Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31392e302f32342d3234203d3e203233333833.roa
File:                     3139302e342e31392e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          oyZgUdARRQdknTd9nj4n81MKiI98xWc49iYooB1i8L0=
Subject key identifier:   1C:5E:26:D5:13:70:59:62:26:0C:91:C6:A4:A0:96:30:1E:92:1A:82
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       03E28C8EA3D5C6CAA0FD2FA9B579B0109BA7DB7B
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31392e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:41:04 +0000
ROA not before:           Tue 05 Mar 2024 17:36:04 +0000
ROA not after:            Tue 04 Mar 2025 17:41:04 +0000
asID:                     23383
IP address blocks:        190.4.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e2:8c:8e:a3:d5:c6:ca:a0:fd:2f:a9:b5:79:b0:10:9b:a7:db:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:04 2024 GMT
            Not After : Mar  4 17:41:04 2025 GMT
        Subject: CN=1C5E26D513705962260C91C6A4A096301E921A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:69:cd:d5:e2:09:8d:57:5c:2c:ec:b5:0b:
                    ae:92:86:ae:6b:e2:f8:5d:a4:3b:7f:96:09:ef:cb:
                    3d:b5:1c:2d:38:8c:33:9a:d2:66:88:ed:f0:cd:f7:
                    51:9a:23:61:57:da:72:df:eb:4f:69:d7:c1:bf:d3:
                    af:a0:67:cd:ab:82:5a:23:5c:cc:d5:71:2a:d6:e5:
                    c4:35:d6:48:f8:73:ea:4f:0c:16:44:fb:2e:a7:4a:
                    11:30:cd:84:d8:0f:49:6a:51:ce:1b:f7:29:31:e5:
                    2f:6e:00:76:d7:99:9a:73:bc:9c:5b:e4:78:64:4d:
                    d1:7d:b6:47:d8:41:d3:31:c8:cb:5a:e2:5f:1f:4c:
                    39:c1:cb:df:2d:f0:dc:8b:86:e2:85:00:52:f3:71:
                    18:ec:f6:44:a2:8a:63:c0:4e:ce:e7:16:a0:ce:1f:
                    8f:e3:3a:22:f9:4f:3b:06:21:f8:0e:d6:96:d0:9e:
                    68:59:8b:12:31:ea:4c:53:82:fe:d5:0c:0b:c7:48:
                    ce:08:c9:3d:04:e1:fe:6e:0b:69:ff:3b:ea:1b:de:
                    2f:33:59:67:06:39:9b:53:9c:b5:9c:c6:8c:5c:be:
                    1e:d8:85:5b:a1:3d:44:64:7c:46:12:e9:20:fe:bf:
                    b6:3f:a9:c6:ad:65:36:a7:40:e9:d1:ca:b9:09:15:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5E:26:D5:13:70:59:62:26:0C:91:C6:A4:A0:96:30:1E:92:1A:82
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31392e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:eb:7f:ee:3c:c1:a8:39:67:37:87:52:e7:71:bd:97:32:
         6c:d9:f4:62:58:8e:1a:8b:70:a4:2f:90:5c:26:7d:c3:cb:87:
         d6:6c:8d:f9:e5:69:9d:4a:19:08:68:cc:b6:ca:d0:b7:ea:ec:
         42:71:ec:1e:45:c2:3c:c8:38:53:cd:fb:9f:22:6f:6a:ae:a8:
         b0:fe:68:92:56:a2:94:1a:48:a4:81:5a:93:3e:1e:f2:ea:f6:
         75:e8:44:c6:3d:12:83:e5:b1:31:af:64:f8:2e:85:d1:79:39:
         54:13:fb:33:33:74:91:2d:07:48:86:01:0a:86:9e:61:d6:5e:
         b6:21:8a:19:9b:26:3c:5b:21:09:c6:61:04:90:09:8d:36:75:
         5e:bb:38:89:89:44:7c:56:36:d3:18:5d:1c:6f:ee:af:1f:da:
         e3:f7:4a:c9:b7:44:72:66:a0:15:71:76:c7:fe:1f:64:28:8f:
         e4:b4:9f:84:2e:2d:4f:c7:df:9f:70:ae:19:71:0a:de:ce:3d:
         93:75:12:dc:db:80:80:ce:d0:f2:08:d2:6d:73:97:1b:34:52:
         a8:25:60:b1:8b:d5:37:97:99:b9:85:a6:9d:f4:4c:4f:98:1a:
         55:b2:5a:8b:80:87:f3:22:38:a9:2d:fc:12:a5:05:02:18:10:
         ff:73:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org