Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32382e302f32322d3234203d3e203233333833.roa
File:                     3139302e342e32382e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          INK/2xyGcTiDyRrxakp0wXm+Ky3C3zuWHrIMicnqy+0=
Subject key identifier:   49:6E:A2:EB:37:DB:54:8F:96:55:C0:07:75:49:A6:4B:3C:58:0E:62
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       0C9E8B64D6E57FDF1DD3B8EBF14A70D454FA7A
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32382e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:59 +0000
ROA not before:           Tue 05 Mar 2024 17:35:59 +0000
ROA not after:            Tue 04 Mar 2025 17:40:59 +0000
asID:                     23383
IP address blocks:        190.4.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9e:8b:64:d6:e5:7f:df:1d:d3:b8:eb:f1:4a:70:d4:54:fa:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:59 2024 GMT
            Not After : Mar  4 17:40:59 2025 GMT
        Subject: CN=496EA2EB37DB548F9655C0077549A64B3C580E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:9e:fb:93:1d:f1:4e:f6:5b:05:23:52:ad:
                    63:a6:27:70:89:2e:d8:f0:01:08:5e:88:56:5b:3b:
                    eb:d1:c5:cb:83:c6:5e:07:62:3e:70:23:be:0e:6d:
                    37:0f:c6:2e:6b:b8:31:4c:08:6f:8d:f1:ff:33:7b:
                    a3:87:7b:22:68:9b:c8:29:76:c2:df:46:3a:ff:ed:
                    e4:f2:ab:d1:52:0f:ee:41:ff:5a:f4:50:aa:7d:f3:
                    6c:1e:64:68:bc:34:b2:1f:d6:22:a8:5a:62:3a:21:
                    e3:1b:25:2a:28:03:ef:bb:c9:be:16:f7:4a:c2:f2:
                    bb:08:76:ef:79:d2:cc:94:47:91:09:cc:1e:2e:76:
                    65:a7:6a:85:5d:9a:49:d6:bb:6b:96:45:24:0c:f6:
                    8d:97:42:15:f4:22:59:53:81:f8:77:ab:ce:6c:1b:
                    5f:52:f9:81:ed:63:ed:8f:ae:f7:f7:88:c7:ed:be:
                    ab:38:f0:77:2e:d2:36:7a:1d:d8:54:44:e4:7e:f6:
                    49:33:d4:9d:ae:67:a2:88:bd:02:f4:33:e4:8f:9c:
                    cd:4f:3c:15:44:01:c2:94:d1:b1:b5:b2:7f:ac:48:
                    85:0f:3e:9e:51:e0:66:bc:30:f3:c1:f0:ab:b9:b5:
                    37:45:5a:4f:8e:06:75:7b:2d:28:d0:8a:f9:31:46:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6E:A2:EB:37:DB:54:8F:96:55:C0:07:75:49:A6:4B:3C:58:0E:62
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32382e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:5a:fd:c1:7e:c9:60:14:cf:67:75:12:7b:63:e0:96:47:
         22:d8:c1:86:91:ed:b6:27:77:d8:e9:78:48:e4:97:71:74:17:
         8c:a1:ef:8d:e5:27:c5:c6:b6:f0:10:21:52:af:d3:a3:6b:59:
         17:f4:11:0d:4e:d6:98:b7:57:61:a5:5c:7a:ff:f0:3e:37:99:
         5b:78:b2:69:bc:ee:bc:2c:8b:5c:ea:ac:fc:40:e1:90:26:d8:
         83:ca:3c:78:af:bf:cf:eb:1b:e0:d3:70:18:a1:dd:51:ee:06:
         b2:de:81:c4:63:05:07:a5:1a:5f:93:5f:d4:37:dd:c0:c4:86:
         01:c1:89:82:0a:63:91:fd:ba:03:c9:32:ff:4f:85:4c:b1:2e:
         ae:66:74:3a:63:38:26:22:67:a6:85:50:f8:3b:c0:c9:13:83:
         9b:5b:a8:ad:79:04:d2:2d:d2:61:6e:3f:1c:d5:6e:1b:e4:38:
         23:5a:30:6f:18:06:eb:e7:f1:6e:1e:30:65:44:2c:61:8b:9a:
         7d:bc:e5:b2:77:61:47:20:3d:1c:c3:4b:21:24:d8:d4:38:37:
         b6:79:26:61:35:2f:68:40:c6:45:64:99:9b:55:21:32:88:dc:
         6c:b6:8c:59:38:b5:4d:bf:02:e8:4c:b4:de:49:bd:18:1d:90:
         2e:25:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org