Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa
File:                     3139302e31342e302e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          VeQSpyal5Z82Hm81+SonnS7KVSq36RHHH4H8mN0pewU=
Subject key identifier:   39:3A:47:29:78:35:DC:F1:AA:1A:7F:10:E5:9F:D3:CD:19:40:A3:D4
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       16FBE82FD8015EAABE21E49F1AC045CA5BE59917
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:40:54 +0000
ROA not before:           Tue 05 Mar 2024 17:35:54 +0000
ROA not after:            Tue 04 Mar 2025 17:40:54 +0000
asID:                     26617
IP address blocks:        190.14.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fb:e8:2f:d8:01:5e:aa:be:21:e4:9f:1a:c0:45:ca:5b:e5:99:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:54 2024 GMT
            Not After : Mar  4 17:40:54 2025 GMT
        Subject: CN=393A47297835DCF1AA1A7F10E59FD3CD1940A3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:b3:18:61:57:5b:7f:46:d7:ac:ad:55:29:
                    e9:fd:84:99:82:92:97:51:7a:02:6e:5c:b9:04:50:
                    7f:24:cd:94:b6:a2:8f:3c:93:b4:fa:60:c2:1b:ef:
                    c7:61:8f:c2:e5:12:aa:13:e6:d2:c0:9f:a8:3f:a1:
                    9c:2a:7c:ad:e6:03:10:e4:fe:18:80:e8:c8:48:12:
                    a8:ac:d7:f9:bc:70:3f:36:d2:9d:dd:85:30:7c:ea:
                    d6:d2:a1:21:ca:2f:74:99:01:04:f4:be:3a:3e:0c:
                    2a:d1:07:60:f6:b0:d0:ca:84:6f:64:89:58:af:12:
                    e1:cc:c8:83:f1:3b:78:04:10:6d:85:f0:69:30:d5:
                    da:d3:eb:07:8d:2e:f9:df:09:8e:79:67:81:0f:bc:
                    56:2b:6b:2c:28:d2:0f:73:e3:39:85:b0:e8:c4:b7:
                    b7:3a:4f:36:91:9d:53:f7:60:08:f2:1f:84:8f:50:
                    d1:47:08:ed:7f:49:20:77:dd:bc:1f:2b:ce:00:13:
                    84:44:00:c7:7d:7c:43:4b:34:ea:1b:a2:b9:03:1c:
                    53:53:40:8d:c8:a6:56:19:35:b5:3e:5d:ed:b9:b5:
                    96:61:70:cb:0c:32:18:79:bd:5b:f9:af:a9:28:de:
                    01:95:6f:62:8f:6c:1d:8c:82:82:28:da:c9:78:b1:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3A:47:29:78:35:DC:F1:AA:1A:7F:10:E5:9F:D3:CD:19:40:A3:D4
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:74:78:b5:67:21:e4:da:a8:ab:7f:81:95:d6:0a:56:66:
         ea:08:d0:45:c3:1d:8b:9b:fd:55:79:00:82:4a:c8:2c:24:44:
         7d:6b:a2:46:d3:2d:db:7c:5c:85:14:d9:cd:a1:7a:3a:78:36:
         71:9e:6c:0f:73:b2:a1:4b:56:17:53:a8:c8:2c:a0:cc:fa:e9:
         da:a7:1e:eb:ab:33:4b:8a:b3:ed:ea:3f:f2:f6:0f:96:9b:7d:
         f4:1c:62:2a:c4:23:66:ac:dd:ba:21:cd:c8:78:0a:87:5a:9e:
         31:7a:79:fd:e7:75:89:e1:45:06:95:19:d0:29:90:f9:4c:45:
         46:59:8a:1c:68:df:ad:60:30:ec:e8:f8:d1:35:13:2f:ee:76:
         ce:7e:ea:2f:a8:d3:1d:e0:58:08:0f:45:67:53:ee:17:9a:25:
         89:83:e2:6e:b5:ee:20:31:b8:db:03:06:aa:5e:69:5a:b5:0b:
         06:c6:d9:58:ed:71:54:8f:4a:8b:ec:25:84:e7:bb:69:72:3e:
         8e:af:9a:8c:b3:ec:67:b6:b3:8d:5c:25:1a:31:c2:74:a5:95:
         dd:99:68:35:b5:69:f6:8c:11:a0:f3:d1:d5:7e:9b:cc:2b:9f:
         6f:f1:e4:c0:66:77:64:19:de:e8:28:1a:a3:8c:b9:ce:07:ae:
         ba:c8:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org