Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137392e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3137392e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          AIwSHSN9DajcLI3Sif5/ZkA1ngmHZlPYb77tkIIAZss=
Subject key identifier:   92:19:B6:18:D2:76:2E:96:D5:FF:BA:F2:A2:51:F9:38:48:C5:66:84
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       63F91F6C19B455A5F11FB90006133B804E39A0A2
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137392e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:10 +0000
ROA not before:           Tue 05 Mar 2024 17:41:10 +0000
ROA not after:            Tue 04 Mar 2025 17:46:10 +0000
asID:                     262589
IP address blocks:        190.94.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f9:1f:6c:19:b4:55:a5:f1:1f:b9:00:06:13:3b:80:4e:39:a0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:10 2024 GMT
            Not After : Mar  4 17:46:10 2025 GMT
        Subject: CN=9219B618D2762E96D5FFBAF2A251F93848C56684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:1d:ef:69:49:ba:49:6c:b8:dc:37:fb:5b:
                    f8:3f:57:15:4c:1a:4c:69:d6:0c:51:ef:ca:09:72:
                    b9:16:23:13:5e:bf:b9:6f:4f:b8:66:7e:7e:5f:df:
                    1d:7f:5b:64:ca:bb:18:75:25:ba:6c:6e:78:d0:9e:
                    3c:75:f9:a6:83:60:fd:43:17:8c:ca:71:ea:5b:f8:
                    0d:37:4a:31:f8:65:bc:60:55:29:f5:ec:a1:d6:6c:
                    72:e7:b1:e8:a7:aa:3c:c9:53:23:e8:54:f0:38:88:
                    65:52:60:f4:ad:1a:c5:04:79:4b:b0:e9:40:30:c5:
                    8d:6a:4f:77:2b:a3:69:c7:c4:13:b0:1a:14:e4:ed:
                    02:b6:11:23:b5:1c:ea:0a:6c:a8:19:b7:47:1e:5c:
                    02:7c:25:4c:20:ce:cc:4c:4f:eb:ef:38:6a:b7:6e:
                    58:cc:3e:1f:eb:5d:66:a9:fb:17:15:a7:9f:9e:f5:
                    df:50:8b:f6:bc:21:11:78:4d:56:7b:37:41:39:d6:
                    96:7e:25:29:87:f1:54:3a:a8:1a:ae:56:a8:a9:27:
                    8a:5f:04:20:14:aa:ee:45:bf:02:48:41:21:4f:67:
                    aa:05:d8:98:e2:e1:72:0b:8f:40:fb:03:f0:4a:86:
                    5e:57:11:8b:5e:29:0f:43:ca:93:c8:45:e3:9c:f8:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:19:B6:18:D2:76:2E:96:D5:FF:BA:F2:A2:51:F9:38:48:C5:66:84
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3137392e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:86:8c:e3:16:cb:56:7d:5c:e7:06:94:d1:c6:39:d5:3e:b9:
         c7:47:67:99:8b:fe:74:ea:82:2f:4f:1b:18:dd:4e:07:a9:48:
         93:e8:4b:22:e6:bb:31:c5:dd:4b:71:72:58:17:09:63:51:4c:
         2d:eb:a9:0a:c6:f4:f5:ab:3a:3b:cd:45:37:d4:ed:ac:d6:28:
         b7:d3:68:35:d7:c2:cf:13:9d:91:54:f6:1a:0c:4d:c3:f2:e9:
         43:21:f1:b5:29:c1:c4:9a:50:01:5a:08:08:86:7a:e7:7d:5e:
         e0:04:85:a5:56:de:4d:ae:89:d1:f4:66:ca:6f:ca:24:09:79:
         fb:5f:d8:e1:ee:da:d0:8d:b7:54:f4:51:81:6f:93:0d:d7:ee:
         bd:4f:8c:fa:4a:9d:09:17:30:42:d9:0f:40:57:5a:dc:03:b1:
         ac:40:98:0f:0c:cf:93:e0:9c:45:7c:3c:de:26:3c:e4:3c:7d:
         6a:b1:a4:d9:3a:0e:fe:8b:b1:44:9b:ea:97:d3:cb:9a:5c:ef:
         fe:99:4f:5c:b6:c0:fb:2a:d2:86:9c:34:da:9d:e3:e4:14:b4:
         c4:e3:6f:dc:60:e1:82:aa:35:43:0f:5f:9d:df:db:34:35:32:
         1d:22:68:bc:a6:a2:06:84:4c:68:79:92:cd:08:47:1e:55:ab:
         b1:be:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org