Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e302e302f32302d3234203d3e203236363137.roa
File:                     3139302e3131312e302e302f32302d3234203d3e203236363137.roa (raw, json)
Hash identifier:          7skd8HTotiKZgXkYvvdl7jg+HsBo13Uc8SGP2Db+2ok=
Subject key identifier:   83:F8:F3:85:4D:08:91:37:1E:95:4A:26:87:A0:74:BA:6B:02:C5:76
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       2E364D6FDBD66B3A720A5CF53452704FD6926EA3
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e302e302f32302d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:41:04 +0000
ROA not before:           Tue 05 Mar 2024 17:36:04 +0000
ROA not after:            Tue 04 Mar 2025 17:41:04 +0000
asID:                     26617
IP address blocks:        190.111.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:36:4d:6f:db:d6:6b:3a:72:0a:5c:f5:34:52:70:4f:d6:92:6e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:04 2024 GMT
            Not After : Mar  4 17:41:04 2025 GMT
        Subject: CN=83F8F3854D0891371E954A2687A074BA6B02C576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:1d:f6:c4:be:53:fd:fd:20:71:fe:1f:53:
                    27:d0:32:42:d2:f6:1a:fb:73:a4:6f:90:e4:79:f2:
                    76:4c:1e:e5:bb:6f:43:a7:64:3c:9e:b0:38:ce:9c:
                    36:3a:74:cc:ab:97:39:04:a9:2c:64:de:b4:43:83:
                    b4:a5:09:39:ad:03:b1:b7:36:66:d8:e8:1c:16:14:
                    f3:cb:12:26:fe:54:1a:1b:03:ad:34:63:55:c8:95:
                    9c:73:7f:a1:17:83:c0:39:48:c7:cc:8e:85:f6:19:
                    3c:7f:52:62:8d:e7:25:ab:90:29:50:2f:4d:d3:48:
                    8b:09:69:79:9b:70:14:24:6b:b4:63:51:e4:e9:80:
                    e9:71:0a:7e:98:3b:0e:4e:fd:f1:91:5c:0d:8a:95:
                    82:e9:d1:5b:87:5f:2c:18:7e:55:81:ce:40:e3:52:
                    41:7b:c8:60:5c:69:8c:a0:f8:e5:2f:f5:a9:97:9e:
                    d2:b3:15:76:f0:2d:a6:58:bb:33:71:92:d3:ad:fb:
                    16:e7:a0:15:9c:67:59:33:1b:37:de:7f:e5:86:1a:
                    b4:f4:cd:1c:f7:b4:c5:99:f0:a2:48:5b:c9:30:9e:
                    e1:eb:d5:92:fc:2c:0f:6a:6d:c0:06:9d:38:41:0c:
                    2c:d6:f8:63:05:ad:44:e4:c7:05:29:f1:08:b4:bf:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:F3:85:4D:08:91:37:1E:95:4A:26:87:A0:74:BA:6B:02:C5:76
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e302e302f32302d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:96:6e:51:3c:3a:42:45:b1:14:d5:c3:fc:6e:70:5b:47:bc:
         1f:eb:c0:71:6c:f0:2f:54:e4:bc:b1:ad:ee:4a:11:39:a5:78:
         c2:74:4b:ad:40:0f:88:fc:c3:71:f3:80:7a:42:89:8e:2a:51:
         de:f9:19:dc:e1:a2:95:b1:9f:3f:09:29:bd:0d:d3:c6:c6:71:
         77:d3:79:ec:17:c0:0e:b9:78:78:27:78:8f:f1:66:1a:00:1a:
         c5:dc:c1:45:9e:05:c6:61:67:55:4a:06:e4:d0:85:12:90:8a:
         31:86:99:2d:74:e5:cf:88:4f:14:2e:06:bc:2a:f5:57:99:71:
         6c:ad:f6:a7:fa:99:f2:55:85:ca:a7:19:43:59:85:9a:bb:7c:
         2c:fe:04:1b:8f:d3:4a:07:cb:ca:b9:9a:ac:e8:77:a3:2c:c6:
         fa:66:d2:4d:d1:3b:18:4b:3f:49:9f:aa:28:b9:b3:1a:b0:b3:
         9b:95:a5:47:f9:4b:00:6d:91:56:d8:bb:7d:1e:a4:42:4d:47:
         a8:34:2e:85:21:5a:5a:d7:86:75:a3:44:be:cc:71:83:6f:9c:
         98:91:20:ab:f3:8a:22:f9:cc:6a:ed:4a:40:61:7a:87:40:c9:
         88:22:21:66:27:42:5c:cf:43:91:6e:e5:91:d9:38:e8:c7:17:
         ed:f6:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org