Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139312e3130322e34302e302f32312d3234203d3e203532333634.roa
File:                     3139312e3130322e34302e302f32312d3234203d3e203532333634.roa (raw, json)
Hash identifier:          QOG4UPd1pURDAgDgsZxxTS7K8IvWThD9CxoRQ5YQxD0=
Subject key identifier:   EC:CF:A9:06:2E:4C:9C:72:A5:51:65:49:9E:47:C7:4A:6E:29:CC:72
Certificate issuer:       /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial:       02BF9B364DAEE40C603FF5C35273587E169053BD
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139312e3130322e34302e302f32312d3234203d3e203532333634.roa
Signing time:             Tue 05 Mar 2024 17:52:29 +0000
ROA not before:           Tue 05 Mar 2024 17:47:29 +0000
ROA not after:            Tue 04 Mar 2025 17:52:29 +0000
asID:                     52364
IP address blocks:        191.102.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bf:9b:36:4d:ae:e4:0c:60:3f:f5:c3:52:73:58:7e:16:90:53:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
        Validity
            Not Before: Mar  5 17:47:29 2024 GMT
            Not After : Mar  4 17:52:29 2025 GMT
        Subject: CN=ECCFA9062E4C9C72A55165499E47C74A6E29CC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:67:ad:fb:1f:f5:20:2c:6b:3a:81:6d:60:
                    62:5f:3d:7c:ce:45:28:75:cf:3c:5d:88:46:93:7f:
                    e7:0e:65:7b:b5:54:21:be:2b:c4:8e:fa:89:66:d2:
                    b3:91:bf:25:07:1c:97:a1:b8:b2:b3:46:b1:b7:30:
                    c0:6f:1c:09:a7:29:09:2a:b8:b3:8f:c5:bd:68:a5:
                    ff:f9:7c:a1:ea:f0:cf:db:c7:54:50:b2:de:d6:6d:
                    8e:3a:77:7e:9f:1f:1a:ec:53:f4:06:66:b0:42:20:
                    d8:81:e1:4a:f6:a7:51:0a:5f:65:4a:db:28:1f:6d:
                    b1:75:16:6d:9e:3e:8f:84:f6:94:bc:8e:7d:1e:31:
                    03:6f:d4:5b:24:76:be:be:04:7f:ac:50:3d:20:78:
                    98:6c:8a:8a:7a:13:3c:b4:eb:84:21:eb:61:fd:54:
                    5a:00:19:2f:a6:3b:9b:94:b7:49:02:5a:76:f7:41:
                    f5:20:2e:69:62:c8:1c:0f:9e:96:5f:be:65:b3:f7:
                    33:ad:fb:67:46:29:e3:fc:4b:75:36:21:60:f3:9f:
                    0c:bb:98:66:52:7e:c8:7a:5b:6c:5f:46:c1:5e:93:
                    ba:74:17:84:f3:39:51:69:cc:41:18:6f:e8:ac:4e:
                    66:36:20:74:eb:1c:4b:aa:11:ff:61:1c:ef:af:d2:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:A9:06:2E:4C:9C:72:A5:51:65:49:9E:47:C7:4A:6E:29:CC:72
            X509v3 Authority Key Identifier:
                keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139312e3130322e34302e302f32312d3234203d3e203532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:98:1b:90:f6:41:d4:b2:4d:8d:dc:e1:84:d6:bd:88:73:73:
         2b:53:d5:00:77:7c:3b:da:f1:f8:a7:54:67:81:14:3e:25:51:
         64:a6:4e:aa:89:51:1a:33:70:0b:9b:50:7a:e0:cf:6f:65:97:
         25:33:1a:7a:b1:2f:12:2f:81:33:49:d9:16:72:d9:4e:f6:51:
         9c:c1:b0:01:02:10:23:6e:df:cc:f6:a1:e9:d5:74:06:25:99:
         53:e8:0e:c9:30:f1:50:42:f1:9e:0a:4b:96:6f:cd:b9:68:f7:
         9b:94:4a:a1:ca:ff:71:ac:62:55:8d:6e:c4:98:35:5d:1c:8a:
         de:a6:2e:9c:e8:7c:61:34:03:97:13:3b:e3:48:4f:fc:74:a4:
         94:12:64:cf:b6:ec:e7:d3:38:01:cc:74:d0:72:6e:e9:39:71:
         c2:ee:23:fc:ad:a4:58:8b:ec:65:63:00:8f:64:fb:6f:eb:4b:
         14:d1:1f:f2:e3:bc:f6:2b:db:c4:3a:b0:15:4b:6d:70:6a:c0:
         c9:87:c8:d2:32:af:26:20:3f:f7:25:c4:dc:87:90:48:2f:48:
         bf:2f:f9:28:9e:f8:72:0c:bc:c5:bb:6e:cd:a8:47:97:b4:13:
         d5:a2:be:20:ee:61:bf:af:d6:a5:cc:bf:3d:33:2e:f4:9f:ae:
         ec:e8:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org