Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa
File:                     3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          h2QxMcEtybis0qro7XTn6KlnyKO1UBUij8Ef9txG24o=
Subject key identifier:   77:D9:C9:82:AC:91:C5:66:9E:68:45:5E:40:52:A1:08:4E:45:60:2A
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       4347098AA3100D8B5958F6C8C5BFC65F0525CDE6
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:16 +0000
ROA not before:           Tue 05 Mar 2024 17:50:16 +0000
ROA not after:            Tue 04 Mar 2025 17:55:16 +0000
asID:                     11014
IP address blocks:        190.111.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:47:09:8a:a3:10:0d:8b:59:58:f6:c8:c5:bf:c6:5f:05:25:cd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:16 2024 GMT
            Not After : Mar  4 17:55:16 2025 GMT
        Subject: CN=77D9C982AC91C5669E68455E4052A1084E45602A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:bf:c2:66:d3:10:32:cb:08:b9:70:84:9e:
                    fe:d9:69:91:bb:52:0a:84:1c:46:f5:f8:46:97:c0:
                    90:08:7b:0d:e2:9f:0b:cc:3f:a4:40:8e:11:54:94:
                    d7:22:1f:48:a4:71:99:d0:34:79:f5:ca:84:63:5a:
                    88:7c:72:1b:f5:3e:df:e3:6f:d4:26:10:5b:38:54:
                    83:e5:e1:6f:a0:00:1d:ac:ae:cc:3c:93:9b:53:28:
                    b2:07:c0:d1:c5:4a:94:b5:ea:29:aa:37:a7:59:ed:
                    9b:e5:32:3f:c7:ee:f6:87:71:76:c2:11:3c:74:30:
                    cd:84:cb:00:b1:b8:0a:19:c3:75:b6:5e:5f:35:6b:
                    5b:85:c3:e5:eb:b4:9a:29:71:55:a7:ad:76:01:ce:
                    71:21:26:7c:cb:16:6e:ab:15:1b:b0:e1:c0:ff:a1:
                    f4:3b:f5:7a:fb:ed:fa:59:b5:cf:fe:cf:e9:b3:5f:
                    b0:c4:2f:83:92:8e:c6:1a:8a:5a:16:fc:7a:63:c0:
                    8f:07:0a:f0:dc:05:ef:76:29:8b:26:f2:ee:35:9a:
                    ca:44:25:37:66:67:70:8c:23:0a:27:8a:f7:4c:eb:
                    04:96:15:8b:a3:b2:2b:7f:e0:47:0f:76:04:a5:e0:
                    0c:13:96:d1:35:35:a3:dc:0a:86:29:2a:08:17:19:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D9:C9:82:AC:91:C5:66:9E:68:45:5E:40:52:A1:08:4E:45:60:2A
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:a0:1b:21:95:b4:17:57:bc:64:f2:b1:6b:aa:d2:47:1d:
         33:59:ec:ef:f8:73:7d:4c:00:c5:1e:1c:1f:14:ba:b7:df:7f:
         ae:11:ba:cd:65:71:23:a2:40:10:e3:7d:94:e6:41:2e:1f:d1:
         74:62:63:d0:20:62:92:e0:03:96:65:8e:fc:92:1e:d4:40:7d:
         95:1b:db:7b:c5:33:59:45:49:cc:f9:03:5c:9e:f0:af:83:1f:
         fa:ec:a9:ff:cd:2b:60:ff:ef:8a:9c:0b:6e:59:9f:b6:f2:c7:
         15:00:e6:c9:77:fc:44:51:22:0c:fd:73:7a:f3:68:13:91:66:
         db:eb:28:69:ad:f9:2c:f9:26:1d:85:d4:5c:3f:1f:f9:71:f7:
         d0:35:1c:d4:3e:1e:e9:70:fb:49:86:99:5a:ab:f6:83:b9:46:
         8d:e5:a9:b4:79:3c:5e:67:d1:9b:bd:55:3f:31:09:43:ec:43:
         45:ec:51:3c:89:be:bd:b9:1f:6f:c1:be:0c:a8:22:fc:b1:cf:
         45:01:13:eb:40:c7:20:39:e4:4a:06:36:0e:8d:ba:ea:5b:56:
         80:23:17:a0:69:11:21:24:f1:e4:03:16:ea:80:80:53:6d:9d:
         2c:0c:11:fb:33:6d:82:06:50:5a:aa:3d:3c:72:ee:6d:65:84:
         ac:82:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org