Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32352e302f32342d3234203d3e203236363137.roa
File:                     3139302e3131312e32352e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          fkIpc0FBVj9PLlLZ2vHv7YVG5qqG2wFJtypin3wGe2U=
Subject key identifier:   01:8B:15:A3:A9:3A:0E:D6:82:20:F1:23:32:A7:73:7A:C5:B8:E4:CD
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       30D63A65A616100EE3940C77F5AD48A8C695BFB3
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32352e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:40:58 +0000
ROA not before:           Tue 05 Mar 2024 17:35:58 +0000
ROA not after:            Tue 04 Mar 2025 17:40:58 +0000
asID:                     26617
IP address blocks:        190.111.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d6:3a:65:a6:16:10:0e:e3:94:0c:77:f5:ad:48:a8:c6:95:bf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:58 2024 GMT
            Not After : Mar  4 17:40:58 2025 GMT
        Subject: CN=018B15A3A93A0ED68220F12332A7737AC5B8E4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:85:47:ba:d9:63:bb:23:b5:04:9e:6d:fd:
                    b2:fa:13:3f:90:81:36:e3:c3:76:4c:61:4d:72:af:
                    ff:0f:99:e3:e0:40:da:ba:1f:f4:ae:48:65:b4:b3:
                    0e:9a:26:f1:e3:e7:b4:06:da:eb:79:ac:47:84:fc:
                    73:7f:38:f1:3b:90:70:5b:6b:b1:8b:6d:54:6f:91:
                    df:01:16:a3:56:73:95:d6:ab:5f:4a:99:e5:f8:e8:
                    d9:36:d4:1e:44:08:4c:d2:11:4a:d7:4d:12:0e:66:
                    7e:de:c3:ce:19:61:2f:74:95:5d:5a:93:5a:9b:89:
                    08:ce:92:ba:1d:01:92:2d:e7:7a:57:de:16:0c:96:
                    e6:2d:c1:08:d0:86:ae:ed:a2:35:72:3d:07:e6:10:
                    fe:a5:14:5a:2e:8f:71:60:c5:93:56:2c:4b:75:af:
                    f0:36:b3:73:ed:80:f6:aa:5e:42:c1:09:05:10:a4:
                    48:7d:ac:cd:49:18:9e:44:5c:34:7f:a8:39:7c:02:
                    fd:27:b1:85:2f:d9:6e:0a:4d:99:2c:eb:f7:a8:49:
                    1e:ea:c0:70:08:2a:1e:94:a0:4e:5c:ab:49:6f:60:
                    e2:a6:40:e1:ab:86:84:d1:6a:a4:2e:23:fb:66:06:
                    c9:3e:8e:65:66:29:13:4e:b2:db:4c:ea:70:3d:d1:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:15:A3:A9:3A:0E:D6:82:20:F1:23:32:A7:73:7A:C5:B8:E4:CD
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32352e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:85:76:0e:66:fa:6d:c8:3c:16:85:97:e2:7d:aa:c8:16:20:
         3b:76:9c:5b:9e:64:71:82:95:55:1b:63:1d:34:51:af:b0:25:
         62:e3:82:eb:42:80:fb:6e:37:52:75:a9:06:10:e9:67:bb:12:
         36:fd:4e:72:f9:10:e0:50:0a:0c:4e:4c:fe:0f:d5:dc:c9:e1:
         94:21:0d:4d:38:58:5c:76:14:7f:c7:bd:10:92:13:a2:2c:64:
         dc:d6:64:7f:f9:43:7d:5a:e2:58:f5:d4:74:d9:7f:48:4e:e0:
         b3:72:67:9c:f3:89:ac:65:a2:8b:80:cb:7b:d2:82:a2:37:47:
         df:67:9c:24:4b:ac:59:23:f9:cd:a7:32:99:d6:00:a1:f8:b2:
         0f:5f:a8:e5:e5:a8:41:71:0d:b5:6e:f1:db:c4:aa:27:be:72:
         19:b8:f2:20:47:9c:01:35:9f:27:61:65:00:b9:77:d9:93:fc:
         7f:a4:c4:6f:e6:55:1e:9b:8d:e7:4d:8c:d8:f2:17:67:76:5b:
         c1:29:ce:91:cf:09:27:8c:59:13:38:77:60:2e:bd:2c:a5:76:
         b2:84:fd:64:24:4b:a4:86:a8:a2:b1:21:2b:96:1d:90:56:4f:
         23:0c:de:77:62:72:c8:00:9c:a2:25:30:bc:08:fa:1b:0b:4d:
         b0:6e:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org