Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32352e302f32342d3234203d3e203233333833.roa
File:                     3139302e342e32352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          DrKb8CcdRqnVrOPCJMfN9YYfwobEFdrR2BhW5VojRT0=
Subject key identifier:   60:C2:07:4B:F4:C0:1F:6A:83:75:90:49:8F:4E:53:BD:7B:AE:68:E4
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       34C9D8D33E67726986A78237CFE145F3A2B305C6
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32352e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:57 +0000
ROA not before:           Tue 05 Mar 2024 17:35:57 +0000
ROA not after:            Tue 04 Mar 2025 17:40:57 +0000
asID:                     23383
IP address blocks:        190.4.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c9:d8:d3:3e:67:72:69:86:a7:82:37:cf:e1:45:f3:a2:b3:05:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:57 2024 GMT
            Not After : Mar  4 17:40:57 2025 GMT
        Subject: CN=60C2074BF4C01F6A837590498F4E53BD7BAE68E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:64:8f:29:8f:9c:a1:e7:a6:e0:88:67:be:
                    d8:e5:e5:3f:46:78:41:39:1c:39:3d:1e:3a:a0:a1:
                    09:2b:f6:20:14:55:07:37:f5:68:8a:96:51:e4:42:
                    12:fc:50:fb:82:4a:ee:6c:f1:39:8d:cf:86:51:0e:
                    af:b4:c2:3a:f7:e0:1d:39:d4:c0:23:c4:62:af:90:
                    c8:c6:bc:2a:12:26:69:7e:f6:5a:33:87:15:53:35:
                    8f:89:09:25:c8:30:a0:bc:bc:9c:06:20:00:07:67:
                    bb:7c:8b:f9:1b:19:fd:e8:ea:1c:4b:c8:cd:d3:e0:
                    70:39:63:df:87:5e:2a:27:7e:0b:a3:88:20:5f:c2:
                    ea:02:87:b5:f5:c8:e0:ff:4f:da:d8:29:34:20:33:
                    4a:b6:76:4e:30:82:a7:ed:6a:d6:4c:17:23:6b:2f:
                    2b:22:db:a1:92:4b:a8:55:ac:0a:e2:71:ac:19:36:
                    12:72:e7:6f:d0:7a:bf:df:e8:e2:15:6a:f3:13:b9:
                    f7:4d:5b:d8:6a:c9:78:ce:0b:5f:62:d7:6c:63:8e:
                    37:6b:f7:84:7d:35:9c:e7:82:8a:48:e5:6d:ab:9b:
                    58:b8:cc:3f:15:d9:67:51:38:3e:bd:37:d1:cf:a2:
                    18:8c:1c:bd:71:a1:8b:13:57:4d:5b:41:04:a6:5a:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:07:4B:F4:C0:1F:6A:83:75:90:49:8F:4E:53:BD:7B:AE:68:E4
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32352e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:b1:cd:94:23:01:6f:9c:5b:0f:f4:9c:29:ab:e6:af:51:
         74:0f:d4:25:a6:8d:1b:63:7f:87:6a:62:38:83:8a:f9:09:ad:
         38:39:1b:6a:bb:9a:75:f6:af:4b:13:28:2c:d2:c0:18:20:42:
         8c:41:ae:61:6a:e9:91:72:f6:02:a9:f7:bc:a5:ff:04:40:b3:
         64:6d:05:ce:e5:d6:6c:e9:49:9b:12:7c:73:e7:d2:34:1b:77:
         51:39:19:f4:06:75:09:1f:b7:a9:84:d0:03:d3:d7:04:07:cd:
         96:d8:cc:3f:fd:b9:90:2e:ca:69:3a:13:79:c8:00:2f:a9:af:
         e4:3f:5e:cb:2c:88:c5:e9:fb:13:7f:ac:16:10:20:56:e9:93:
         0a:dc:2b:d5:43:01:1e:f4:12:d5:6b:e7:7e:a7:57:fc:54:9c:
         88:8d:d4:fb:73:48:d7:1c:42:5c:25:18:e5:c1:46:78:44:6c:
         46:72:80:49:63:09:9e:53:e1:2b:19:ac:e2:bc:ad:e6:27:2e:
         81:19:dd:b4:b9:fc:32:6c:e2:71:a3:ed:37:8c:cc:da:3b:a5:
         9b:ae:98:d5:01:5f:26:fb:86:9d:c6:98:b4:10:96:b9:f6:9c:
         a1:22:c7:5a:9e:80:28:c2:8c:2c:a4:9d:2b:5c:c9:ee:be:ab:
         30:0c:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org