Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132362e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132362e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          nAxvoO7FkMC+7Khu0cbygqeF0V3Pti4zFn8BlnSUefM=
Subject key identifier:   08:D4:5A:30:DF:F5:E8:E0:C9:87:AF:F3:3B:BA:7F:7B:D9:57:2D:42
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       4D4E69F09174186ED42D028A2DF7DCAD62ECE39C
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132362e302f32342d3234203d3e20323632313832.roa
Signing time:             Wed 13 Mar 2024 19:40:03 +0000
ROA not before:           Wed 13 Mar 2024 19:35:03 +0000
ROA not after:            Wed 12 Mar 2025 19:40:03 +0000
asID:                     262182
IP address blocks:        190.52.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4e:69:f0:91:74:18:6e:d4:2d:02:8a:2d:f7:dc:ad:62:ec:e3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 13 19:35:03 2024 GMT
            Not After : Mar 12 19:40:03 2025 GMT
        Subject: CN=08D45A30DFF5E8E0C987AFF33BBA7F7BD9572D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:8c:1b:c2:c0:05:15:d3:22:91:2f:3a:7f:
                    4c:88:98:cc:95:19:85:8c:28:fe:5d:71:51:a3:7d:
                    be:54:d6:c9:1d:9b:30:e2:72:05:25:e0:81:32:7c:
                    b3:0d:f0:2e:31:e3:3f:2f:71:97:d7:76:71:0e:fb:
                    90:05:63:d4:3b:a7:04:aa:b3:8c:15:2a:6b:48:7f:
                    8d:60:1b:4e:01:2e:64:78:51:88:af:b1:59:11:79:
                    df:59:dc:b6:01:f2:63:62:81:1f:5a:e0:f5:1d:24:
                    d9:6a:a1:fc:c4:bc:ac:bb:1b:d4:b9:9f:91:54:37:
                    42:6a:cc:32:93:42:f0:3c:7b:4b:4b:8e:1e:74:a2:
                    75:bc:23:95:a7:36:a0:91:ff:c1:20:2d:79:9a:b3:
                    32:9a:dd:b6:ac:62:e9:c9:88:3d:28:b3:1c:45:8a:
                    a2:df:b6:22:7d:64:f5:2b:85:74:aa:4e:5a:14:35:
                    c5:60:be:6e:7a:9a:2d:8c:3b:6d:75:c9:32:33:75:
                    be:86:26:7e:22:f9:92:ba:61:ea:0c:50:ef:c4:d2:
                    f5:89:41:48:16:16:2f:99:66:5c:b2:a0:15:83:16:
                    1e:3c:77:8c:46:b3:76:f7:c9:c5:d7:f5:17:4d:7f:
                    00:01:e4:4f:cf:03:c3:bc:5e:5f:ae:3e:b5:78:0a:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:5A:30:DF:F5:E8:E0:C9:87:AF:F3:3B:BA:7F:7B:D9:57:2D:42
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132362e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:6e:66:4d:d2:9c:a3:8b:7f:45:ba:9d:bb:c9:17:fa:92:
         5e:e8:46:9d:f4:f2:dc:2b:a3:a4:b6:0b:0a:eb:f0:56:d5:7f:
         09:73:77:76:38:d8:63:e4:a3:02:42:0e:44:7a:5c:05:f7:ec:
         f1:d3:a6:0c:db:1d:f2:df:d8:8b:e7:cd:90:6c:ff:87:21:7c:
         63:8c:38:25:3e:6e:9a:e5:8a:e4:2e:be:a5:97:8b:07:2f:2c:
         30:26:88:07:b5:37:27:84:e1:d6:d8:a1:a2:7f:8b:c7:25:96:
         d1:76:1d:fe:e9:a7:0e:10:00:30:b2:ee:8c:a8:28:24:f5:14:
         03:50:bf:7a:90:b3:13:b1:db:9d:c5:c4:8c:bb:c6:15:12:84:
         9c:9a:e2:55:f0:18:eb:45:08:81:01:b2:24:bb:00:cd:a3:44:
         1a:53:33:bc:50:f1:33:ca:13:3b:45:d4:cd:a8:55:3f:17:f9:
         c5:23:8b:04:fe:c9:52:8c:41:9f:09:33:49:d4:50:ee:cc:3a:
         58:75:d1:7b:9d:f1:81:0f:2f:74:03:cb:8c:10:17:be:13:80:
         aa:b7:69:89:8f:d3:12:96:92:9d:73:ea:c3:89:6d:41:f1:95:
         fc:2f:b8:9f:5b:70:b2:a4:4d:ab:c8:1f:aa:0d:04:13:be:77:
         27:c4:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org