Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa
File:                     3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa (raw, json)
Hash identifier:          Q44Zt/s5kFvIG7LVA9RFfL4IH+6hM9Y+9mmd6V+wU/o=
Subject key identifier:   61:30:A7:DF:41:89:61:FF:6E:8E:E4:7B:D6:39:4D:69:D4:0D:97:54
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       0573E1418A6960E0B6930B23203D8C80DC60A47A
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:16 +0000
ROA not before:           Tue 05 Mar 2024 17:50:16 +0000
ROA not after:            Tue 04 Mar 2025 17:55:16 +0000
asID:                     11014
IP address blocks:        190.111.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:73:e1:41:8a:69:60:e0:b6:93:0b:23:20:3d:8c:80:dc:60:a4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:16 2024 GMT
            Not After : Mar  4 17:55:16 2025 GMT
        Subject: CN=6130A7DF418961FF6E8EE47BD6394D69D40D9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:48:81:b2:8c:50:5d:13:6a:42:71:48:a7:
                    42:16:16:8f:1d:95:35:ec:50:a3:d6:9f:9f:e5:39:
                    73:24:d3:65:fb:47:92:c4:13:f9:e4:5d:9a:59:14:
                    79:38:bc:a3:03:78:47:5c:7b:76:83:25:fa:05:ef:
                    b1:4b:0d:ae:62:3b:bf:12:00:bf:35:e7:6b:54:08:
                    92:cc:84:e0:36:0e:de:23:75:03:ef:e2:f8:fa:e9:
                    a9:d2:5e:b8:11:45:e3:7f:9f:e3:30:76:e6:73:d5:
                    4d:d3:4c:ab:2c:d7:d2:c9:26:65:f1:6c:4e:44:74:
                    32:dd:7f:a4:7d:1b:83:a2:42:07:67:d4:de:09:cd:
                    df:f1:6c:25:ce:02:e3:67:7b:22:83:3e:bd:e2:db:
                    f4:d5:06:71:71:b4:c9:48:4f:91:e9:76:26:1a:31:
                    0d:55:46:da:6f:7f:c2:82:79:e4:82:fa:70:7c:84:
                    d8:96:ab:b4:6e:3f:9e:7e:c7:bf:5e:d3:cb:df:19:
                    d8:cf:21:e3:79:a3:59:99:99:43:a2:09:ce:28:14:
                    ef:d7:99:63:8b:af:f9:2d:72:12:eb:4b:58:f2:8d:
                    6b:ac:5b:22:da:a6:0d:09:35:03:de:e0:ff:d4:54:
                    18:60:72:d1:bb:67:53:c0:7c:57:9d:45:47:01:44:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:30:A7:DF:41:89:61:FF:6E:8E:E4:7B:D6:39:4D:69:D4:0D:97:54
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3139322e302f31392d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:52:e6:f3:40:bf:37:2e:ae:ce:cd:99:c5:0a:f1:7b:41:a4:
         54:a0:4f:71:70:a9:4c:0f:b7:1f:f7:1f:b1:58:03:00:bb:be:
         f3:c8:20:5b:62:e0:68:56:07:58:5c:60:f5:31:a1:d3:b8:4b:
         35:a3:57:2a:76:ff:dc:c8:bb:87:72:16:d7:e7:6c:be:0a:16:
         6d:75:a6:50:48:ca:93:b6:bb:e8:c9:8d:a5:52:46:d1:fc:7f:
         5a:25:67:ec:1e:04:10:bb:51:89:cd:5a:04:33:ec:91:7f:bd:
         4b:09:1c:35:0e:ca:3c:53:b7:19:07:10:18:ce:d9:c1:f8:ee:
         a0:7c:36:31:bd:0a:bb:6e:c7:ab:07:8a:e6:44:95:2e:71:08:
         02:de:e6:b5:ba:17:0d:68:46:6a:4a:2c:5b:bd:cb:10:78:fd:
         08:7a:29:5d:a6:81:5b:89:ab:fd:b9:ec:fc:7f:3e:35:67:98:
         71:8e:c0:40:b8:02:5c:11:88:1e:7e:8d:5d:3d:1c:59:b0:f9:
         9b:4b:52:7b:d4:a7:f2:9e:ee:cb:b1:c4:40:53:71:c4:76:8b:
         05:28:41:e2:5c:ed:01:ff:3b:3c:54:6a:0a:f5:7e:62:36:d0:
         f5:42:f9:7e:03:ae:cb:47:ce:7b:88:c4:26:d6:20:eb:58:98:
         73:95:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org