Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e302e302e302f31382d3138203d3e203133343839.roa
File:                     3139302e302e302e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          ltN1QRHY8PVxckPPsCnMe8y+YV5pkaBM5vXCM4RQYpI=
Subject key identifier:   80:10:CB:74:D1:C0:81:94:F3:B7:2D:B5:74:EA:E9:4C:CA:C2:DD:7F
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       0B22E57811690343535D3901E90D757DBA580422
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e302e302e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     13489
IP address blocks:        190.0.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:22:e5:78:11:69:03:43:53:5d:39:01:e9:0d:75:7d:ba:58:04:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=8010CB74D1C08194F3B72DB574EAE94CCAC2DD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:49:1e:8a:70:66:37:d9:b0:de:66:5c:89:
                    8b:c8:22:45:f9:fe:42:7a:1e:e5:ce:72:a0:f5:9e:
                    ef:a0:2d:aa:66:88:aa:70:6a:3e:87:1b:52:3f:da:
                    05:bf:66:a1:15:2a:2d:ce:cb:4a:28:c6:f1:3c:32:
                    bb:82:23:09:e6:00:ac:57:07:14:d1:3e:c9:9f:65:
                    c6:9b:12:f0:1c:81:05:07:f3:51:ba:3f:02:27:50:
                    71:bf:48:4e:4e:10:6f:f5:62:e3:bb:a8:61:3e:68:
                    bd:2d:01:ee:b5:52:e3:9e:00:1f:4a:02:39:61:27:
                    e2:e0:18:fd:a7:80:17:0b:d0:16:a3:31:d6:e4:53:
                    37:6f:3f:c6:ee:84:99:3c:d9:ce:7c:eb:76:05:a4:
                    9b:79:a0:6d:14:10:c4:3e:f3:08:04:79:e5:51:5f:
                    58:b3:42:9a:d2:bf:2e:50:89:9d:9c:42:0e:26:a8:
                    1c:7e:db:a1:3c:4f:4d:50:c1:a4:88:7e:fe:45:c9:
                    b3:f4:c1:60:f1:be:80:21:fb:cd:61:8b:f3:0e:cc:
                    3e:25:a1:c5:da:7b:b2:c3:4b:58:66:bc:9b:92:f5:
                    73:71:74:e0:2d:0f:2a:58:28:64:b8:fa:da:b4:bd:
                    e3:fb:cd:7d:04:9e:21:8e:82:c1:84:da:50:db:6f:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:CB:74:D1:C0:81:94:F3:B7:2D:B5:74:EA:E9:4C:CA:C2:DD:7F
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e302e302e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:ff:55:ad:ee:9a:60:4a:43:79:c8:60:35:b3:3e:17:bf:
         07:c1:26:bd:97:60:11:bf:b8:07:67:e2:24:46:11:f9:f9:a0:
         ec:9c:e2:f2:5f:bc:1e:bf:85:84:7a:ee:a5:af:0a:1f:e7:c6:
         3e:70:11:1f:e3:a0:3b:d0:76:3d:32:cd:e8:56:75:fb:56:d3:
         f4:4f:f4:ce:56:a0:3a:32:4c:9c:56:28:a8:62:53:cd:b1:ea:
         49:8e:c4:31:d2:93:65:3a:52:2d:44:42:2e:aa:7a:7f:c4:e2:
         c7:b4:7e:56:f7:e2:5a:93:4d:3e:06:e6:e5:9d:d0:ff:0b:fc:
         45:95:27:cc:99:bc:56:78:10:0b:4b:f1:22:b6:9c:ac:7a:ce:
         50:ab:d0:d6:3c:5f:d9:fc:9a:d0:f5:41:f6:54:aa:80:ba:8c:
         27:db:87:e6:8a:e1:fa:79:56:18:9f:64:44:a3:74:1e:58:a8:
         f3:f2:e0:62:07:8a:b4:03:72:0d:b4:d3:76:1a:c7:27:93:89:
         e0:01:73:71:f7:a3:dc:cf:9d:73:de:e6:d5:62:d0:a6:28:68:
         95:fa:9d:1d:e6:7e:c9:47:a8:0f:23:99:2a:dc:7b:70:bf:5a:
         e3:4b:98:36:7b:af:bf:17:6d:e0:bd:b0:9e:54:4f:d6:ec:ee:
         c4:fe:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:39 2024 by rpki-client on console-ams.rpki-client.org