Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137382e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3137382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          ucmfu0j+Js8hDgExpPIdbjhbyl8jt5DKJOab9CwUgZA=
Subject key identifier:   D0:A3:6F:BD:66:04:15:D6:94:E8:07:07:85:05:94:E2:1F:7D:01:E7
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       62533BA0664948084B97075BB7A0467540E8C4FB
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137382e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:09 +0000
ROA not before:           Tue 05 Mar 2024 17:41:09 +0000
ROA not after:            Tue 04 Mar 2025 17:46:09 +0000
asID:                     262589
IP address blocks:        190.94.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:53:3b:a0:66:49:48:08:4b:97:07:5b:b7:a0:46:75:40:e8:c4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:09 2024 GMT
            Not After : Mar  4 17:46:09 2025 GMT
        Subject: CN=D0A36FBD660415D694E80707850594E21F7D01E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:9c:5b:59:69:8b:48:53:1f:c0:8d:a9:a3:
                    81:99:7c:b8:c2:40:25:27:1f:57:b8:a4:c0:0c:92:
                    94:19:0e:f7:c4:55:48:6d:df:20:74:39:1d:54:9a:
                    62:e4:87:7c:65:60:19:90:23:04:fa:69:6f:66:d4:
                    86:9a:20:26:b6:c0:78:c0:99:ec:b3:ad:fa:a0:ac:
                    c9:17:01:28:86:e3:66:02:30:e1:a7:68:f3:bc:06:
                    2a:6e:cb:ce:87:bb:2e:5c:20:0d:75:1a:d4:f2:14:
                    45:2f:e1:01:06:b9:bd:0c:31:8d:4d:42:0d:15:9f:
                    a2:0d:98:8d:e0:49:59:69:ae:8c:fd:39:f9:3a:f1:
                    38:1c:9e:97:37:f3:d8:79:09:05:fd:75:ba:54:1a:
                    28:e3:25:eb:4e:a3:f3:9d:51:f9:65:5a:4c:53:c9:
                    26:8f:18:77:7b:c4:97:5f:b2:e4:b5:b7:28:69:ec:
                    af:38:f1:f7:bb:23:08:e5:d1:81:86:94:48:b2:e7:
                    ce:99:7c:23:85:61:16:2d:6a:6a:90:07:10:a8:2d:
                    16:33:a6:36:74:f7:05:62:78:35:33:0b:6d:a6:48:
                    19:28:27:ec:b2:10:5b:4c:3c:7c:44:07:89:40:41:
                    e0:00:5a:3a:a7:bc:9e:91:65:11:80:3a:f4:da:df:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:6F:BD:66:04:15:D6:94:E8:07:07:85:05:94:E2:1F:7D:01:E7
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:ae:3c:e9:69:29:23:49:5d:74:91:98:b1:3c:f0:5c:cc:
         78:5b:db:90:f9:fe:26:78:a0:aa:36:df:64:81:f7:34:b6:62:
         cc:74:f4:ef:87:09:0b:db:f5:f7:9d:17:9b:a7:ac:7b:62:39:
         29:f2:10:19:f7:cc:84:86:30:07:85:25:42:b3:f1:10:55:83:
         21:25:b9:8c:6e:70:a5:3b:dd:53:95:1d:00:ea:67:de:2f:bb:
         b6:d8:8c:3a:e9:35:8d:68:7f:45:7f:5d:d6:0c:9a:2c:8b:45:
         90:7d:86:f0:82:0d:30:8a:93:4e:bf:17:41:b2:3c:d4:4d:b7:
         a7:23:c3:02:66:70:c9:d8:e1:e5:75:0a:c2:5e:0b:88:60:08:
         2c:97:be:b3:3a:63:5f:6f:3d:18:74:c6:68:f7:12:47:4b:47:
         08:5d:71:97:7c:6d:73:80:d7:64:34:e7:8f:3e:f2:49:93:78:
         45:01:3d:82:ca:50:7b:19:e1:7e:4a:be:6e:cc:1c:8a:b8:a2:
         d0:de:39:a9:28:bc:6d:3a:d9:33:69:59:e1:4e:39:9a:30:2d:
         fd:5b:aa:0c:4f:43:d6:ce:04:47:23:c3:4c:9d:55:2c:2a:ad:
         46:28:7f:8d:20:40:8a:54:c6:b5:16:b0:33:77:f1:ef:22:b0:
         6a:cc:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org