Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e20333934363834.roa
File:                     3139302e35322e39362e302f32302d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          6EwHRD+zBThim/GlQgjr9ojHNNqepuU3eS0xHclygJs=
Subject key identifier:   AA:04:1A:37:58:8D:95:80:74:9C:37:CE:45:00:2D:A7:29:DB:46:4E
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       5234CCB589A655678E25682A6BFCA54531C15C95
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:51:24 +0000
ROA not before:           Tue 05 Mar 2024 17:46:24 +0000
ROA not after:            Tue 04 Mar 2025 17:51:24 +0000
asID:                     394684
IP address blocks:        190.52.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:34:cc:b5:89:a6:55:67:8e:25:68:2a:6b:fc:a5:45:31:c1:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:24 2024 GMT
            Not After : Mar  4 17:51:24 2025 GMT
        Subject: CN=AA041A37588D9580749C37CE45002DA729DB464E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:1b:09:a3:2c:3a:2f:c6:81:d1:ab:6f:ff:
                    55:64:71:6c:dc:8c:98:71:12:6f:e4:ae:ab:16:74:
                    40:9d:4f:2a:33:02:cb:2a:43:67:5e:01:4e:6d:77:
                    ea:c2:49:cc:8b:ed:b9:db:a8:31:e5:2e:2e:1f:23:
                    78:62:23:1d:22:2e:0b:e7:ae:2a:e4:b9:66:a8:21:
                    65:87:c9:d4:a1:39:6d:3e:f6:4a:f8:57:20:ef:69:
                    ad:9e:cd:c3:82:c0:40:0c:c0:56:ea:e4:7b:a8:c8:
                    8f:1c:bf:d3:3e:a6:af:b8:e4:47:d3:b0:98:99:5d:
                    69:b7:ee:78:d4:d9:17:c0:52:a8:31:10:58:10:bc:
                    24:ce:50:c2:63:31:88:c2:ae:a2:05:0d:13:10:a3:
                    0b:36:e6:27:8b:c6:25:26:0a:ff:cd:33:c7:d0:ac:
                    61:91:36:91:16:5a:5b:ce:7b:9c:6f:64:a0:6d:81:
                    27:48:cc:14:f6:05:51:4a:86:72:4b:34:b0:38:92:
                    2e:3c:42:52:87:f5:06:b1:63:ad:d6:cd:a5:57:64:
                    dd:d1:22:bc:06:af:96:71:20:c7:de:b4:6e:37:42:
                    9e:69:2d:67:16:81:04:13:37:2b:d2:da:21:31:d4:
                    b2:4a:23:e4:44:b2:52:ff:d2:13:a0:77:15:13:47:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:1A:37:58:8D:95:80:74:9C:37:CE:45:00:2D:A7:29:DB:46:4E
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dc:29:bf:f2:26:59:ef:3e:6c:ee:26:5d:5a:ec:19:3b:a6:96:
         70:8c:50:ba:cf:65:c1:4f:2f:fb:94:5f:14:ff:e4:96:50:ac:
         41:31:69:98:9b:0a:57:d7:92:96:69:90:35:cd:85:ce:ed:c9:
         7c:4e:87:06:1f:7a:a6:23:6c:f2:6e:91:12:34:78:1c:4c:d0:
         2f:9d:00:c0:64:a7:b1:77:f3:94:ad:a2:16:c1:2a:02:0c:9b:
         42:4b:69:85:64:a3:63:ed:bf:0b:99:c6:bd:c3:70:30:49:ea:
         b7:24:3e:bd:3f:d4:7b:da:c1:c3:5f:ff:be:94:09:4b:ec:bf:
         bf:73:2d:4d:a4:f2:18:db:c1:f9:ec:06:d2:51:27:cd:db:7e:
         4c:d0:8b:bf:e0:d7:b3:e6:fd:7b:2b:f7:fa:67:2f:5d:32:bd:
         05:db:e4:39:11:40:3d:44:44:09:02:d7:0e:5e:ba:53:54:09:
         9d:44:34:f7:08:52:8c:36:6d:84:90:d7:7c:83:bb:7a:50:47:
         25:13:18:28:41:3f:e7:64:08:4a:12:43:70:d3:85:a5:91:1f:
         bf:66:ce:1e:9b:7c:a5:43:1d:33:2a:71:a6:2d:73:09:9d:21:
         80:f0:7d:4d:0a:c0:77:1b:4b:44:7f:24:dd:b6:1d:6f:2d:61:
         b4:cb:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org