Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa
File:                     3139302e37312e38352e302f32342d3234203d3e20323732383239.roa (raw, json)
Hash identifier:          tBGtOGTyX/MOMgIMjEf26VCC5UPrYv2cbvgqIIKLugI=
Subject key identifier:   38:D9:87:AD:19:79:94:79:56:BE:D3:05:B9:16:4A:E5:69:5F:BC:43
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4302CF96126DD26B125D146436A37A9E1BC39BB4
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa
Signing time:             Tue 05 Mar 2024 18:06:52 +0000
ROA not before:           Tue 05 Mar 2024 18:01:52 +0000
ROA not after:            Tue 04 Mar 2025 18:06:52 +0000
asID:                     272829
IP address blocks:        190.71.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:02:cf:96:12:6d:d2:6b:12:5d:14:64:36:a3:7a:9e:1b:c3:9b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:52 2024 GMT
            Not After : Mar  4 18:06:52 2025 GMT
        Subject: CN=38D987AD1979947956BED305B9164AE5695FBC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:10:af:72:ed:78:ff:b3:1e:e9:9b:3e:73:
                    fe:2a:69:cf:67:14:bd:09:7a:36:ef:e4:15:a9:03:
                    39:9c:92:72:6d:30:58:6e:d4:8d:4e:4e:e7:16:30:
                    60:ea:3e:8d:15:f4:54:a3:0b:1b:ae:be:4a:7a:26:
                    fe:03:54:7f:65:4a:29:20:f6:17:a8:a3:6f:b9:a6:
                    9a:26:60:17:d9:f6:c0:a5:b9:ea:13:1a:f5:2f:09:
                    6b:9f:28:15:a0:89:3d:62:73:10:d3:80:15:7f:0c:
                    ae:2d:79:5a:2c:3d:10:25:f8:63:af:ec:7d:80:82:
                    17:50:ac:9b:80:48:7b:a0:24:04:e6:64:ec:da:27:
                    be:32:6f:3a:85:ab:2d:bc:66:32:5c:18:d2:71:13:
                    cc:f3:94:ce:96:30:a7:77:e0:87:86:e7:c2:0d:71:
                    bd:f4:65:f7:c4:2d:bf:cc:b7:7c:87:96:2d:57:12:
                    0f:c6:77:06:54:87:1e:23:bb:5f:ca:46:e3:66:4b:
                    c9:39:3d:fa:af:c7:5d:61:a7:b3:bc:51:e7:2b:ab:
                    d2:96:70:97:4d:6e:86:85:47:11:24:b3:8b:12:c4:
                    74:8e:51:b5:d3:76:0c:7e:f6:87:19:a7:10:c3:70:
                    8f:4e:39:27:69:99:ce:19:99:a7:43:73:83:e8:d8:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D9:87:AD:19:79:94:79:56:BE:D3:05:B9:16:4A:E5:69:5F:BC:43
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323732383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:0e:f4:de:63:cf:2a:56:75:e2:29:df:c4:40:8a:90:78:
         33:b7:92:be:79:4e:8c:1a:62:4e:f7:7f:38:41:6f:04:dd:4e:
         d9:52:92:6c:88:73:97:23:76:3d:e3:1a:b5:ff:31:a2:10:77:
         71:40:2c:0e:27:cd:bb:2d:51:11:00:a7:b5:2e:92:cb:7b:a7:
         e6:fb:24:2c:a5:1f:54:e7:fe:b4:f0:97:bf:0a:04:d3:dc:8c:
         ac:ad:f6:54:c1:b8:fe:f2:9d:be:c3:a2:d9:5a:b9:81:d2:91:
         8c:84:2f:b4:70:52:7d:ba:58:12:d4:73:c3:f6:e0:12:d7:91:
         0f:06:71:09:f1:ae:ab:14:16:a7:2f:05:57:7d:6a:16:3c:58:
         27:3e:f5:fa:09:fe:1b:d1:e8:eb:e8:34:06:70:0b:f9:e0:a3:
         9d:4e:0a:8e:71:af:85:ce:5f:5e:cc:4b:0b:29:7d:01:0a:e6:
         f3:52:5a:48:d3:e0:b9:d5:91:45:e5:f5:9f:6c:95:13:48:27:
         d0:20:94:a6:91:fa:db:c6:30:e9:e8:1f:3f:19:29:52:71:32:
         16:e1:c3:5a:03:7e:18:20:c6:a8:33:56:9c:b2:f0:1b:89:be:
         c3:d6:16:f6:9a:49:4d:3e:db:16:9d:f5:47:52:bf:4a:53:33:
         cc:56:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org