Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa
File:                     3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa (raw, json)
Hash identifier:          W8rkg4Gvrv0385qUURpF6Pj6rQAedyzl5GlN6Zvq5Gs=
Subject key identifier:   3A:18:C7:43:91:22:77:D5:2D:FF:45:F3:23:2E:AF:93:8E:A6:8E:75
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       0AD0A12CCDE801DE27FB88E37CA6F5085285D9BB
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     11014
IP address blocks:        190.104.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d0:a1:2c:cd:e8:01:de:27:fb:88:e3:7c:a6:f5:08:52:85:d9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=3A18C743912277D52DFF45F3232EAF938EA68E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:ae:92:8b:0e:c9:ce:87:fe:cd:7d:05:98:
                    55:98:65:33:f5:b1:c7:46:4c:7c:57:70:3f:6d:98:
                    91:39:c8:30:fc:38:a3:2a:41:84:51:47:1b:db:39:
                    0c:31:04:c3:da:09:95:cb:f1:6a:a7:51:96:36:ea:
                    10:bb:a6:e1:20:d1:fd:85:6a:a0:e8:11:0b:9a:4f:
                    fa:0c:08:f4:e8:1b:57:12:89:b4:6e:bb:eb:34:ad:
                    42:41:11:0b:f4:33:83:cf:80:d6:30:ad:9a:be:66:
                    7a:e7:59:c4:a0:3b:a8:a7:55:10:3f:46:ac:3a:c7:
                    b3:64:59:33:b2:1e:94:88:97:47:b4:f2:8f:55:85:
                    a9:84:74:c3:c2:87:46:6d:e8:89:a6:77:cc:e4:1a:
                    1f:d3:24:73:b4:be:af:b0:63:33:f7:d1:e1:62:8e:
                    19:36:72:0a:71:1e:38:ae:bb:d6:6a:ba:db:44:bd:
                    a0:58:05:22:af:53:93:13:c6:a0:4f:ca:84:30:6f:
                    d5:a3:63:eb:96:a8:f0:b8:16:7b:fc:20:96:b6:d6:
                    57:83:0a:26:fc:6c:57:ab:32:c4:76:c2:e1:df:28:
                    12:cf:8f:63:a0:6f:28:62:20:d4:45:96:85:84:1f:
                    53:d6:0c:1c:b1:d5:2e:2a:8d:10:28:58:71:f0:c9:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:18:C7:43:91:22:77:D5:2D:FF:45:F3:23:2E:AF:93:8E:A6:8E:75
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:4a:75:28:e4:2f:69:f2:28:5c:75:c2:af:6e:38:c8:8a:71:
         59:fd:7c:b3:f6:74:f7:38:20:9d:df:be:f4:e3:2a:08:9c:6d:
         f1:3c:1b:6b:bb:d0:35:b8:62:f1:43:9c:7b:44:24:7a:76:b4:
         09:61:03:42:c3:24:36:37:14:30:c0:e3:6b:56:3e:d1:33:7b:
         c5:4c:0e:6e:8e:48:09:77:60:a9:66:35:a1:9d:3c:37:ac:4f:
         5a:f2:e6:15:ac:67:b8:13:4d:a7:fb:48:b7:86:07:78:13:d3:
         ac:df:0b:6a:c6:0f:23:e1:d3:3a:82:dd:ad:06:d7:b5:30:9b:
         24:fc:08:dd:14:e7:99:ba:ad:90:b6:1a:bf:cd:01:e7:8c:b1:
         5f:a2:42:1b:7a:be:35:87:4b:a3:5d:bf:c1:12:d9:a3:81:ca:
         82:ff:8e:ed:0f:51:b3:49:2d:0c:ad:19:e2:c1:c0:79:43:df:
         fb:cd:c0:2f:5b:d3:55:77:73:22:17:ea:0b:61:db:c7:65:cc:
         90:da:83:b2:f2:33:01:9b:9b:f8:2b:0f:be:ee:b9:fa:fe:19:
         64:83:81:c9:80:8f:0d:17:8f:fe:fa:cf:83:f3:66:be:0b:5a:
         87:3a:d8:3f:09:57:01:6e:a7:f0:38:81:65:ff:ae:51:97:40:
         f8:f5:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org