Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3138203d3e203133343839.roa
File:                     3139302e392e3139322e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          qQohv/a3+32EelDCcimS4PsctX8ogP9sM2Hk8R1vc7E=
Subject key identifier:   73:34:D4:4E:F2:46:8E:85:2F:49:50:E4:47:5F:D7:2C:61:20:EB:AE
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       0FD0CFE436BA2549990B36FA1F5773EFBC688101
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:57 +0000
ROA not before:           Tue 05 Mar 2024 18:01:57 +0000
ROA not after:            Tue 04 Mar 2025 18:06:57 +0000
asID:                     13489
IP address blocks:        190.9.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 11:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d0:cf:e4:36:ba:25:49:99:0b:36:fa:1f:57:73:ef:bc:68:81:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:57 2024 GMT
            Not After : Mar  4 18:06:57 2025 GMT
        Subject: CN=7334D44EF2468E852F4950E4475FD72C6120EBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:86:82:59:19:d0:1b:1b:b2:bc:47:31:75:
                    95:b3:bd:c3:41:40:d7:62:5e:a4:ee:73:40:00:96:
                    4a:2d:11:e5:38:40:05:70:67:82:2e:20:56:d1:b5:
                    58:6e:64:8d:36:7a:40:5f:96:88:55:ac:33:84:2f:
                    80:7c:e6:6c:25:a8:8b:98:80:52:be:8d:13:2d:39:
                    96:5b:2b:80:f7:73:7f:85:f9:1f:43:31:44:61:81:
                    3d:05:ef:97:14:20:ac:74:d3:85:1a:0d:e9:05:5f:
                    cf:42:c3:5a:f6:23:2c:b6:d4:00:d2:76:e5:16:29:
                    5a:17:dc:25:9c:be:88:90:d4:b1:53:c6:97:65:8b:
                    00:ae:7f:de:1f:52:fd:ef:d0:e3:83:7e:4f:9f:ee:
                    20:67:ac:ad:d5:78:45:6f:d8:b2:73:70:14:f2:92:
                    50:56:33:81:db:07:ad:d1:46:12:90:6e:0c:fa:87:
                    19:81:33:89:bb:01:3a:23:bd:af:c7:de:da:f2:7e:
                    82:92:41:b6:ac:0f:cc:cd:b3:1f:11:8a:20:03:2e:
                    5f:9a:b4:2b:6e:11:27:b5:4c:b8:17:d0:f6:44:e7:
                    20:33:b7:38:5c:43:c4:a5:14:0b:07:6d:a2:73:05:
                    67:01:e5:12:c7:d0:f9:cd:b8:bd:34:fb:30:83:f8:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:34:D4:4E:F2:46:8E:85:2F:49:50:E4:47:5F:D7:2C:61:20:EB:AE
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:56:55:3f:90:2a:3e:c6:3e:50:94:93:ec:82:a9:02:b9:04:
         b9:64:62:73:d9:0d:a2:95:33:36:44:55:0f:b0:a3:e0:56:7d:
         82:d4:96:3e:20:f1:bc:f1:26:b2:33:98:66:cf:33:5b:60:54:
         50:8f:98:b8:a1:7f:10:a4:61:3b:0c:31:66:90:21:fd:5c:71:
         26:a6:8a:1d:ee:a0:15:32:4b:15:4d:9b:61:00:ff:ab:2f:48:
         50:70:c0:6e:a3:fa:79:18:e4:c3:44:b7:bd:d4:69:1f:cd:f5:
         19:39:d7:54:dd:e9:6b:d5:b6:d1:c7:61:3f:75:01:6c:9a:8e:
         50:7a:94:79:f9:3e:04:b2:f0:e7:1c:04:1d:a6:36:d2:a1:59:
         ea:ba:c3:0a:09:47:06:21:12:98:d0:f2:98:05:cd:18:de:47:
         37:c2:2c:b1:e0:71:22:92:1a:00:6d:30:7a:1e:2c:ae:a6:79:
         d8:89:fc:d5:8a:54:b8:69:bb:9a:6d:1c:09:4a:ab:c7:c6:12:
         88:75:d4:85:61:f7:8a:46:66:f5:88:40:06:c8:fd:05:65:90:
         a9:d3:c9:c7:14:50:a9:3e:50:3b:f7:2e:6c:01:d9:1c:d0:5c:
         69:3b:1f:b5:f4:f7:82:b1:d9:32:9d:d6:6e:7e:a5:2a:96:f6:
         e8:51:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:49:21 2024 by rpki-client on console-fra.rpki-client.org