Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/44ec9d979d74bccd60d211fa8dd3a05cedc6ddd2.roa
File:                     44ec9d979d74bccd60d211fa8dd3a05cedc6ddd2.roa (raw, json)
Hash identifier:          fNVQ4ORlFagxqJ2O0vrytAlkP60uUlNqNhOqZ3ySsjE=
Subject key identifier:   C0:37:A0:3A:1A:88:3B:BC:46:83:8D:70:00:72:35:CB:CD:D2:F3:39
Certificate issuer:       /CN=d50c5ae3ec63b7e74bff21cdf59603cefcd04c73
Certificate serial:       11F66A
Authority key identifier: 49:64:6F:B8:20:CE:AA:3B:B2:04:1E:D8:B0:16:A7:A7:5B:63:9D:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/44ec9d979d74bccd60d211fa8dd3a05cedc6ddd2.roa
Signing time:             Fri 21 Oct 2022 16:36:13 +0000
ROA not before:           Wed 07 Sep 2022 16:11:39 +0000
ROA not after:            Sun 08 Sep 2024 16:11:39 +0000
asID:                     52326
IP address blocks:        190.151.138.0/23 maxlen: 23
                          190.151.138.0/24 maxlen: 24
                          190.151.139.0/24 maxlen: 24
                          190.151.140.0/23 maxlen: 23
                          190.151.140.0/24 maxlen: 24
                          190.151.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177194 (0x11f66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50c5ae3ec63b7e74bff21cdf59603cefcd04c73
        Validity
            Not Before: Sep  7 16:11:39 2022 GMT
            Not After : Sep  8 16:11:39 2024 GMT
        Subject: CN=44ec9d979d74bccd60d211fa8dd3a05cedc6ddd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:6c:80:4f:0d:3a:ed:75:c5:8f:36:ae:a7:
                    b2:af:d3:0c:0e:50:c4:3f:9f:61:c8:7f:aa:da:1f:
                    07:0c:36:a6:ab:5d:b1:61:5f:7e:f1:0f:5d:d8:7e:
                    42:18:17:40:75:f4:3b:29:6b:65:81:06:25:35:72:
                    01:b1:88:46:1f:8c:a7:b7:52:cc:43:4a:94:2e:1d:
                    a0:a1:d7:9c:ea:00:a5:f3:6d:f2:82:1e:60:e1:6d:
                    5e:1a:3a:fd:21:1a:34:01:93:5e:d7:6b:92:6f:94:
                    9a:35:6e:55:63:90:2c:c1:44:3a:24:b2:d4:58:98:
                    2d:d7:9a:a0:0a:a5:11:42:f9:a2:70:9c:8e:7e:82:
                    df:fe:5c:b7:63:a7:cc:4b:b8:0e:97:c0:a0:36:c4:
                    2a:32:84:e3:f7:92:e6:20:6c:b9:35:ae:b8:49:ff:
                    95:32:62:ac:a4:a5:72:a3:73:ce:7f:e5:5f:84:fd:
                    3a:a5:62:5f:8c:d0:72:8c:54:c8:66:75:41:fe:63:
                    33:f8:81:d0:05:d4:b4:a9:a4:d8:49:86:83:fd:dd:
                    ed:a9:32:3d:87:ec:a3:36:fb:17:80:9f:bf:25:f1:
                    c2:81:42:58:7e:41:4c:fb:7b:05:e6:ba:ad:16:ee:
                    11:5e:4b:fa:20:4d:2c:09:06:f2:85:43:c4:d6:ef:
                    7d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:A0:3A:1A:88:3B:BC:46:83:8D:70:00:72:35:CB:CD:D2:F3:39
            X509v3 Authority Key Identifier:
                keyid:49:64:6F:B8:20:CE:AA:3B:B2:04:1E:D8:B0:16:A7:A7:5B:63:9D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/44ec9d979d74bccd60d211fa8dd3a05cedc6ddd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.138.0-190.151.141.255

    Signature Algorithm: sha256WithRSAEncryption
         48:df:67:63:04:8e:24:04:e0:38:db:25:b1:00:4d:93:dc:fb:
         29:c2:92:97:7f:76:c9:e7:19:0c:99:88:03:12:ae:eb:79:31:
         57:44:37:1d:34:9e:bc:cb:89:1b:08:50:39:1c:52:85:fa:e9:
         7d:2a:79:8c:84:49:39:52:79:b2:fb:0b:4c:ac:4a:2a:87:0f:
         57:d9:bf:a7:e3:96:4c:59:be:17:7d:df:17:7d:c4:48:c7:18:
         14:31:aa:c6:14:d1:44:1d:a1:a9:bd:c8:ac:d9:61:53:25:ab:
         0d:3e:60:6d:45:82:b5:dc:e9:0a:3a:eb:c8:8e:26:e2:31:47:
         6b:71:6e:37:c0:cd:eb:d6:3f:e4:3b:38:35:eb:87:af:f9:94:
         d5:71:26:a8:9a:f2:98:59:bf:a3:28:03:0b:2a:4c:6e:19:c8:
         6d:72:2b:29:06:e7:85:11:97:fa:9b:94:02:39:aa:2e:ac:3e:
         70:9e:57:5c:bd:fb:37:67:ec:f6:6d:cb:79:a5:49:83:e3:57:
         41:d1:37:33:b9:28:de:f8:ab:7a:8d:3b:7a:c0:3c:ab:4b:7d:
         dd:18:b0:33:d7:71:f6:75:3f:4d:d8:1f:a9:f6:b3:29:72:66:
         7c:37:01:ff:8e:8b:6a:af:b5:45:30:b4:38:8c:54:66:e0:10:
         1c:0e:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:40:26 2024 by rpki-client on console-fra.rpki-client.org