Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e31382e302f32332d3234203d3e203236363137.roa
File:                     3139302e3131312e31382e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          BYSRj/b3AbHwTQTQEuxIBGTuy+FdRiXqKdZ+Y2VRZOg=
Subject key identifier:   3F:59:66:62:06:62:DC:6C:4B:94:EC:6A:E5:BE:1A:44:28:FC:A4:57
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       76F1DCF4BDDACB2E1EB823435B69AAE5698F9F0B
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e31382e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:41:09 +0000
ROA not before:           Tue 05 Mar 2024 17:36:09 +0000
ROA not after:            Tue 04 Mar 2025 17:41:09 +0000
asID:                     26617
IP address blocks:        190.111.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f1:dc:f4:bd:da:cb:2e:1e:b8:23:43:5b:69:aa:e5:69:8f:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:09 2024 GMT
            Not After : Mar  4 17:41:09 2025 GMT
        Subject: CN=3F5966620662DC6C4B94EC6AE5BE1A4428FCA457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:6e:67:e7:f7:c9:51:a5:ab:45:26:06:e2:
                    5e:9f:c2:d1:81:39:80:d7:3c:f9:31:7a:64:0f:1d:
                    c7:cc:91:0d:36:63:41:70:9e:7e:c4:8e:5c:2c:8c:
                    19:8c:76:56:2a:99:7a:08:76:1e:5e:86:50:60:01:
                    96:e6:d7:6e:60:8f:e6:4e:de:e3:6b:98:9f:94:87:
                    ed:e3:90:c2:70:89:ac:49:a7:fd:09:9d:e3:ad:4e:
                    7e:b3:f3:aa:9f:00:1e:24:18:3d:a5:b2:81:77:a8:
                    4f:7d:96:27:08:bc:bb:b8:84:5a:93:46:a4:cb:db:
                    f5:7d:68:58:3b:b9:da:10:a2:55:6e:fd:c3:d0:22:
                    b4:d8:37:f2:b5:ea:1f:fd:48:a6:02:bd:ae:e9:61:
                    aa:5c:ae:59:1e:f4:2b:b7:da:a5:9d:9f:89:9e:24:
                    b7:65:4d:f2:f8:26:e7:49:cc:12:27:47:90:67:91:
                    d0:3f:82:8b:31:ba:01:e9:c0:1c:2e:2c:70:c6:b8:
                    6b:f9:ac:60:94:3e:c1:10:77:fb:ce:c3:d7:35:53:
                    c0:23:04:76:47:c1:d4:2c:5c:8f:77:76:50:69:12:
                    83:66:c5:fc:9c:83:b8:75:6d:6d:d8:73:be:da:af:
                    14:d2:37:82:c5:78:e5:e4:19:5f:7c:62:6d:87:cf:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:66:62:06:62:DC:6C:4B:94:EC:6A:E5:BE:1A:44:28:FC:A4:57
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e31382e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:fc:b4:63:44:9a:06:85:5c:31:7b:0e:d3:c6:0b:dc:23:
         55:42:80:57:01:e6:db:17:5c:64:63:13:07:05:29:f1:3e:f2:
         0e:60:b9:d8:eb:5e:fc:e9:29:a9:bf:3c:f0:5f:0f:af:98:a3:
         88:31:19:77:7b:fb:bb:ed:66:2a:3a:be:fc:77:35:34:27:b7:
         b7:ed:45:63:36:a1:71:e3:0f:f2:3a:d9:0f:20:46:bc:dc:be:
         6b:87:e0:c3:5d:01:b4:92:74:3e:9d:d7:2e:4f:25:9f:1f:78:
         f9:c5:82:f1:6b:b5:2d:17:2d:13:7f:ad:d3:b4:87:22:ce:08:
         1f:ac:4d:c3:2b:13:76:da:fe:6b:cd:95:90:14:8e:f1:50:3f:
         08:01:4a:5f:8a:03:3a:58:fb:23:d6:20:31:54:92:b6:52:27:
         dd:d1:e9:a3:49:89:6d:e6:27:51:68:8f:78:29:41:fe:ea:cb:
         00:cf:b3:3b:b4:da:66:ef:fd:40:e4:b7:5d:6f:12:69:f6:ae:
         39:c8:84:de:cb:cc:9f:78:43:67:44:0a:12:a9:a8:b6:70:ef:
         ff:d1:32:77:00:14:d1:ef:c1:e8:6e:e4:da:3e:02:ac:98:00:
         c9:80:ec:2a:b3:21:0a:13:93:5b:7a:74:b2:1a:db:dc:4e:bf:
         b2:dd:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org