Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31382e302f32342d3234203d3e203233333833.roa
File:                     3139302e342e31382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          O/WqQ31NW5JvnuPQ+P6JaThxfhfXAlDTYoxNjp/zQs8=
Subject key identifier:   60:4A:5F:05:06:92:CB:9F:49:4E:6E:15:8E:DE:E5:10:9B:C1:A5:B4
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       583E1E57187E2FD0E892164CDE1F8405E703D45C
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:41:01 +0000
ROA not before:           Tue 05 Mar 2024 17:36:01 +0000
ROA not after:            Tue 04 Mar 2025 17:41:01 +0000
asID:                     23383
IP address blocks:        190.4.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:1e:57:18:7e:2f:d0:e8:92:16:4c:de:1f:84:05:e7:03:d4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:01 2024 GMT
            Not After : Mar  4 17:41:01 2025 GMT
        Subject: CN=604A5F050692CB9F494E6E158EDEE5109BC1A5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:e1:61:e7:e8:17:ed:e2:db:1f:7f:5e:8f:
                    85:3f:5d:7a:82:4e:19:c5:2a:26:3e:e2:ee:67:c7:
                    c9:0f:90:33:a0:cb:7e:49:19:a6:97:17:80:e6:bb:
                    4f:8a:88:cb:12:4f:38:84:d6:fa:88:d1:0e:c8:ba:
                    6f:32:18:ff:f5:ce:46:a2:47:5a:a0:41:52:d3:6a:
                    05:3d:bd:e4:b8:10:f6:03:a7:2d:3c:f1:b2:cd:5a:
                    68:ea:71:82:4d:84:75:b0:6c:a2:34:d1:c6:8d:33:
                    77:64:f7:1f:a8:be:6f:73:49:4f:a6:cd:7d:bb:d5:
                    98:25:01:db:c5:92:ab:d5:ce:fb:30:0b:8e:b4:15:
                    4c:4d:9f:fa:a5:ce:f1:e0:67:8e:7b:99:8e:09:b5:
                    5d:70:24:c5:23:45:48:2f:95:d5:d4:aa:de:69:16:
                    17:06:f2:77:15:f8:2d:ea:bb:d3:61:3a:5b:6c:30:
                    d6:0c:37:52:e5:96:ff:97:13:67:8d:d5:f7:4f:3b:
                    b8:e5:06:01:9c:0c:7a:b6:23:ec:d6:61:7d:44:21:
                    8d:50:12:6a:db:ad:52:6f:35:ff:a4:0e:38:5e:d4:
                    13:c9:af:5c:9e:0a:24:fe:d8:a6:1f:8c:cb:17:5a:
                    1f:44:d4:49:62:fe:37:8b:f3:18:28:ca:de:4f:3d:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4A:5F:05:06:92:CB:9F:49:4E:6E:15:8E:DE:E5:10:9B:C1:A5:B4
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:c9:07:ad:23:62:ad:be:99:33:7d:5a:55:87:e3:0a:73:
         2a:6e:04:07:ec:3b:d0:c1:df:b4:37:d0:c6:51:1a:d1:29:d4:
         70:24:0b:35:9c:cd:b1:4b:aa:2b:d1:01:d3:9c:a7:65:6d:7d:
         14:2b:27:35:cf:29:00:06:0c:75:78:92:35:8c:12:c6:11:de:
         3a:eb:2b:98:ac:f5:6f:4b:68:2b:42:db:6e:e5:ff:a9:c4:d5:
         30:5e:9a:18:18:3c:be:05:b1:a2:45:9a:31:8c:79:91:00:11:
         01:7a:3c:42:54:e2:90:fb:65:7d:92:84:a6:a3:34:cd:23:d6:
         b4:9a:f0:f2:39:ee:80:4c:15:6d:ff:9b:eb:8a:b6:3c:1d:c7:
         ab:cd:6f:4c:ae:bd:c2:1b:b2:e9:e3:93:e3:04:e2:c1:98:38:
         b3:cc:4f:20:ac:dc:47:67:fa:be:07:d8:47:b7:79:3e:20:91:
         c2:eb:00:3c:15:9f:fe:ac:c7:44:82:79:86:07:b6:cb:ec:79:
         14:fb:9f:1b:76:e5:e9:44:d1:c6:6f:6d:62:f8:8e:bc:1f:63:
         8d:9c:e8:7a:ed:ca:24:9d:bc:88:e1:40:1f:69:e6:67:0a:b4:
         6d:75:b3:28:3c:7e:a2:b9:7f:b3:e1:a0:10:1d:9f:67:50:9a:
         be:e6:44:58
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUWD4eVxh+L9DokhZM3h+EBecD1FwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNDAzMDUxNzM2MDFaFw0yNTAzMDQxNzQxMDFaMDMxMTAvBgNV
BAMTKDYwNEE1RjA1MDY5MkNCOUY0OTRFNkUxNThFREVFNTEwOUJDMUE1QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QeFh5+gX7eLbH39ej4U/XXqC
ThnFKiY+4u5nx8kPkDOgy35JGaaXF4Dmu0+KiMsSTziE1vqI0Q7Ium8yGP/1zkai
R1qgQVLTagU9veS4EPYDpy088bLNWmjqcYJNhHWwbKI00caNM3dk9x+ovm9zSU+m
zX271ZglAdvFkqvVzvswC460FUxNn/qlzvHgZ457mY4JtV1wJMUjRUgvldXUqt5p
FhcG8ncV+C3qu9NhOltsMNYMN1Lllv+XE2eN1fdPO7jlBgGcDHq2I+zWYX1EIY1Q
EmrbrVJvNf+kDjhe1BPJr1yeCiT+2KYfjMsXWh9E1Eli/jeL8xgoyt5PPX//AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUYEpfBQaSy59JTm4Vjt7lEJvBpbQwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMxMzkzMDJlMzQyZTMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzMzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgQSMA0GCSqG
SIb3DQEBCwUAA4IBAQAKBMkHrSNirb6ZM31aVYfjCnMqbgQH7DvQwd+0N9DGURrR
KdRwJAs1nM2xS6or0QHTnKdlbX0UKyc1zykABgx1eJI1jBLGEd466yuYrPVvS2gr
Qttu5f+pxNUwXpoYGDy+BbGiRZoxjHmRABEBejxCVOKQ+2V9koSmozTNI9a0mvDy
Oe6ATBVt/5vrirY8HcerzW9Mrr3CG7Lp45PjBOLBmDizzE8grNxHZ/q+B9hHt3k+
IJHC6wA8FZ/+rMdEgnmGB7bL7HkU+58bduXpRNHGb21i+I68H2ONnOh67coknbyI
4UAfaeZnCrRtdbMoPH6iuX+z4aAQHZ9nUJq+5kRY
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org