Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa
File:                     3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          fFBaE18RVRFyjcHAfVN/Oi5DU1ue1+6wkWA8U+x5utI=
Subject key identifier:   12:6B:3C:43:F0:D2:37:62:B5:99:2B:93:73:D5:E0:1C:8D:4C:9C:27
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       4578EA0DF3A2B61F84479D319A3E11B4F4CC120D
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:17 +0000
ROA not before:           Tue 05 Mar 2024 17:50:17 +0000
ROA not after:            Tue 04 Mar 2025 17:55:17 +0000
asID:                     11014
IP address blocks:        190.111.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:78:ea:0d:f3:a2:b6:1f:84:47:9d:31:9a:3e:11:b4:f4:cc:12:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:17 2024 GMT
            Not After : Mar  4 17:55:17 2025 GMT
        Subject: CN=126B3C43F0D23762B5992B9373D5E01C8D4C9C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0e:a4:90:33:f0:b0:ac:72:ba:40:f2:5e:89:
                    ac:0c:eb:65:bd:ff:ff:b8:64:ed:b8:32:27:c3:1d:
                    ca:4f:bc:1b:81:40:8b:7b:63:fa:10:7a:3c:6f:db:
                    53:9d:ba:e1:d3:4d:cb:0f:f7:54:b1:0b:50:41:6a:
                    38:48:cf:33:52:9d:85:a1:f4:8f:b9:a2:bb:11:d3:
                    37:0f:a0:05:5b:98:dc:b9:78:8f:29:1d:99:4a:60:
                    8d:77:6d:0b:77:f2:fd:bf:f3:5b:9c:f3:82:d2:ec:
                    fb:ca:88:ad:f7:ef:9f:24:60:92:cb:60:5c:4c:9d:
                    4e:13:da:a8:a4:aa:0d:9f:0e:91:15:4d:a6:59:00:
                    7c:aa:ec:e8:9d:71:d9:35:fc:5f:78:a9:35:64:27:
                    ce:60:db:67:65:8f:84:fb:cc:25:da:23:f3:f3:fe:
                    19:61:06:24:75:9f:c6:8d:2c:4c:a7:9c:1f:28:e6:
                    0d:31:ec:7e:e6:21:32:a0:8d:59:80:3b:59:71:c4:
                    6e:9d:3f:21:7f:88:90:2a:49:fa:de:02:a4:ae:e3:
                    ad:92:98:eb:d6:3d:7c:d4:64:77:6f:3f:4a:ec:4e:
                    b2:06:01:0b:15:48:a2:b0:84:a9:19:ad:f5:fc:05:
                    9d:32:de:34:0c:59:62:78:3f:39:8b:69:63:0d:e9:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6B:3C:43:F0:D2:37:62:B5:99:2B:93:73:D5:E0:1C:8D:4C:9C:27
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:82:73:93:00:aa:84:ea:dc:ce:f1:5e:b2:b4:29:d2:2b:ee:
         33:1e:18:99:bb:74:96:18:8b:f4:ab:d8:40:1a:c9:e5:a1:6f:
         eb:5c:8a:6e:16:99:6e:a3:1a:60:d9:3f:23:a7:cc:a4:c5:f2:
         00:31:14:7f:da:0b:d2:f0:bf:64:97:e2:c8:25:91:6a:ca:df:
         7d:14:3e:01:c2:b1:35:73:02:f7:a6:81:fb:cf:36:3b:f0:ff:
         90:04:f8:7a:6b:84:1c:63:5b:d4:c7:58:6c:11:a2:29:71:9c:
         87:3e:94:67:10:86:08:bf:f3:e3:a4:72:5a:d4:aa:18:af:ae:
         8d:ba:62:be:8d:66:b7:d0:a2:49:79:39:4b:3f:c8:cb:a0:8d:
         56:96:59:04:2a:16:bd:97:0a:41:d3:da:2a:1d:73:2d:37:2e:
         1a:e6:5d:53:17:e9:16:18:09:26:5b:69:ed:67:00:0f:27:f7:
         45:dc:bc:28:63:85:f9:08:ca:fa:93:d1:f1:84:30:9d:d2:34:
         4e:7d:57:a1:29:6a:41:a0:ce:50:e0:36:01:7c:34:de:9d:c3:
         18:78:87:56:ae:7e:21:1b:99:e6:bb:67:fa:64:a4:cb:00:26:
         89:04:78:4b:c7:54:38:d9:09:af:2a:81:3c:a7:2b:a0:ef:0a:
         ec:cf:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org