Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3234302e302f32302d3234203d3e203131303134.roa
File:                     3139302e3131312e3234302e302f32302d3234203d3e203131303134.roa (raw, json)
Hash identifier:          raRMcEKNTadwFKaPDPwof58wGqY7+47S397bxQc6gwg=
Subject key identifier:   F9:FB:72:8E:F8:9C:76:50:9F:DE:51:EB:5E:7A:1A:4F:D6:B9:16:13
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       7CCB5FF25AEDA927C5E51D06168E1CCBC7EB0348
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3234302e302f32302d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:17 +0000
ROA not before:           Tue 05 Mar 2024 17:50:17 +0000
ROA not after:            Tue 04 Mar 2025 17:55:17 +0000
asID:                     11014
IP address blocks:        190.111.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cb:5f:f2:5a:ed:a9:27:c5:e5:1d:06:16:8e:1c:cb:c7:eb:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:17 2024 GMT
            Not After : Mar  4 17:55:17 2025 GMT
        Subject: CN=F9FB728EF89C76509FDE51EB5E7A1A4FD6B91613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:33:b0:88:0b:62:69:f7:be:5c:d0:e6:d5:
                    97:16:c4:0a:37:cf:4b:21:4f:8a:7e:ce:50:96:4f:
                    05:52:01:4d:d3:9c:f6:0e:55:3b:3a:0f:2f:8e:18:
                    59:b5:e6:52:48:9c:63:2d:ff:be:6f:76:ee:bb:c2:
                    e5:56:bf:cb:b0:38:33:fa:4f:8c:95:27:23:39:ce:
                    a5:03:03:4a:18:6c:fb:8c:13:15:eb:2a:63:42:26:
                    a3:b6:cc:7a:e8:f6:ff:f2:ea:eb:40:b5:d6:93:62:
                    68:15:1e:1b:c5:dc:dc:16:08:71:8f:f5:53:8f:14:
                    94:6b:07:ea:af:69:ec:c8:d3:91:6a:62:b6:d6:42:
                    bb:57:bc:f8:b2:72:2d:86:34:b2:f7:d0:a1:f4:1f:
                    6f:15:4a:d3:50:fa:67:fe:e6:f3:f6:c2:36:ef:18:
                    7c:6a:74:d8:bc:0b:c2:bd:4a:5e:2a:00:05:76:9d:
                    fb:cc:0a:16:53:b9:b2:62:b6:b1:e0:c9:93:16:6e:
                    32:5c:cf:84:31:3d:69:d8:ef:eb:a5:88:5d:5c:5d:
                    37:ae:42:fa:b1:b5:60:89:d3:6d:23:14:ce:30:df:
                    94:51:3c:4b:88:b9:3f:9e:17:33:4c:4f:e1:99:fb:
                    fd:e1:77:74:e8:07:65:87:23:bd:88:17:89:81:bd:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:72:8E:F8:9C:76:50:9F:DE:51:EB:5E:7A:1A:4F:D6:B9:16:13
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3234302e302f32302d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:fa:23:4f:72:c1:09:ff:3f:f0:f0:06:4b:54:66:6d:4a:
         c0:11:b3:59:a4:99:18:83:dc:7d:ba:e7:37:01:ac:d0:f7:ac:
         6e:30:c0:b9:6d:ea:10:04:e8:c6:f4:e8:51:25:9d:48:02:34:
         28:83:b6:73:45:33:8b:85:c7:10:fa:3a:86:e4:8e:13:82:0a:
         96:30:28:c4:26:c3:84:86:22:a5:ca:f4:3a:29:23:92:b1:8a:
         f1:b9:13:44:3d:3d:21:eb:29:8b:96:e3:24:85:69:b0:85:11:
         2e:93:36:b7:73:a0:7f:3f:12:8e:99:c3:67:ec:50:26:eb:43:
         6d:6a:c3:67:06:46:61:d9:7b:c0:2e:3c:24:98:92:a0:8f:b9:
         88:d8:82:71:3e:5d:e6:c2:c0:09:b1:76:a7:2b:7c:51:94:49:
         40:bc:89:f0:ba:54:5c:56:1f:09:34:01:d4:76:d0:b9:ab:6a:
         c3:a2:ec:99:d4:92:39:e2:b4:c1:e1:8e:19:15:8a:7c:9f:a7:
         d4:cd:32:d2:12:6b:9c:a0:77:00:7a:06:b8:06:15:29:95:f9:
         d1:e8:4f:2e:76:f8:06:f5:11:4b:fe:7e:97:62:14:8d:b8:70:
         03:97:ed:87:10:95:66:cd:fc:06:06:be:1a:a1:95:c7:ad:b0:
         71:16:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org