Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131322e302f32322d3234203d3e203131303134.roa
File:                     3139302e31322e3131322e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          L1rrrZpQZpCVtbtpjJ/3qT6yB+Pci5UAAreYwiasEng=
Subject key identifier:   2B:F3:73:8F:B8:60:32:16:E9:3C:55:C0:F7:5A:50:93:35:A0:FE:9E
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       506B4700D802E867A01A0DA136B069158F637149
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131322e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:14 +0000
ROA not before:           Tue 05 Mar 2024 17:50:14 +0000
ROA not after:            Tue 04 Mar 2025 17:55:14 +0000
asID:                     11014
IP address blocks:        190.12.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6b:47:00:d8:02:e8:67:a0:1a:0d:a1:36:b0:69:15:8f:63:71:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:14 2024 GMT
            Not After : Mar  4 17:55:14 2025 GMT
        Subject: CN=2BF3738FB8603216E93C55C0F75A509335A0FE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4e:6a:33:bc:90:8a:3d:34:87:10:8e:96:d0:
                    d5:c2:fe:be:73:95:19:69:92:d1:3e:76:b6:93:9d:
                    d3:37:1d:09:ff:e3:8e:71:62:52:0b:6d:30:6e:c5:
                    2f:89:70:b7:c9:79:e1:8e:51:44:6e:7c:ed:ac:58:
                    8e:f6:7c:05:68:bd:6c:65:a1:e5:4f:92:77:03:fa:
                    98:f5:01:0b:78:c5:d3:64:b5:fe:11:70:a5:5d:e9:
                    de:96:ab:22:45:9d:72:78:15:a8:b9:cd:bb:c1:41:
                    34:4c:d1:b9:7b:a9:cb:c8:88:cf:a0:63:d7:43:40:
                    3a:d9:af:6d:46:e5:24:54:51:78:af:c4:84:d4:17:
                    7e:4d:b7:57:8e:c2:3c:dc:83:c0:93:2c:ef:e7:71:
                    64:c1:19:37:e7:e7:52:d1:87:4c:89:84:b6:29:24:
                    7d:d8:e8:60:58:fd:b5:07:1c:95:c8:e0:07:eb:20:
                    77:22:7e:f5:e4:b4:28:65:0f:fe:aa:0d:6f:d7:bd:
                    e6:e6:77:21:82:36:f6:15:3f:e7:bd:66:30:df:d4:
                    20:f5:e2:e3:b6:d1:a0:37:cb:d7:e9:ab:16:15:6e:
                    ee:d6:48:01:37:f7:75:ea:ce:80:42:ad:f9:e0:71:
                    36:e4:8a:8c:80:99:c6:33:85:a4:ee:40:1c:68:86:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:73:8F:B8:60:32:16:E9:3C:55:C0:F7:5A:50:93:35:A0:FE:9E
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131322e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:59:73:12:39:a4:96:3f:4c:4b:2d:f6:7b:69:27:04:90:
         e5:98:dc:52:42:74:79:b1:8a:94:01:a3:c4:16:07:fc:ab:6c:
         73:18:8e:d9:ff:c2:0b:f8:ca:29:a1:6e:2c:fc:eb:0a:9c:be:
         de:e9:ec:9c:60:4b:d0:88:05:12:eb:b9:81:82:9c:10:ee:88:
         b2:ad:42:dc:01:a0:89:7b:df:49:74:21:35:ed:20:f0:fc:97:
         8e:03:1c:a2:c0:89:48:79:0f:1e:3d:54:09:3c:a8:83:64:70:
         56:2d:d1:27:b9:b0:ff:d3:60:56:29:55:aa:46:42:72:c5:8f:
         05:a2:55:de:d6:13:eb:d7:4a:7d:11:8e:b9:70:0e:02:4b:4e:
         c2:3c:3f:44:de:71:a6:13:b8:75:b4:9e:04:48:6e:57:8d:11:
         0a:74:91:a8:bb:67:52:94:d6:c0:3f:76:a2:b8:f4:96:a7:0d:
         75:e9:e3:9a:19:d3:bf:48:71:b5:62:15:85:e4:43:d6:68:70:
         2b:b1:1e:62:63:9a:95:39:7c:87:62:eb:33:79:15:36:60:9b:
         e4:08:33:1a:ba:86:30:92:c6:6a:bb:47:86:2c:d1:79:e4:ee:
         a4:2c:2a:83:dd:c4:b2:5c:af:ce:e9:61:54:5e:be:28:01:99:
         fa:15:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org