Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234382e302e302f31342d3136203d3e203133343839.roa
File:                     3139302e3234382e302e302f31342d3136203d3e203133343839.roa (raw, json)
Hash identifier:          XiRnrXmFpzMoL3gqojJR6GkIvVnBf8YY9Ry7rIjBur4=
Subject key identifier:   10:8E:AF:50:6B:DA:4D:59:A6:B1:F4:BF:DC:24:1C:0A:A7:8A:EB:71
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       61924E411E03B3D63A2EE98FB1552C133E49F57E
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234382e302e302f31342d3136203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:51 +0000
ROA not before:           Tue 05 Mar 2024 18:01:51 +0000
ROA not after:            Tue 04 Mar 2025 18:06:51 +0000
asID:                     13489
IP address blocks:        190.248.0.0/14 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:4e:41:1e:03:b3:d6:3a:2e:e9:8f:b1:55:2c:13:3e:49:f5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:51 2024 GMT
            Not After : Mar  4 18:06:51 2025 GMT
        Subject: CN=108EAF506BDA4D59A6B1F4BFDC241C0AA78AEB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:fe:f0:52:f4:81:4d:79:eb:c6:3c:b0:29:
                    1a:de:d6:c8:78:e8:cd:4e:fa:1b:b4:56:5d:ef:03:
                    a8:33:32:9e:12:c1:17:a1:70:01:35:6d:d7:e4:48:
                    d1:26:ab:0b:9f:db:c1:e2:d4:2b:a8:7f:a7:93:85:
                    4b:95:71:64:52:c4:bb:a5:0e:c4:9b:cb:55:e3:38:
                    d0:ca:df:fc:f3:e6:57:46:2e:29:c0:95:62:9b:d3:
                    54:1a:2b:dc:e1:46:fe:9d:6f:55:ff:fc:0d:af:14:
                    83:63:3a:e3:7d:78:b3:32:a6:64:de:63:7b:f5:9a:
                    d8:c1:a8:55:e1:79:d1:9b:d1:b3:3c:63:99:f6:19:
                    36:dd:23:6d:36:c1:aa:6c:7c:df:5f:1a:ec:19:d1:
                    40:81:44:ec:57:a2:8d:58:08:61:c6:7b:e8:30:59:
                    57:61:22:e8:cc:5b:8b:49:80:9e:e4:bb:e8:4d:09:
                    38:65:c7:90:55:27:df:61:96:c2:da:70:fc:b5:d0:
                    56:cb:10:32:34:75:0c:9b:40:8e:32:fb:cf:43:7d:
                    3b:01:ce:0b:ee:9f:4a:d1:82:f7:66:2d:2a:44:bf:
                    1a:79:7e:f3:28:f9:19:5b:1e:bd:27:93:5c:3d:ac:
                    66:6e:1f:17:c2:c6:3b:26:bc:86:0b:82:2f:9b:f6:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:AF:50:6B:DA:4D:59:A6:B1:F4:BF:DC:24:1C:0A:A7:8A:EB:71
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3234382e302e302f31342d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:2f:bb:ee:60:47:22:87:ca:25:e0:91:2b:b9:f7:60:cf:
         a8:ac:f0:26:1d:27:d8:7a:f7:75:71:77:99:a5:e1:6f:bf:f8:
         3f:fb:a2:c5:da:3f:96:e8:7d:44:d1:a8:6a:6c:9e:92:fb:bb:
         34:08:84:a1:67:89:38:10:23:0c:00:41:b3:03:b7:0a:78:20:
         f1:ae:99:9a:22:9c:fd:4c:e7:35:85:97:f3:75:ff:77:7b:97:
         31:82:23:cc:c7:bf:f4:b1:55:24:ef:55:19:6e:ae:19:44:fc:
         ec:66:1e:a0:0f:e6:c9:27:d2:c7:d9:de:1b:57:bf:72:4f:49:
         4d:a4:94:0d:cb:ce:17:d7:1f:8e:1b:35:ee:44:45:ee:ed:e2:
         61:20:11:0e:e5:be:74:d6:dd:93:9a:96:22:18:8a:73:02:63:
         a9:c9:58:ab:b0:f3:c1:f7:88:8d:d9:a0:29:21:ba:3f:c4:76:
         cd:19:e4:d0:f7:c5:5e:1c:6d:9b:6b:4a:0f:42:d2:10:b1:9b:
         a9:e3:77:b9:e7:32:29:72:15:76:3e:69:b7:f4:95:4a:8c:d5:
         25:e3:73:42:72:7e:7b:c0:5a:0e:8a:a1:a9:c0:a0:ed:aa:da:
         81:7b:9e:89:17:64:b6:00:6f:e1:7c:14:0f:2e:0b:43:cf:3c:
         77:e1:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:16:13 2024 by rpki-client on console-ams.rpki-client.org