Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233322e302f32332d3234203d3e203131303134.roa
File:                     3139302e3131312e3233322e302f32332d3234203d3e203131303134.roa (raw, json)
Hash identifier:          vApfbqid17W+kRc796rAG/LYNyjPu9z57oVQ9eXFHcQ=
Subject key identifier:   0B:8B:21:FB:0E:BA:AD:E6:9B:95:AF:3B:94:F0:09:89:E4:DA:99:08
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       54832EC80FCB1226665E4DD4DC246BD7B3B631AB
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233322e302f32332d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     11014
IP address blocks:        190.111.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:83:2e:c8:0f:cb:12:26:66:5e:4d:d4:dc:24:6b:d7:b3:b6:31:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=0B8B21FB0EBAADE69B95AF3B94F00989E4DA9908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:b2:5b:76:5c:85:cf:ad:28:85:ad:f7:9f:
                    34:5c:4c:a9:aa:f5:14:e9:51:62:2b:f3:f2:2c:e1:
                    ee:45:6b:0b:4c:ec:e4:a0:12:70:60:36:92:a0:df:
                    91:03:93:bb:8d:38:2b:04:ca:00:ba:20:14:bf:bb:
                    c5:9c:22:a6:43:ff:ad:dd:84:00:e2:3e:55:6e:34:
                    35:ff:ec:d0:2c:2c:4d:29:45:e4:05:ab:b7:ec:90:
                    9f:72:db:e7:d5:f8:2e:0b:22:b1:99:72:7e:83:da:
                    48:e2:30:f8:f6:ad:64:e6:1b:e1:86:07:db:b6:4b:
                    40:4e:1c:12:c0:2a:fc:eb:cf:f6:38:78:14:9b:aa:
                    c5:29:c7:ff:cf:f2:b9:84:40:63:4a:6a:e9:59:01:
                    39:b5:7c:2b:13:9e:bc:bd:4c:e1:59:fd:e6:77:6d:
                    da:0e:e5:2d:1a:e8:5a:b9:a5:16:b4:f6:87:f5:a1:
                    f1:e2:8c:8b:c6:d9:58:38:05:bf:d7:0d:c4:ca:0f:
                    ad:08:9e:02:8b:0e:21:9b:fa:aa:8a:24:d8:c0:56:
                    e7:f4:50:40:16:19:e4:c4:81:c8:68:25:f1:68:22:
                    7a:58:6f:fb:c5:e9:00:50:e5:48:2a:45:7d:91:c9:
                    96:d5:5f:26:e8:40:f5:1c:6e:a9:c4:38:dd:65:a3:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:21:FB:0E:BA:AD:E6:9B:95:AF:3B:94:F0:09:89:E4:DA:99:08
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233322e302f32332d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:c7:cd:03:f5:fc:5b:96:29:5a:8b:3b:8e:68:6e:e2:58:
         77:4d:de:dc:e8:44:25:23:e5:b6:1e:53:b4:b2:13:46:73:fd:
         45:21:ba:0c:b0:60:0e:28:23:51:76:0e:11:7e:d7:14:64:b0:
         c4:64:37:87:77:ae:9b:fa:b3:06:80:71:ef:b7:61:52:00:06:
         e7:53:d0:94:ee:1e:12:e5:d1:26:96:ac:65:0f:d3:c5:a5:05:
         05:bf:db:2b:bd:ae:f6:15:15:cc:b6:73:75:ea:89:a7:bb:9a:
         5c:bb:0d:d9:a7:ba:fd:a5:62:17:1e:b2:88:ca:d8:0e:2b:02:
         e4:9c:6c:59:c6:f8:b6:9c:0d:d6:58:83:65:66:39:f8:99:a9:
         64:18:8e:e1:c4:7f:27:9b:d4:09:99:48:72:1a:5d:58:5d:da:
         24:19:b2:04:68:4a:5c:34:6f:c0:31:dc:5e:2c:26:83:78:2d:
         41:22:98:16:f9:aa:43:58:d2:2f:ac:4e:61:05:d0:c6:05:dc:
         d7:4a:cd:33:29:b4:9f:0c:00:e7:96:8d:6f:79:6f:b3:32:12:
         8a:f0:6f:25:3c:d3:99:56:c8:52:30:84:aa:c2:c3:db:d0:1a:
         3a:ab:0e:e6:22:0e:e9:a9:1f:8f:df:38:e6:4d:0e:7d:ec:81:
         8c:d7:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org