Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138362e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39342e3138362e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          sexOc/4WeufSL94vSsS09027qxcZsz2ZcLHFPZzrRO4=
Subject key identifier:   55:1D:19:42:81:B8:6C:A8:85:81:2E:8C:F1:6E:0B:3C:39:0A:1B:5C
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       246096621450902DEC2E563E34F368477292587B
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138362e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:46:11 +0000
ROA not before:           Tue 05 Mar 2024 17:41:11 +0000
ROA not after:            Tue 04 Mar 2025 17:46:11 +0000
asID:                     262589
IP address blocks:        190.94.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:60:96:62:14:50:90:2d:ec:2e:56:3e:34:f3:68:47:72:92:58:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Mar  5 17:41:11 2024 GMT
            Not After : Mar  4 17:46:11 2025 GMT
        Subject: CN=551D194281B86CA885812E8CF16E0B3C390A1B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b3:f0:fa:78:12:89:7c:30:31:75:69:b8:50:
                    31:6d:70:78:6d:77:78:77:fa:a8:00:62:30:39:00:
                    ff:bc:14:38:bd:b5:e4:dc:d0:f7:05:c4:36:2c:f8:
                    bd:7b:af:06:ac:d7:62:14:ef:bf:ac:cc:4f:f1:cc:
                    73:3c:38:d9:a0:4e:1a:d0:86:80:80:43:38:28:1b:
                    d8:a5:c2:31:9a:f3:51:d7:f6:88:9f:88:d2:6f:78:
                    63:0d:21:cc:88:be:95:14:23:b5:0a:0e:ad:18:53:
                    cd:2e:88:ff:32:38:02:30:08:84:2a:d5:a3:5e:38:
                    b1:86:41:8e:ac:42:f3:e5:c8:6d:05:6b:61:c8:cd:
                    16:3a:54:58:36:55:7e:25:0e:7e:ca:21:3a:8d:9b:
                    50:c1:da:f2:34:19:96:1e:80:40:f1:d5:67:00:67:
                    6c:0b:56:27:f2:68:49:62:fc:1d:ef:76:9a:b1:5e:
                    1b:f0:ff:6f:85:f5:42:c2:eb:24:79:d6:32:f6:5a:
                    a4:2c:18:ad:17:59:1e:1d:b2:04:48:18:5e:2a:6f:
                    f5:51:57:97:d5:f2:02:c3:41:f0:ba:61:31:f7:9f:
                    4f:72:d0:07:36:90:ce:43:5c:22:aa:3d:75:0f:cd:
                    83:1b:6f:04:c0:b3:5d:10:e0:16:db:3d:9d:6a:2b:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1D:19:42:81:B8:6C:A8:85:81:2E:8C:F1:6E:0B:3C:39:0A:1B:5C
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138362e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0b:bc:ae:5b:7b:82:46:3b:f9:8f:45:8a:d7:04:15:1e:42:
         25:f2:66:56:dd:94:cc:b8:4e:82:ed:e4:9d:cd:7d:58:6b:02:
         3a:e5:d6:e7:d7:e3:9d:35:39:db:4f:0b:f4:10:fd:46:46:f6:
         27:4b:fa:1f:54:83:02:64:ea:0a:4b:f3:91:2b:aa:d8:0f:50:
         a0:ee:aa:d4:26:71:2c:89:ab:47:0c:db:3d:ba:5f:d8:2f:75:
         30:1e:22:a7:56:52:e1:54:67:3a:2a:ef:a1:11:23:5b:08:78:
         c0:28:e8:8c:06:9b:c8:ac:d4:c0:e9:eb:cc:0e:0c:fc:e9:ee:
         2a:b7:28:dc:c2:a9:04:fa:06:9d:e5:c9:25:a1:92:d9:c6:66:
         b0:52:7c:86:0f:63:c0:5b:1c:e4:8d:c1:90:36:2f:6b:54:e2:
         c6:b4:01:c3:cd:be:0d:07:40:42:25:3b:69:7d:da:ce:44:20:
         7b:68:36:62:ac:fb:87:d5:4d:e8:2f:62:0c:e2:61:20:fd:86:
         f7:81:bd:a7:fc:c3:c3:1d:9f:10:7c:17:e6:8b:2a:cb:15:e4:
         d8:f2:1b:50:5a:0f:5f:f9:ab:13:38:22:f6:ef:6c:94:85:15:
         8b:a4:c6:b8:6e:6a:7e:3c:a9:3d:45:22:d5:1c:e4:12:66:64:
         d9:4b:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org