:60:7D:FE:49:F6:EF:5A:CD:23:B5:49:31:23:CD:8A:3C:80:AF
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132342e302f32342d3234203d3e2037313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:2d:00:d4:34:7d:aa:ad:ea:6a:e9:9b:d5:63:62:61:10:68:
         1e:1f:2f:34:cf:a5:2d:e3:b5:b1:6a:70:f1:17:2c:64:f4:81:
         dc:c7:b8:e2:5a:d5:51:fe:10:c7:cf:7d:9d:fa:1a:f9:01:48:
         67:62:92:34:9b:cc:c6:e2:3b:e6:d5:2c:f1:9c:fc:49:5d:27:
         ef:6f:bf:56:ee:11:b8:ef:95:fd:a4:66:bc:9f:5a:d2:c7:87:
         21:d5:a9:1f:58:d5:30:08:7b:e3:a6:20:ce:75:c2:1f:dc:1e:
         7c:7b:94:2b:a1:ab:b3:c6:ea:a9:54:44:2e:ff:5c:5d:4e:13:
         53:d9:fe:9c:9e:96:cb:88:0e:61:c9:64:1d:69:a1:70:fe:c9:
         17:99:c0:b3:9e:8e:a2:0b:54:66:0c:4f:ed:bb:c7:26:74:94:
         4a:cc:d5:12:6d:f5:f6:be:b8:27:76:63:cb:e2:a0:2d:13:ff:
         1c:f1:68:b6:f5:57:c7:2d:d5:c5:b9:a8:49:6b:59:f4:84:a7:
         83:d1:ff:09:c5:51:ee:7a:d3:51:be:28:2f:80:3a:aa:b8:6f:
         a8:59:6f:95:c0:4d:0a:e4:69:a5:2b:5d:9b:72:45:50:4e:0b:
         f2:87:ef:ec:7c:0b:98:b9:e2:45:0f:bf:a1:61:c0:6d:d3:de:
         18:16:df:6b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIHZ8LoUKN70MRR11C8v+dtl5vrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2MDhGMUE1OEMzNjdBNzhGOTNFRENFRjZEQTZFQUNE
MDY5MjA5QjAeFw0yNDAzMTMxOTM1MDBaFw0yNTAzMTIxOTQwMDBaMDMxMTAvBgNV
BAMTKEE3NEE2MDdERkU0OUY2RUY1QUNEMjNCNTQ5MzEyM0NEOEEzQzgwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulnsYrCwuDNMracxij/cWOI0+
FlP+L0VcigAgaFMPKlMADy3VUKc8qGAOsNu3WfuTVOHh5QK3ORGkOTUjxuMJkBaL
dtlXmuREdUszJRUMm8N8t/gkrXqkFwHSi4FgI6W4J+DSH6uXI5aactpPgJ26+W7s
gm8svrw4DpmIaNmJj0mKyPLMYYD152b/Ri05SYcknw+PJBZwZ3WHTGp3zSPffVYd
zHUstMsAs9AuUWbgk4Pl/V8CUYDUomgnfg3/+x7y490gxJib3LRRoR4XDXXWlB99
LYz+kqJuU5R5M55rbpXT9qAT7lK50WANFZQGN0sI4HmPCyQY+QxPEFrMHsA3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUp0pgff5J9u9azSO1STEjzYo8gK8wHwYDVR0j
BBgwFoAUPWCPGljDZ6ePk+3O9tpurNBpIJswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkNCRDk0RDg4QkY5MjlBQTUwRDc3NTA2MkUwQTExNUFG
MDRBMThGQkY0RDlGRjE1MTJCOUNCQTUwOUU0MDQyLzAvM0Q2MDhGMUE1OEMzNjdB
NzhGOTNFRENFRjZEQTZFQUNEMDY5MjA5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDYwOEYxQTU4QzM2N0E3OEY5
M0VEQ0VGNkRBNkVBQ0QwNjkyMDlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZDQkQ5NEQ4OEJGOTI5QUE1MEQ3NzUwNjJFMEExMTVBRjA0QTE4RkJG
NEQ5RkYxNTEyQjlDQkE1MDlFNDA0Mi8wLzMxMzkzMDJlMzUzMjJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMTM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+NHwwDQYJ
KoZIhvcNAQELBQADggEBANQtANQ0faqt6mrpm9VjYmEQaB4fLzTPpS3jtbFqcPEX
LGT0gdzHuOJa1VH+EMfPfZ36GvkBSGdikjSbzMbiO+bVLPGc/EldJ+9vv1buEbjv
lf2kZryfWtLHhyHVqR9Y1TAIe+OmIM51wh/cHnx7lCuhq7PG6qlURC7/XF1OE1PZ
/pyelsuIDmHJZB1poXD+yReZwLOejqILVGYMT+27xyZ0lErM1RJt9fa+uCd2Y8vi
oC0T/xzxaLb1V8ct1cW5qElrWfSEp4PR/wnFUe5601G+KC+AOqq4b6hZb5XATQrk
aaUrXZtyRVBOC/KH7+x8C5i54kUPv6FhwG3T3hgW32s=
-----END CERTIFICATE-----
Generated at Sun May 12 03:28:22 2024 by rpki-client on console-ams.rpki-client.org