Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137362e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3137362e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          5Uf/O+5no6OEhyVSVMo9V461bSbldKQknDNEf3+g3pA=
Subject key identifier:   F0:65:0D:ED:E6:D3:D1:61:8D:1A:C0:72:E5:EE:2E:63:0B:78:03:F0
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       56936148400BC810013F66129528191255C009AC
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137362e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:08 +0000
ROA not before:           Tue 05 Mar 2024 17:41:08 +0000
ROA not after:            Tue 04 Mar 2025 17:46:08 +0000
asID:                     262589
IP address blocks:        190.94.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:93:61:48:40:0b:c8:10:01:3f:66:12:95:28:19:12:55:c0:09:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:08 2024 GMT
            Not After : Mar  4 17:46:08 2025 GMT
        Subject: CN=F0650DEDE6D3D1618D1AC072E5EE2E630B7803F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:25:c0:b5:66:a3:ef:7d:33:13:01:88:fa:db:
                    61:d7:90:9a:f0:fa:1f:ae:00:4c:04:c8:65:f0:26:
                    46:5a:79:ac:bd:9c:6f:ae:9b:25:1c:c1:d9:5e:e3:
                    cd:3d:b6:97:37:01:d7:0a:9a:9b:6f:19:39:03:9d:
                    71:ce:bd:66:d9:d3:5b:1a:9c:1f:5e:21:33:4e:16:
                    97:6b:68:45:e2:26:d0:4c:85:6b:28:45:83:35:da:
                    73:b3:89:b4:f5:53:03:75:20:c0:fe:a0:19:f5:2c:
                    bd:49:24:12:87:f4:ed:bc:09:64:93:bc:43:ec:00:
                    97:b4:40:2c:5f:a7:3a:fa:23:aa:bd:cf:4a:9f:19:
                    98:67:fb:56:94:2a:39:3e:1d:46:b7:26:46:da:ab:
                    2f:f2:bc:92:4d:78:49:80:f1:6f:0b:15:c0:0b:6b:
                    9d:e4:db:11:df:f8:12:86:ae:7f:29:fc:9c:9d:ed:
                    9d:b9:c7:31:6b:c8:d8:21:b7:7a:54:8e:fa:7e:7e:
                    98:c6:0f:2b:6c:27:9b:52:6c:46:51:67:94:02:8e:
                    32:ec:ce:31:11:95:71:70:2f:e9:5b:a6:52:8b:c6:
                    2c:53:30:e3:67:55:29:d2:d6:79:49:19:35:1b:05:
                    e5:69:dc:1a:41:47:9e:38:d1:08:de:84:d4:07:11:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:65:0D:ED:E6:D3:D1:61:8D:1A:C0:72:E5:EE:2E:63:0B:78:03:F0
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137362e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:15:7b:13:7a:7c:ee:e6:5c:81:4f:67:00:dc:3c:12:c0:
         60:d6:ac:a4:87:18:eb:77:39:e9:97:71:e6:30:3e:8e:08:f6:
         fa:b3:ee:b2:dd:e0:06:3a:15:ba:69:c4:fb:64:23:cd:21:55:
         d6:62:22:e8:de:48:0e:15:e3:ab:92:53:26:cb:93:b3:bc:16:
         e5:dd:78:32:e0:85:34:93:4e:23:cb:df:94:fb:ae:1c:cb:b8:
         3e:77:fa:28:74:a2:bb:8a:21:bf:f1:a8:39:21:31:84:05:fc:
         5f:21:f9:3e:75:50:49:00:33:45:75:17:70:b6:b8:d0:2f:5c:
         c4:d9:4d:2f:58:12:70:8d:64:73:11:af:4f:32:ad:cf:7b:30:
         93:ad:e8:e2:c4:9f:ea:45:55:7c:7f:40:5f:c0:e0:fe:a0:bb:
         cf:d7:50:9d:21:ae:72:a3:b8:6d:2f:71:41:51:38:24:b4:ab:
         db:25:cd:ad:7f:22:26:33:73:2e:b3:36:cd:e8:eb:c5:f6:b8:
         9e:08:85:7a:fb:d7:51:aa:a2:f4:4b:16:22:c1:93:b3:2e:e5:
         13:0b:15:06:37:aa:48:21:c3:60:08:77:89:58:fb:48:83:27:
         3c:97:96:ef:88:07:33:c3:2a:19:e1:20:6a:2f:21:e2:e2:23:
         9f:74:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:01 2024 by rpki-client on console-fra.rpki-client.org