Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          2lQUhtep0ZGdnJHWBNBNxIc73oC7TiIATtxEm28O/eA=
Subject key identifier:   EC:7C:1B:A3:FE:7F:E4:D9:5F:CD:15:49:C9:BF:E5:CA:CE:30:96:FB
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       02131F7A95CA20CFF9295441644041D4526880C4
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:10:04 +0000
ROA not before:           Mon 11 Mar 2024 19:05:04 +0000
ROA not after:            Mon 10 Mar 2025 19:10:04 +0000
asID:                     262182
IP address blocks:        190.52.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:13:1f:7a:95:ca:20:cf:f9:29:54:41:64:40:41:d4:52:68:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 19:05:04 2024 GMT
            Not After : Mar 10 19:10:04 2025 GMT
        Subject: CN=EC7C1BA3FE7FE4D95FCD1549C9BFE5CACE3096FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:90:d2:2d:c0:84:d5:a0:af:6a:00:33:4f:
                    5f:df:e2:b2:bb:54:b2:30:f3:21:2b:65:59:a5:4b:
                    ca:c3:07:33:ad:c7:b1:4d:d0:59:8b:54:6a:21:f5:
                    bb:9c:62:b8:55:e6:fc:0b:eb:f1:27:93:e9:6d:79:
                    ec:01:92:f7:ff:5e:2d:fb:ba:0c:f1:47:44:ec:c9:
                    08:72:c0:36:eb:13:00:cc:1b:df:1b:0d:64:c5:b7:
                    c6:07:8e:74:98:d8:2e:b8:72:3e:6b:50:ec:27:89:
                    57:0d:7e:5f:ad:9a:c5:26:5e:3c:74:cb:c3:ae:8c:
                    58:21:fd:20:07:fd:67:66:a1:61:29:96:7f:fd:0e:
                    17:2e:1d:85:2d:15:54:cb:82:4b:f7:f6:ff:4d:79:
                    e0:4b:a0:86:7f:f7:5e:e6:a1:02:ed:8c:43:8f:eb:
                    1c:85:37:5a:00:4d:73:30:0f:6e:4f:27:b0:68:19:
                    2a:7b:c1:2d:1d:1b:80:3f:c3:bd:cc:47:68:36:10:
                    98:6e:6a:2f:9a:88:01:2c:9d:5a:2f:a1:b2:51:c5:
                    22:d2:1a:a2:e2:8b:12:54:72:c1:42:22:a4:31:2d:
                    2e:86:0d:6e:b0:50:88:a4:61:00:92:19:18:b0:1c:
                    f5:4b:e6:1d:88:f6:ec:39:3d:18:40:65:d9:b7:60:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:1B:A3:FE:7F:E4:D9:5F:CD:15:49:C9:BF:E5:CA:CE:30:96:FB
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132372e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:82:1f:27:b5:26:c4:4b:df:96:44:c6:eb:15:cc:6f:51:7e:
         6a:86:fb:c6:52:4d:bc:6a:7e:0f:24:1f:63:23:b1:d3:29:be:
         2e:9d:2c:75:aa:1f:b5:55:6a:93:6b:c1:21:e5:70:90:d4:4c:
         0c:44:58:71:c3:d1:fa:f7:de:ab:af:31:ab:1b:37:a0:fd:1d:
         a5:44:51:27:d0:84:37:69:da:a8:4a:f1:49:31:d6:a4:e0:17:
         f2:d4:9a:97:74:cf:56:9d:e5:6e:2b:c2:8a:66:5a:d3:13:e7:
         5e:5e:8d:15:f2:ec:8b:53:09:36:27:ac:5d:b3:e6:a5:ca:a0:
         ef:a5:5d:96:d8:4a:22:55:b4:57:bc:e2:32:f5:1f:b5:4c:12:
         ee:59:80:66:5a:c3:c3:37:99:3f:60:2b:cc:b1:ee:93:d1:aa:
         93:51:3a:7f:e3:ec:e3:e9:f4:5b:07:08:43:dc:7e:3f:6a:21:
         01:e0:49:c2:c6:17:92:df:98:81:98:79:67:a7:9b:64:a4:fc:
         cd:63:7e:b9:1d:8c:ce:95:f7:ed:74:78:63:0c:4a:55:40:3c:
         b2:4c:68:f3:89:15:3d:bd:cd:a0:a1:9d:73:0c:84:60:a6:46:
         be:0b:04:87:a2:8f:17:87:57:ef:db:e9:70:d6:af:ec:e9:b7:
         9f:c6:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:01:59 2024 by rpki-client on console-ams.rpki-client.org