Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa
File:                     3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa (raw, json)
Hash identifier:          kLs1HuPQDhRhjJpp61cVFNv7TeXzFQb1x2+yzGQcvpM=
Subject key identifier:   88:9E:EC:22:FB:0B:49:8C:32:8F:AB:6D:BA:A9:E8:5F:26:F6:55:2C
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       58BAD6253F20100C4D722139DDC97C66DEBEA15B
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:10 +0000
ROA not before:           Tue 05 Mar 2024 17:50:10 +0000
ROA not after:            Tue 04 Mar 2025 17:55:10 +0000
asID:                     11014
IP address blocks:        190.111.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ba:d6:25:3f:20:10:0c:4d:72:21:39:dd:c9:7c:66:de:be:a1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:10 2024 GMT
            Not After : Mar  4 17:55:10 2025 GMT
        Subject: CN=889EEC22FB0B498C328FAB6DBAA9E85F26F6552C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:95:9a:f4:8a:fd:76:79:53:81:01:da:a7:
                    fa:60:03:0a:98:6c:40:25:8f:a0:14:11:8b:31:e6:
                    98:9a:28:2c:87:d0:00:ce:37:67:d1:31:24:78:90:
                    a9:90:26:00:71:34:34:25:c1:e3:48:29:d0:23:77:
                    ca:1d:d9:6d:3d:31:50:c0:8a:17:b0:a8:e1:0f:bc:
                    d9:fa:17:6d:bd:55:d1:00:b1:36:5e:ee:e6:72:68:
                    e7:d5:f7:3e:cb:3f:93:e4:3a:e2:95:c5:d0:19:12:
                    e2:7c:f7:59:88:1c:68:db:f4:f1:58:dd:fe:ef:87:
                    11:d3:20:ae:e6:83:ca:1a:93:29:f3:1c:7a:e2:34:
                    03:5c:f0:09:4e:5e:ec:30:c7:32:11:e5:7b:c8:28:
                    ce:39:b8:30:c5:a6:14:ec:a1:50:74:70:84:ce:bf:
                    0e:ba:66:cc:25:89:c2:49:a3:5e:48:72:26:c5:d1:
                    f2:04:fb:9e:d8:85:09:ae:e8:48:8f:02:2f:14:c3:
                    f4:d1:29:e5:79:1f:9f:c6:58:b1:88:90:d8:36:0c:
                    58:21:80:f2:2f:9b:e2:d4:bb:dc:80:7f:c5:4c:1c:
                    fe:06:52:81:fa:cd:f4:05:2a:5f:0f:9d:45:15:04:
                    d2:81:7e:58:eb:e9:34:f3:a9:42:b9:f6:83:a9:36:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9E:EC:22:FB:0B:49:8C:32:8F:AB:6D:BA:A9:E8:5F:26:F6:55:2C
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:df:31:e6:db:75:8a:a0:56:4b:06:d6:ff:d5:0a:b8:a6:8d:
         26:ef:b6:43:4c:7e:a9:2a:11:8d:83:8d:2f:ba:1f:3c:3c:e3:
         46:5b:c5:0d:38:3c:70:d9:2f:e8:1c:1a:e9:f2:d2:d8:b3:64:
         46:4e:21:12:30:30:4f:b9:77:bd:91:9e:b4:93:c6:28:7b:c5:
         3c:c2:de:16:bb:af:49:09:92:21:70:ce:52:7f:7f:de:68:16:
         c7:b8:73:32:35:3a:91:0a:93:29:b2:6e:4b:96:95:a7:79:85:
         7f:da:a6:2a:4a:2e:8a:0b:f2:99:3a:d2:84:e9:63:35:0f:df:
         21:ec:34:f8:20:0c:62:a3:10:84:7e:1a:ed:03:fe:c7:2a:c3:
         a7:73:ac:c8:63:55:0d:06:8e:d4:ce:a3:32:c1:e8:cb:d3:5d:
         0f:f7:f4:d3:53:a7:c1:85:dc:8b:ef:b6:b9:c9:3d:fc:4a:56:
         0c:95:e4:8e:93:b2:40:c8:67:d1:68:e1:f0:3a:93:a8:03:2d:
         b4:c3:ff:bc:4a:2f:a0:73:59:08:f8:8f:d5:9e:f2:dc:cd:c1:
         dd:86:ee:21:07:e1:73:71:40:99:5c:95:7c:ae:da:b3:bc:5d:
         67:05:60:3b:f7:8f:eb:50:79:5d:84:f6:c8:44:46:13:c9:38:
         71:a0:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org