Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa
File:                     3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa (raw, json)
Hash identifier:          2jh18ojK/H1tO3PB895JSwZieTLTcbNK2mjYS487PEU=
Subject key identifier:   26:72:4B:3A:F3:B3:39:7F:08:DC:BD:71:BD:19:93:5C:33:D0:DC:36
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       01F9032E8662D2774ED12E5B9D0DF67CC8742AC1
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa
Signing time:             Tue 05 Mar 2024 17:46:12 +0000
ROA not before:           Tue 05 Mar 2024 17:41:12 +0000
ROA not after:            Tue 04 Mar 2025 17:46:12 +0000
asID:                     262195
IP address blocks:        190.94.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:03:2e:86:62:d2:77:4e:d1:2e:5b:9d:0d:f6:7c:c8:74:2a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:12 2024 GMT
            Not After : Mar  4 17:46:12 2025 GMT
        Subject: CN=26724B3AF3B3397F08DCBD71BD19935C33D0DC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:df:2a:b4:40:73:fb:02:d4:d8:b6:39:68:
                    5f:d2:94:6b:da:22:75:55:bd:77:b0:9d:71:4c:07:
                    0b:9b:f1:e3:ce:6b:3c:92:b3:56:ba:b4:b9:de:aa:
                    28:39:5c:3f:0c:57:cf:ad:ab:c9:8b:3b:0b:6e:c3:
                    28:7e:c3:75:e8:02:aa:cf:a1:ee:d4:1c:f6:75:64:
                    b1:a0:ea:9e:fb:70:7a:f9:fe:74:79:de:c3:0a:2c:
                    49:15:76:2d:99:32:82:78:db:e6:84:6c:36:b0:fa:
                    5d:33:e6:02:d2:83:fe:82:3e:d8:a3:ef:4a:be:ac:
                    6f:3b:81:19:fc:54:24:9f:aa:07:34:49:2c:d7:35:
                    a6:f4:21:3e:18:a0:06:d9:e7:06:68:80:59:7b:b3:
                    4c:fd:c7:7b:c0:3d:95:b6:c6:09:63:76:13:c3:8c:
                    36:2e:00:c1:de:ee:99:3e:d2:79:19:bb:f9:67:7a:
                    10:91:9a:8f:89:92:95:0d:1c:d4:b2:bc:c4:c5:c7:
                    d3:cd:b5:6d:f6:b9:20:e9:0f:3e:ff:fa:ca:14:44:
                    f4:41:9d:3e:d2:85:fc:0f:84:f5:8e:4e:97:de:19:
                    0a:45:fa:79:0d:35:88:43:67:e2:9b:f2:e0:c4:ea:
                    89:58:64:eb:93:ff:e0:b0:c5:06:d2:18:72:44:a8:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:4B:3A:F3:B3:39:7F:08:DC:BD:71:BD:19:93:5C:33:D0:DC:36
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:01:fa:13:c1:45:1f:f3:45:bc:be:e7:54:af:89:40:7f:33:
         44:33:cb:35:45:39:d0:61:70:7d:b6:be:92:21:01:4b:9c:d8:
         94:49:4b:ae:a4:24:64:60:e4:04:d9:be:0a:6c:ff:37:20:c3:
         98:2f:d0:1c:27:09:0a:95:f3:f9:79:7c:9b:64:a1:41:57:5e:
         57:3b:28:d8:ae:c3:90:4c:1d:c8:67:c3:20:6c:d2:d7:9f:ad:
         00:41:0f:15:76:e1:f2:eb:dd:95:39:58:71:39:7f:91:f9:38:
         a9:2d:fb:a6:62:05:22:c9:1c:86:80:02:00:83:7a:6d:0d:4c:
         90:16:f1:f1:a1:db:66:ff:55:a6:1d:3c:e5:9a:74:37:a6:de:
         90:dc:55:55:54:d7:71:5e:4f:45:84:d3:6a:6b:fb:3f:22:e8:
         6e:2a:7b:36:6f:b2:ba:91:9e:08:df:0a:8a:9a:23:75:f0:07:
         76:e8:76:46:65:79:0f:95:39:ec:2d:06:e2:48:74:9c:c0:f0:
         85:5d:9a:14:1c:be:f0:ad:6f:4b:7b:38:95:d3:a8:d6:af:75:
         b0:87:11:c1:67:e4:3a:1d:2a:f1:93:fc:11:1d:02:68:8b:93:
         c1:03:95:e1:8a:f0:27:21:b4:da:bc:07:e8:0a:ff:e9:71:61:
         f4:5b:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org