Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3139302e36342e302f31382d3138203d3e203133343839.roa
File:                     3230312e3139302e36342e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          HrIbXybjbqBEpnF946oCCqa0NHcn3Rom+1IW5WffrZQ=
Subject key identifier:   6A:F2:A0:5C:D7:54:D9:4B:FE:0F:D2:53:16:E0:22:59:B8:F3:EC:50
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       45CCD8A643964809EC5E4653D325A2C1AFC44A01
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3139302e36342e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:53 +0000
ROA not before:           Tue 05 Mar 2024 18:01:53 +0000
ROA not after:            Tue 04 Mar 2025 18:06:53 +0000
asID:                     13489
IP address blocks:        201.190.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cc:d8:a6:43:96:48:09:ec:5e:46:53:d3:25:a2:c1:af:c4:4a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:53 2024 GMT
            Not After : Mar  4 18:06:53 2025 GMT
        Subject: CN=6AF2A05CD754D94BFE0FD25316E02259B8F3EC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:10:2d:44:35:85:45:ce:3b:4d:ab:ae:81:
                    b6:a3:47:93:cd:a1:dc:ef:27:3b:c5:4f:3f:5b:8e:
                    50:2c:ad:48:3b:9d:bd:a7:de:a9:54:f6:ad:6e:c9:
                    49:2e:f0:21:ba:8b:d4:0a:be:50:f1:ae:46:60:e7:
                    46:a2:f2:05:d8:17:d9:d1:7e:c3:67:f3:c9:a9:36:
                    1a:2c:08:8e:3b:54:59:76:9c:98:f5:66:c8:98:e4:
                    fc:18:50:8e:3f:72:0a:d0:04:83:28:e9:77:70:a1:
                    4b:9f:78:3f:38:23:d6:a0:c6:8b:0c:f4:9e:be:9e:
                    85:8c:53:44:f2:93:7e:69:bb:a1:48:be:ff:c2:bb:
                    c5:4a:16:40:7b:38:01:bb:63:0f:d2:67:25:fa:47:
                    f0:67:ed:ab:e0:e4:a3:2a:67:f3:42:dd:78:8d:d7:
                    a7:e4:00:23:1e:af:5d:4a:9d:8f:1f:cd:5b:41:c0:
                    4d:0b:f0:a8:19:c7:ef:55:eb:5f:d9:07:92:5a:43:
                    f9:f5:f0:96:63:47:43:14:62:d9:05:d6:40:7e:d8:
                    ef:53:63:d7:ea:d7:45:22:fc:ee:97:fa:8e:b3:74:
                    7b:b0:a9:df:3f:b2:1d:1b:62:dd:ba:57:27:64:36:
                    c8:73:ff:12:c2:e1:47:7a:b3:8f:8f:fa:f6:3a:31:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F2:A0:5C:D7:54:D9:4B:FE:0F:D2:53:16:E0:22:59:B8:F3:EC:50
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3139302e36342e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:3d:3a:4e:8f:39:af:82:6b:e4:a2:47:00:ca:6a:50:a8:5a:
         18:2d:54:2e:49:b9:db:98:73:35:a1:94:d7:e2:3b:8c:58:51:
         48:b6:26:82:8e:eb:08:99:85:ba:7a:e9:17:03:fe:26:5f:94:
         45:4d:46:f8:61:54:45:41:8c:52:ac:bc:06:7d:27:11:ae:1f:
         24:25:c0:6f:e1:74:26:61:20:d3:b3:f6:b6:de:18:33:ba:e7:
         a3:ec:27:a1:0f:08:9c:f4:6d:b5:81:90:22:75:f1:ad:3b:c6:
         a5:9e:b2:59:b3:33:7d:44:4d:f0:c1:47:a8:54:0b:30:ae:d7:
         3c:f0:28:8d:4d:a4:cd:d8:38:d4:85:00:d8:2d:6b:3b:3f:10:
         2a:66:7d:3e:16:95:73:ef:6b:c1:dc:94:8f:6f:46:38:cd:58:
         0d:cd:e0:d7:f2:29:45:85:7d:85:b4:5e:b5:dd:f3:65:e4:76:
         19:5e:c1:b7:bb:03:ed:6f:83:3e:80:1e:52:af:c2:36:6d:52:
         1b:0e:38:0e:d9:0c:75:e2:c6:2e:86:17:97:83:5d:67:e0:7b:
         68:49:12:f8:e5:7a:4b:a0:51:c9:d8:cc:9c:97:e6:4b:ed:82:
         05:cb:e2:c0:75:39:83:bd:65:d7:d2:6f:1d:3e:7e:46:05:a5:
         cf:a9:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org