Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131392e302f32342d3234203d3e203131303134.roa
File:                     3139302e31322e3131392e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          aEHwK3GPANSlQfT0Oz5764afPnzOyZc9sf4mgchEe68=
Subject key identifier:   87:FA:43:CE:ED:E0:A4:30:93:18:61:27:6E:19:03:92:8C:BA:48:5E
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       0418E8739092829134CBC3782B35C3700302474B
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131392e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     11014
IP address blocks:        190.12.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:18:e8:73:90:92:82:91:34:cb:c3:78:2b:35:c3:70:03:02:47:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=87FA43CEEDE0A430931861276E1903928CBA485E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:62:28:7d:7a:54:cf:d5:f8:b3:94:75:a1:
                    2d:44:28:1b:0b:56:c1:d9:af:c6:20:03:2f:3a:17:
                    b9:f4:fb:d5:47:63:ac:9f:1c:2a:96:bc:0e:5d:c8:
                    bb:41:e3:86:ad:cb:42:6e:49:34:d6:06:87:8d:ae:
                    da:38:ce:0d:68:a9:52:7e:70:b1:e6:c9:c9:91:23:
                    8a:63:e6:c0:ce:b9:a2:f6:0a:8a:ff:18:7f:9d:c7:
                    28:b1:f1:e8:c4:de:17:75:6d:2c:cb:90:42:6e:05:
                    4f:7f:3f:5b:9a:a0:87:fd:c1:29:d9:1c:94:8f:e3:
                    52:2e:ae:dc:f5:15:16:e1:25:07:c9:3e:f6:b9:38:
                    1a:76:cb:83:7d:15:a5:df:42:51:fa:2e:dd:0d:21:
                    e7:68:fd:af:35:bb:29:f9:26:7a:d5:cb:6a:16:9c:
                    e2:f4:89:b9:8f:d0:7c:18:39:71:d1:f0:8c:b5:e5:
                    55:57:bb:44:02:21:d4:20:f4:79:7b:0c:74:27:c7:
                    31:fc:e4:59:12:45:e6:d3:63:fa:1d:d7:30:79:b4:
                    88:4d:35:be:6e:3d:1b:c2:34:4c:cb:4a:3b:5f:4c:
                    28:cd:ff:fc:a9:61:c8:d5:51:75:43:5c:41:54:e3:
                    6d:67:7a:3c:d4:f1:b5:33:9f:48:89:c3:ee:38:27:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:43:CE:ED:E0:A4:30:93:18:61:27:6E:19:03:92:8C:BA:48:5E
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131392e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:69:37:38:27:11:aa:0b:46:18:14:ae:88:cc:fd:b4:e6:ca:
         db:f9:4e:46:55:c2:cd:b1:e9:c6:e3:c3:c6:53:73:0a:dc:fe:
         2b:5c:6d:f3:f1:a5:90:5c:fd:d4:a7:b2:d0:77:43:63:61:52:
         36:bc:e5:bf:d9:4f:29:a8:a3:db:1e:62:da:e0:a2:14:54:fa:
         31:48:32:f3:c7:50:11:da:28:82:6c:db:55:8e:8d:7b:3e:1b:
         1f:73:85:d5:65:9f:65:2e:40:3a:a0:9e:8e:55:95:8e:51:04:
         eb:ec:fa:21:42:81:72:76:3d:7e:1b:c9:b8:25:93:70:f8:83:
         ac:f5:03:dd:c9:b1:3c:58:32:75:ad:2a:ba:32:9d:a2:7e:d5:
         11:b4:01:ef:4b:f2:8c:f2:3b:06:a3:b6:a1:36:1b:7c:aa:48:
         9f:1e:04:ad:09:a7:a1:71:5c:fe:5e:0a:b8:ce:48:b9:74:c2:
         79:42:a3:b0:5c:b6:2f:f1:19:d2:ee:94:02:da:1b:91:8b:b5:
         4e:4c:a9:74:6a:70:f8:00:95:f3:4a:69:d7:b1:04:4e:a3:b8:
         76:c6:78:4d:85:ce:04:15:f1:a5:8d:b1:4f:bf:a0:ee:2b:b3:
         6d:57:d7:c8:8f:7f:6a:f6:f4:97:29:91:f8:5b:20:00:1e:72:
         d7:50:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org