Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31322e302f32322d3234203d3e203233333833.roa
File:                     3139302e342e31322e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          6GBN7IrKRL6MTzf1R8KegQLSOAxG6pBMJpw2mLFKz8U=
Subject key identifier:   8E:2E:D6:CA:42:AA:39:F4:0C:33:B2:B5:89:33:C8:B3:9C:B0:A4:3B
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       2AA4066D0A0FEE76A5FEFB808F905ED5FB5860F1
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31322e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:41:13 +0000
ROA not before:           Tue 05 Mar 2024 17:36:13 +0000
ROA not after:            Tue 04 Mar 2025 17:41:13 +0000
asID:                     23383
IP address blocks:        190.4.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a4:06:6d:0a:0f:ee:76:a5:fe:fb:80:8f:90:5e:d5:fb:58:60:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:13 2024 GMT
            Not After : Mar  4 17:41:13 2025 GMT
        Subject: CN=8E2ED6CA42AA39F40C33B2B58933C8B39CB0A43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:22:c0:43:6c:fb:57:b0:9a:fb:6b:28:98:
                    03:39:4e:bd:82:e6:32:2e:f0:df:d3:16:85:56:17:
                    59:a3:5d:f1:07:b5:07:33:59:70:bd:e5:04:c1:ac:
                    88:a2:2c:bd:1f:d9:b4:1d:f9:e1:c7:f0:9d:ab:ea:
                    90:be:cd:f7:41:fd:ff:32:02:17:35:89:81:c2:ac:
                    90:d4:49:62:0c:e1:fb:1e:ad:bd:76:a4:2c:65:fb:
                    5e:71:43:1a:e6:30:60:c5:39:c5:4b:d9:1e:b9:3c:
                    c6:c3:c4:64:3d:a9:c8:53:54:82:57:c5:08:e3:4c:
                    54:b4:7a:d2:b1:a7:21:52:ee:e7:fa:e2:4b:e1:aa:
                    5a:03:65:60:e3:96:ef:92:fd:0e:ea:97:f6:bd:fd:
                    f9:5b:c4:3c:d5:6c:a4:09:c6:ee:df:e0:74:ee:cd:
                    38:95:5c:61:66:22:8b:f3:e7:0a:cc:1a:db:99:08:
                    07:f5:1d:23:5c:4b:d8:49:ea:46:91:e0:25:3f:1c:
                    23:85:ad:68:29:5b:02:01:7c:a3:2b:8b:63:8f:9f:
                    5a:c8:93:82:f9:9c:21:d6:67:87:a1:18:ac:5d:ae:
                    35:43:f4:87:b9:62:3e:f3:0d:a9:d0:bd:d6:3e:a6:
                    8a:42:05:23:1f:4b:95:7a:ca:b2:77:c6:71:67:32:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2E:D6:CA:42:AA:39:F4:0C:33:B2:B5:89:33:C8:B3:9C:B0:A4:3B
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31322e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:25:e6:2e:e1:07:47:20:27:18:16:03:8e:d0:09:96:90:8f:
         dc:cb:d5:82:cc:2d:01:f6:f5:f5:0c:58:a3:4f:ff:65:0d:51:
         1d:76:67:8c:3b:d8:f2:99:eb:aa:7a:5d:af:20:da:94:2a:aa:
         af:8b:80:2b:de:e1:ec:31:5f:6a:e2:63:61:51:49:1e:4f:6f:
         74:67:7b:96:d8:d6:1f:9b:ce:b3:89:d4:52:6c:df:41:c5:ec:
         a6:94:f5:86:b1:bc:ac:59:2e:0e:64:f2:5a:75:c4:96:54:77:
         3f:93:0d:c4:ac:d7:9a:06:e9:01:94:fd:57:c3:13:76:f7:85:
         db:78:a2:aa:d9:2d:2f:4b:e8:f9:a9:ce:aa:1b:d8:04:02:2b:
         76:57:51:ba:2b:f5:8d:63:22:de:e2:56:f5:b9:0c:b7:29:72:
         e7:ee:30:ef:17:21:7c:d8:04:c8:c1:fa:e4:6c:d8:04:a3:2f:
         94:93:5e:33:e1:18:ed:8c:06:7d:5d:f6:20:bd:c8:89:4f:f1:
         dc:95:8a:af:f2:bd:13:32:64:4b:04:4c:d8:e7:fd:0f:49:2e:
         c4:49:c6:6d:35:1a:1e:49:bb:a4:bc:2d:7c:5b:8b:32:69:b5:
         da:5c:aa:10:9c:e1:b0:74:83:78:67:56:06:a0:7e:64:84:42:
         65:13:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org